
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af93068-2f23-3c81-85de-955db8f20581.roa
File: 0af93068-2f23-3c81-85de-955db8f20581.roa (raw, json)
Hash identifier: 2VmapCG3hXXl3rrZbx8OYBWHkeQZHvS0Sg8+bXjr54c=
Subject key identifier: F3:1C:23:60:21:8E:44:0F:E5:BB:32:02:C3:F0:D5:17:97:41:00:B7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584BA9329305CB87EA863ECB5A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af93068-2f23-3c81-85de-955db8f20581.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 401152
IP address blocks: 166.1.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:93:05:cb:87:ea:86:3e:cb:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=0c3cb6e8-483e-494d-975d-d3c7807ded38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:2c:c1:e7:6c:0e:ff:44:b8:51:c9:06:df:
b4:32:52:e0:e8:a1:98:14:a0:2b:b0:9b:9a:51:92:
7a:88:54:9d:a8:b8:a8:71:1b:05:36:66:e5:91:2d:
c4:17:f8:30:55:f9:4f:66:54:4f:85:72:be:ed:fa:
11:3a:34:3d:a7:9a:d8:46:1e:2e:21:4d:77:4b:f4:
60:f8:23:79:2f:6f:fb:8d:6c:48:90:3d:2b:52:95:
b9:03:6f:7b:22:12:f6:36:18:cd:f0:75:13:e0:4b:
e4:53:32:e5:66:00:77:b7:79:5b:44:39:0a:35:1b:
fb:85:ad:be:1a:23:05:e6:9a:88:8c:01:e9:20:35:
ed:29:ab:cf:d7:95:b9:89:07:8a:27:ab:85:0a:27:
72:3f:18:0d:1b:94:73:ff:e7:05:6e:6d:e0:37:96:
f4:f8:7c:16:22:f2:fd:90:57:ce:1f:91:bf:a3:c3:
d8:36:6e:a6:ab:b8:15:01:88:03:34:0e:18:72:88:
c4:35:f7:6f:f8:eb:1e:c9:f2:a9:e4:b7:5e:d7:d0:
ad:6d:07:69:5c:9f:e2:98:d8:11:32:cc:ca:78:e9:
a7:b3:40:6e:47:19:a0:5d:bc:fa:1b:f5:3d:91:dc:
d9:86:17:87:d2:e6:6d:e1:bf:91:60:3a:88:8d:b5:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:23:60:21:8E:44:0F:E5:BB:32:02:C3:F0:D5:17:97:41:00:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af93068-2f23-3c81-85de-955db8f20581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d8:a4:cb:88:ec:bd:fa:ec:08:a3:5a:90:9e:67:c3:28:6b:
e8:ed:bf:8b:2d:24:f2:2a:96:0a:07:9f:51:0f:d3:d9:f7:a1:
ed:54:bd:62:f5:d2:59:dd:dc:8a:f6:eb:bb:e8:04:8f:51:dd:
33:f4:8b:b9:b0:12:cd:31:2b:98:50:22:e1:73:4f:0e:51:bc:
d7:ed:38:b4:0d:2c:dd:ba:dc:29:64:2e:59:36:d3:69:05:cc:
b7:14:78:4d:7b:f7:ca:d5:bb:a2:95:82:93:24:2c:a7:9c:ee:
98:ff:51:24:93:e9:c9:c4:a2:7e:1d:22:a9:0c:d5:7c:06:45:
a6:d4:b4:27:83:8f:19:21:c2:8a:75:c8:49:5c:e7:cf:ca:f2:
12:cc:24:48:ae:cf:4f:53:11:c9:69:0f:34:04:dd:66:b1:c6:
e2:6c:db:db:b8:fd:a8:d9:84:59:ed:78:3d:9d:22:86:b9:95:
6c:65:30:82:d4:52:40:30:1e:4a:98:88:72:3e:3c:39:bb:f3:
75:c1:d8:45:67:68:a4:85:59:13:a9:9b:b3:94:6a:c0:70:fb:
42:97:d5:23:71:d4:b9:a5:f0:86:68:14:72:79:d1:ce:fe:ea:
71:fb:f6:26:76:55:08:99:74:25:a4:d9:65:0a:a2:1c:a1:60:
20:21:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:47:33 2025 by rpki-client