
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2406a184-fd41-3cd5-bbb2-aa212dd1a169.roa
File: 2406a184-fd41-3cd5-bbb2-aa212dd1a169.roa (raw, json)
Hash identifier: UC1fTe00KaWGhQIFLW15MWEhWiHnaj0OUZFO/m2RciU=
Subject key identifier: 31:91:C9:6E:41:FD:87:3D:D1:79:E5:3E:20:70:60:15:CA:FA:D6:13
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584BD675646F7475CFCCC5852B40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2406a184-fd41-3cd5-bbb2-aa212dd1a169.roa
Signing time: Wed 12 Nov 2025 18:07:13 +0000
ROA not before: Wed 12 Nov 2025 18:07:13 +0000
ROA not after: Tue 10 Feb 2026 18:07:13 +0000
asID: 58212
IP address blocks: 108.165.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d6:75:64:6f:74:75:cf:cc:c5:85:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 12 18:07:13 2025 GMT
Not After : Feb 10 18:07:13 2026 GMT
Subject: CN=edf19d07-d6be-42dd-97de-721a74639fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:06:f8:bc:59:15:06:1e:89:33:ea:65:e8:
c6:2e:05:77:1e:7f:98:88:85:81:7e:4e:4e:61:c4:
d4:3e:74:d9:ae:20:4e:7e:b5:13:90:60:9d:3c:5f:
1f:68:0a:ea:e2:2a:65:34:76:dc:d9:70:7a:fb:31:
bf:6c:42:ea:93:ef:e8:cb:40:4d:7a:de:65:bc:14:
38:a5:a9:0d:06:4e:0c:f0:a8:53:5e:31:4f:77:0e:
90:fb:3c:58:77:b6:f0:2f:75:3d:b1:86:36:72:1d:
78:94:12:fc:9a:33:27:1c:03:34:e9:6c:d5:8b:e3:
48:df:43:57:e6:ca:35:52:f3:a7:a6:79:14:e0:95:
fc:96:2a:0b:bf:15:14:32:de:1a:20:1f:62:35:35:
e7:c8:a1:d7:99:31:d2:39:60:69:61:db:ee:41:84:
5e:fa:cf:cf:50:d4:a1:e8:d3:4c:9d:00:bb:b3:46:
71:38:a8:59:78:8f:48:42:66:2b:c3:39:67:b1:e6:
87:46:9e:0d:f0:87:c3:ff:8b:f1:8c:08:41:df:2e:
8d:74:40:b1:f0:77:15:29:11:57:3a:28:64:1d:4e:
75:61:bf:c7:9e:c3:0a:d5:a8:f1:2d:a4:2e:99:8b:
b9:1c:81:27:41:fa:4d:47:fb:c8:e9:43:a5:98:fa:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:C9:6E:41:FD:87:3D:D1:79:E5:3E:20:70:60:15:CA:FA:D6:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2406a184-fd41-3cd5-bbb2-aa212dd1a169.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:69:42:d2:5b:d6:24:90:94:f4:be:cf:bc:d4:f6:e8:88:16:
49:ba:7a:16:ff:a4:7e:f0:d8:e9:91:29:28:7a:60:fc:90:6d:
04:eb:03:cd:13:69:a3:9a:68:39:cf:41:58:05:61:f8:d1:c1:
ec:23:f0:4c:69:e9:6e:0e:2d:c0:31:52:cd:af:7c:ae:78:6c:
63:87:a9:b5:bf:a9:31:be:7a:eb:c3:36:06:89:6a:f7:8d:90:
48:5e:79:f1:71:8a:e3:c4:b9:ae:bd:80:a0:6f:0b:3d:8c:13:
fe:8d:63:49:50:ed:97:91:84:88:2d:4d:62:46:f7:cb:ec:35:
97:18:2c:ce:37:65:ec:09:74:de:33:3a:a1:0b:5a:08:55:bd:
b7:98:22:00:6e:6d:f5:e6:5a:28:fe:00:65:e3:00:65:22:08:
2e:7e:9a:9b:2e:d7:0d:39:ba:4f:7d:cb:15:69:21:b3:09:16:
ba:22:46:3b:e3:1d:8f:36:8d:7d:ef:2b:6b:a4:c3:6a:80:ab:
90:de:58:f9:e0:22:38:ab:98:45:41:96:45:de:c6:b4:3e:24:
cc:db:d5:96:d7:58:a0:79:1f:8d:46:8a:00:fd:bf:7c:d0:e3:
b2:3c:39:22:92:fa:e1:4b:5d:d0:b4:db:84:12:c1:77:05:2b:
9e:90:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 13:53:40 2025 by rpki-client