
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72582e93-c798-3280-b1b0-ce328dbcf57a.roa
File: 72582e93-c798-3280-b1b0-ce328dbcf57a.roa (raw, json)
Hash identifier: GFbvprHz8jtQYLG112RJ6/uKwKNi/FoYyi85l1CRAk8=
Subject key identifier: 74:49:B0:26:5B:CD:73:99:73:25:89:DA:9E:63:12:E4:33:89:DD:D3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584B987246C6074AD46518C10E30
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72582e93-c798-3280-b1b0-ce328dbcf57a.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 7385
IP address blocks: 108.165.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:46:c6:07:4a:d4:65:18:c1:0e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=5872c84a-86ff-468c-92ae-fb953e74ae4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:71:37:62:c5:56:41:b1:51:3e:71:f4:78:
40:44:21:11:a7:c0:e9:0a:b6:b7:2b:6b:bb:01:10:
ec:0c:f9:ba:c2:e6:c7:4a:79:d3:22:82:4f:cf:bb:
f1:2d:96:b6:50:02:b5:b6:79:76:f1:46:6c:5f:de:
f8:ea:be:78:a0:bc:44:e4:3d:5c:03:0e:6e:21:d2:
e9:28:ab:29:71:27:f4:fe:c3:27:47:ec:bf:79:d4:
52:bf:af:b3:84:e9:6c:31:15:b8:7d:8f:4c:e1:43:
45:da:e1:17:80:a8:e1:67:7f:c6:19:6b:d2:54:59:
d6:a9:f7:8d:23:9b:b1:69:14:b1:5e:9e:8a:b5:2c:
8f:77:98:56:77:85:6f:bd:6e:40:98:12:c8:be:ec:
3a:c7:37:52:fc:c9:65:4b:ab:df:7e:36:92:7c:5d:
39:df:5a:b5:bf:b3:f9:c9:66:ac:92:90:1e:99:ab:
ad:c5:e2:db:0f:a1:9b:1a:97:97:65:93:19:d4:43:
dc:18:60:57:d1:f9:17:8d:72:98:44:23:83:49:ca:
77:22:e8:55:f7:4e:81:e5:44:40:2f:03:c7:b3:39:
d6:2b:57:20:9e:47:c5:5f:80:ba:37:1c:2a:aa:f0:
70:30:98:b5:d3:b2:c2:b9:ab:e2:4e:bd:b7:4c:c8:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:B0:26:5B:CD:73:99:73:25:89:DA:9E:63:12:E4:33:89:DD:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72582e93-c798-3280-b1b0-ce328dbcf57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:95:0d:5f:98:9e:af:2e:45:45:c2:4f:eb:0f:86:d5:9d:b6:
fa:76:10:79:6c:c4:f4:eb:e9:f0:b1:0c:5d:1e:44:75:e1:de:
93:f7:95:8f:ce:47:50:52:cf:69:70:2b:e4:2c:1b:13:7e:89:
0e:de:a5:cd:05:e0:59:73:08:98:64:a0:7d:b3:21:37:30:dd:
22:0b:bf:03:6f:ba:f1:00:97:5a:56:40:95:d1:d7:a6:c1:1e:
ef:d7:cf:c0:30:e3:27:29:be:3e:d3:61:ad:47:67:b1:93:ac:
38:b6:29:48:fc:d5:44:5e:89:35:70:9c:9b:1f:0c:19:87:a8:
e0:8c:6f:14:9b:aa:94:6f:bb:1a:5b:3c:49:cd:b7:1b:91:64:
2f:13:26:12:49:e3:7a:26:2d:2d:2b:eb:b4:ac:a5:3f:04:08:
6f:a8:4b:7d:7b:13:79:cf:ab:ee:84:50:67:86:4f:99:24:08:
c2:74:f3:12:b4:be:46:74:e8:12:bf:f2:41:06:a7:e8:7c:41:
02:4f:b0:15:2b:fa:cd:4a:4e:78:9a:f4:f7:4d:32:65:0c:29:
27:ca:02:79:34:54:ae:d3:50:b9:9c:9b:23:9f:2b:56:44:89:
8a:9e:b1:19:05:59:ba:84:19:43:f3:d1:bd:8e:cf:fb:ce:38:
f5:2e:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:49:32 2025 by rpki-client