
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa
File: 6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa (raw, json)
Hash identifier: HCK/VCKmT4ah2v4WNNiGK3FvxdAioDG6BFtLltdBCMo=
Subject key identifier: A3:15:DC:C6:72:B0:4C:45:D0:E3:65:1D:C1:23:59:21:4B:8E:9E:5B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA7CD0E51C8A63A0008478E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 172.69.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cd:0e:51:c8:a6:3a:00:08:47:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=7bf4013e-2974-4020-a382-aaa2d7d1c70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:4c:34:63:e4:13:44:4b:a8:61:ca:50:8f:
82:9b:f9:31:31:96:8c:1a:b3:b3:04:f0:ff:d7:7d:
08:93:9e:6d:74:eb:b4:de:31:6c:5d:8b:4f:50:26:
37:e2:88:bf:9b:02:20:df:12:e0:e4:35:8e:a7:16:
e9:2f:9b:30:46:33:75:00:48:53:14:e5:8c:3f:7c:
52:c5:a4:78:22:c4:85:cc:d8:ac:52:29:5e:79:97:
49:d2:ed:bc:9a:37:65:c9:bd:b1:20:33:b7:69:ae:
8f:53:5b:ab:f2:bc:06:4e:1b:d3:fd:5e:90:71:4b:
85:68:ad:12:ff:6b:a1:82:e9:e5:95:d6:03:bd:01:
43:ef:54:b8:05:0c:05:b4:23:7e:d3:4d:72:92:62:
c2:b2:88:e8:37:a1:c3:af:77:83:d3:07:0d:46:82:
75:88:8b:e0:f9:07:a9:2a:b2:a0:50:be:9d:b1:45:
8a:a0:cf:d5:da:5c:ca:6b:0f:fe:fa:9b:c9:94:a3:
d1:14:a1:5b:14:c7:80:93:b9:dd:14:e2:0c:01:6d:
0b:58:32:5e:e0:57:89:6c:f0:89:75:0e:92:91:bd:
c6:51:1e:79:14:f9:82:a7:20:38:15:64:57:a8:06:
75:1b:8b:0c:d9:4d:f7:60:d8:d9:20:bc:ac:dc:ae:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:DC:C6:72:B0:4C:45:D0:E3:65:1D:C1:23:59:21:4B:8E:9E:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:c0:6d:1a:05:c8:ab:78:c8:13:dd:9c:87:c9:8d:46:76:12:
d8:f8:c6:a6:2f:73:83:ed:f0:93:f0:31:70:50:21:41:46:b6:
f0:c7:21:a4:92:d0:05:84:c5:9c:5f:92:f9:1d:3c:49:22:46:
5b:b4:ea:9b:f8:8f:bf:82:fe:b8:d5:bb:47:2c:a2:ad:f6:74:
9c:ba:1f:d0:a0:ae:4f:06:1a:12:88:72:e5:3f:29:ba:4b:3a:
ee:a3:a7:53:74:82:2e:da:a2:2d:3e:52:27:6f:02:97:aa:af:
49:48:16:cd:41:1a:52:03:2e:d3:75:f6:a4:f8:f8:62:63:4d:
24:84:37:e0:37:8a:eb:96:98:60:10:13:49:c3:46:0c:8d:0b:
2d:4f:ed:2a:23:bc:7b:37:c5:34:20:67:6d:41:b2:00:64:b4:
ec:c4:e2:9a:02:88:3d:7b:12:5e:be:5c:66:75:d5:f8:c8:9e:
4e:a6:b4:2e:8e:01:fc:e9:3a:79:18:48:2e:ee:56:39:bc:41:
6d:bd:e5:46:d6:ee:ad:90:83:8e:92:55:c8:0e:10:1c:17:10:
7f:4c:c1:1c:f2:96:b7:81:ec:3b:76:96:0d:7f:6f:b3:75:fc:
f8:b4:47:00:15:11:9c:e0:e2:60:b5:8d:1f:a8:06:ca:d7:33:
0d:5a:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:31:08 2025 by rpki-client