
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bd30e5e-f57b-38ca-a453-6c2b23d85135.roa
File: 4bd30e5e-f57b-38ca-a453-6c2b23d85135.roa (raw, json)
Hash identifier: AWSfqCOB/gdI1UEFiebdfmF1Nz6FZVbWhO8GVyOAz+A=
Subject key identifier: E8:24:9F:4D:75:8A:1C:17:8F:99:03:84:09:EE:83:A5:DE:FC:17:10
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584BD9917A552CB26A4F310B82A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bd30e5e-f57b-38ca-a453-6c2b23d85135.roa
Signing time: Thu 13 Nov 2025 20:51:14 +0000
ROA not before: Thu 13 Nov 2025 20:51:14 +0000
ROA not after: Wed 11 Feb 2026 20:51:14 +0000
asID: 401152
IP address blocks: 108.165.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d9:91:7a:55:2c:b2:6a:4f:31:0b:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 13 20:51:14 2025 GMT
Not After : Feb 11 20:51:14 2026 GMT
Subject: CN=b4fe864a-8d10-465f-bfea-cc41f2e7aad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:75:eb:2a:18:3f:1a:44:06:30:65:e2:4b:
84:a5:eb:4d:67:27:4a:66:2c:02:b8:3e:fd:34:fe:
d1:f8:08:dc:57:74:18:8c:f4:d0:3a:5a:2d:e0:f4:
9a:c0:ed:49:49:5e:ba:b9:a5:b8:50:f9:c7:b1:a9:
81:b9:5e:26:72:aa:a1:43:04:09:84:d0:4f:00:a0:
63:c1:30:dd:06:05:74:7e:e9:26:9b:56:34:5e:59:
90:04:e1:bb:63:13:a2:11:27:94:53:0c:85:92:64:
aa:05:87:9f:c5:70:a4:9f:4d:9e:88:71:5c:fb:21:
4d:46:ce:a8:35:2a:17:72:71:34:ee:2c:83:93:1e:
b8:37:8b:dd:0a:dc:15:0f:f8:00:bf:93:6c:b1:07:
e5:21:bb:0d:35:ad:a4:bf:32:5e:53:f7:77:7e:fb:
06:e6:4e:95:81:71:61:c5:d6:5f:51:a8:78:56:91:
d2:27:55:97:0b:b2:96:7c:6a:48:22:4b:77:6e:fb:
2e:0a:93:0c:18:4a:8b:13:d2:f1:fd:f0:e3:6e:d3:
a3:81:6c:7a:0d:06:ca:1b:fa:3b:20:be:b7:9c:a6:
57:93:40:3a:eb:90:f3:99:0e:9e:2d:53:69:3f:40:
08:d6:f3:ed:71:5b:e6:5b:39:4c:01:56:5e:e6:1a:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:9F:4D:75:8A:1C:17:8F:99:03:84:09:EE:83:A5:DE:FC:17:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bd30e5e-f57b-38ca-a453-6c2b23d85135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:7f:48:ee:d2:a7:fa:89:93:c9:ef:05:7a:50:80:d5:49:8a:
7d:65:ae:e5:a0:ba:dc:f6:2c:80:16:1f:8d:25:6a:10:05:2d:
8e:3d:8e:27:26:1d:7e:92:48:0c:b6:de:97:ef:63:5e:8a:21:
a9:e1:ab:da:ee:86:c0:b3:b2:b5:a8:46:6d:a9:55:47:16:e0:
5a:18:6b:6a:fc:0b:5b:37:2f:42:2e:3d:5c:5a:90:a8:7a:30:
84:bc:7a:38:c9:64:0d:94:fc:e4:c1:d0:07:32:a3:61:84:56:
b0:c3:79:f8:f0:b3:38:98:e2:a2:3a:b6:d1:fa:74:02:c7:8f:
e9:fb:10:80:69:cf:7c:6a:de:43:cc:22:81:ee:6e:5d:0d:b0:
62:14:1a:f7:6b:7b:fd:ed:1a:48:ca:69:34:5b:79:22:59:15:
08:6c:ab:c9:99:c2:6c:fc:51:fa:3e:d5:24:3f:82:38:1e:09:
c0:2a:f2:e6:2d:e5:6f:0d:30:0b:55:1b:30:6e:25:19:84:e0:
f2:9a:3f:86:76:e9:cf:68:8b:be:f1:06:e7:84:3f:09:1f:53:
8b:2b:48:f7:77:02:c7:7e:28:60:ae:ef:80:6f:d8:28:cb:ea:
47:10:9a:9c:df:1a:de:7b:16:cf:66:b1:2a:9f:73:1d:cf:e3:
30:f7:57:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 13:53:39 2025 by rpki-client