
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7a78d3-2570-3428-914a-9a8565d63d19.roa
File: 4e7a78d3-2570-3428-914a-9a8565d63d19.roa (raw, json)
Hash identifier: FZaHQECspWJdqieRqLbBtm8P/0e4kFpYsq9n5JMDFr8=
Subject key identifier: 58:8A:E0:25:54:4B:19:22:DD:B5:51:EA:C2:C6:BC:18:17:32:3E:44
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BABFD1E5F8B8EFFAB7622EA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7a78d3-2570-3428-914a-9a8565d63d19.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.69.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:1e:5f:8b:8e:ff:ab:76:22:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=0f765e52-8f79-43aa-a0e2-d1f43c23dd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:bb:fa:45:af:3d:1f:19:4d:a4:d8:31:14:
9c:00:40:84:da:e9:9b:ea:3e:7f:cb:d7:9e:48:8a:
72:42:fa:1c:4d:97:a5:f0:fb:e5:37:0b:0b:0c:ed:
11:0b:1a:3d:b5:d5:c7:fa:62:d5:d8:89:e3:75:e2:
65:06:ec:3a:00:a1:8f:09:68:78:05:11:72:43:aa:
b5:96:6d:f7:34:07:60:7e:b1:33:27:78:86:ce:ee:
76:26:63:5f:62:57:70:c2:bd:3f:37:66:ec:8b:e2:
1a:2b:cd:54:3c:98:db:73:b6:e8:07:f0:62:e2:8f:
01:4d:95:9c:be:32:80:c4:9f:4c:c2:29:cb:7d:59:
fe:1f:6b:23:27:fd:59:b6:6d:f6:05:b0:a6:15:11:
f4:69:ac:ff:48:30:85:d7:9a:86:60:d2:81:d0:18:
de:2d:5e:24:54:2f:90:9b:85:7b:a3:f9:47:87:ab:
d1:cc:04:34:bf:2d:9b:7e:f3:ac:ca:34:85:d1:89:
95:05:29:b8:0f:3d:84:a3:4b:f8:d9:16:30:36:f7:
0b:0c:d7:93:f0:86:33:cb:b2:4c:9b:59:88:36:c7:
89:2d:ab:5a:5d:0d:21:65:b8:db:47:4b:66:d0:ef:
87:52:ce:23:ab:37:31:68:57:e1:92:dc:14:27:23:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:E0:25:54:4B:19:22:DD:B5:51:EA:C2:C6:BC:18:17:32:3E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7a78d3-2570-3428-914a-9a8565d63d19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:79:0a:bf:aa:27:3c:30:78:19:22:60:cf:76:b3:45:81:8e:
74:d6:25:85:3b:16:06:32:ff:14:29:c5:9b:36:10:20:3c:f9:
39:78:be:05:89:09:4b:d3:a8:84:f8:85:51:ff:c5:0e:0d:64:
8b:dd:3d:6c:ff:be:81:c8:90:5b:ff:d2:15:5d:0e:01:08:1f:
06:92:a8:64:94:fb:ef:d3:47:19:36:0c:a0:7d:bd:87:a3:2f:
3f:18:98:c7:ec:39:a5:96:42:7e:db:b5:ed:59:3a:d4:05:38:
8c:82:b1:24:b3:22:77:5c:f4:f2:93:12:a2:4a:77:7f:58:fd:
4d:8d:59:da:dd:f4:f9:b2:9d:c8:19:34:39:73:34:04:26:e4:
84:8f:b0:ee:16:a0:23:9e:b1:e4:82:3c:eb:7e:e5:57:7a:1b:
8b:97:34:5a:f6:58:dc:0a:37:76:b1:22:51:bf:95:50:26:1e:
6f:c8:af:a5:b4:94:51:69:c3:1e:f5:7b:bc:0d:6e:42:23:d3:
4e:86:0e:25:0b:91:f3:42:a1:d0:e6:bd:65:f9:84:39:c7:af:
ff:52:29:69:ff:46:50:40:f8:aa:76:42:cf:63:6c:b8:d9:9d:
97:60:4e:a1:c9:c2:0b:b9:f1:be:1c:5e:65:c7:5e:de:91:1c:
05:25:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:09 2025 by rpki-client