
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa
File: 65591e67-0914-3f45-985e-ed195ce13ef4.roa (raw, json)
Hash identifier: HucB2n/WHWZP2L4UQISCm2N8xooTAsXXl/GYAN9SHog=
Subject key identifier: 6C:F7:D3:12:39:25:BF:9E:8B:AE:AF:AC:44:1D:4F:7D:5D:34:4F:EC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA9328EDC03D2DC30E2275400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.68.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:8e:dc:03:d2:dc:30:e2:27:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=851f0109-df37-4790-b640-0452bd76360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:4d:45:e2:53:4e:a2:fd:8b:95:60:0b:08:
45:d1:86:68:45:10:68:fb:d6:e6:19:92:b8:2a:8b:
8d:a1:27:6d:49:4f:30:ed:66:92:c2:02:23:10:c6:
f0:7c:22:4b:8f:fd:fa:3e:dc:61:70:46:65:69:a8:
35:f8:de:62:f6:ad:41:c9:b2:6b:08:6d:87:28:5f:
01:c3:2b:4a:c6:97:57:9c:cd:7d:56:5a:16:aa:8a:
92:10:8c:0d:a3:95:ef:bf:c4:48:0f:b1:c2:b0:16:
bf:9f:fc:5e:a2:03:f2:1f:54:e3:5c:f3:07:03:c5:
39:81:f2:a1:f9:b3:f1:1c:99:ef:43:aa:41:2d:55:
10:fb:4d:39:6b:5c:04:54:75:1c:63:13:87:76:5d:
8f:b2:94:f5:8b:50:f5:ba:7c:95:42:cf:31:d2:cf:
57:41:29:3d:52:b4:cc:ef:96:d6:94:19:d6:f3:fa:
db:f2:d5:b8:b5:69:8d:3b:8f:a3:ff:0c:56:17:3c:
67:3c:fe:df:1d:6c:24:c8:18:84:b8:92:d8:06:d7:
36:80:56:7a:da:10:86:d7:0c:96:5f:b8:81:27:bd:
55:46:a6:7f:00:c5:70:d9:d1:f9:61:96:42:13:da:
e5:e0:14:88:7a:32:6d:a6:77:ad:16:19:08:6a:7a:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:D3:12:39:25:BF:9E:8B:AE:AF:AC:44:1D:4F:7D:5D:34:4F:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:31:15:aa:c9:d2:b1:02:4b:e7:82:35:9b:01:87:1e:cf:7f:
4a:52:64:0b:21:b2:b1:7b:79:55:af:8c:76:83:2d:01:b9:23:
20:66:52:5a:31:3e:df:39:e0:f5:e7:a5:1a:31:4b:1b:ae:87:
75:de:8e:c2:20:9f:19:ea:f0:26:1e:90:8a:66:55:e7:6c:cc:
b6:d1:e9:bd:ce:d6:53:aa:c5:ac:ff:fb:c8:76:3b:0c:7c:5a:
a7:a5:09:09:33:a0:2b:0c:34:c3:a6:d6:8f:e3:4d:c6:fe:1f:
26:e7:2b:48:fc:41:b5:26:2a:f3:a0:6a:2d:7c:60:38:9b:eb:
45:d7:21:9f:d9:ba:ad:96:53:df:19:ea:ad:8c:9c:5a:8a:2b:
c1:02:f3:51:4a:45:d6:37:1b:9c:f2:f4:dc:e7:fb:11:69:fb:
d2:22:56:ed:4c:b5:90:00:d6:80:fc:7e:cd:46:65:79:2e:07:
fc:5d:10:61:39:8b:84:dd:af:48:d7:6f:d0:e3:00:e4:86:3b:
dc:32:f4:61:27:56:39:19:d0:22:1d:b3:30:dd:ed:35:94:74:
03:2a:0c:3d:ae:75:29:53:5d:ad:32:a3:1d:02:05:a3:10:05:
2f:13:e6:3a:b6:36:ff:17:d5:36:85:82:c0:69:45:34:d4:b5:
ad:78:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:02:42 2025 by rpki-client