
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9efa5939-8f6c-3657-a274-f58c60efb555.roa
File: 9efa5939-8f6c-3657-a274-f58c60efb555.roa (raw, json)
Hash identifier: Rt1pbq8KA+pZR0PC6eUgWeC0R2ixkR8vKkxj+ru7BX0=
Subject key identifier: EA:8F:DB:5D:C4:1B:21:F4:FF:5E:59:8E:9B:74:D1:C3:C7:69:43:22
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA9328BA7D1311AE9316C0180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9efa5939-8f6c-3657-a274-f58c60efb555.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.64.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:8b:a7:d1:31:1a:e9:31:6c:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=58afdd03-eef8-43d6-af56-6b9068f2357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:40:46:25:c9:50:3d:46:5e:96:85:02:b4:
d4:aa:d7:27:44:8f:a3:cc:fa:d9:fc:03:2a:5b:bb:
f9:51:08:dc:73:c9:a7:bd:38:e6:63:e2:3f:ba:3e:
4a:9a:f4:d9:d7:36:ce:19:e5:29:1b:d5:91:d8:5f:
1c:8e:77:a0:9c:03:b3:be:70:b2:9d:4e:bc:88:43:
20:41:a3:25:8e:d9:a5:48:e3:7a:22:b6:b7:33:88:
ce:6a:15:c3:ab:bd:b7:14:ac:48:2d:6a:d8:b2:a4:
b6:d5:94:fb:dc:3a:8f:31:bd:50:10:f0:16:5e:e8:
80:14:4a:e1:81:11:a2:7d:46:94:a5:51:5a:28:a3:
11:0e:12:b8:69:97:da:c7:54:67:83:db:be:26:53:
e5:e4:38:48:7a:3d:04:26:b2:76:4b:4f:d4:54:40:
66:b8:19:a2:cc:db:4a:d6:54:0f:f2:02:a1:be:74:
2d:b6:a1:87:90:ed:e7:c0:88:e7:e7:8b:3e:07:57:
68:20:af:3b:b6:1f:ed:dd:47:e5:20:2f:35:a1:d7:
af:2a:85:eb:be:1e:2a:6e:93:b4:24:df:d9:9d:f8:
68:13:c4:8f:79:98:d5:db:89:21:2d:94:70:ac:bb:
67:39:a5:df:e0:d5:01:d9:ed:9c:82:8f:09:87:b6:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:DB:5D:C4:1B:21:F4:FF:5E:59:8E:9B:74:D1:C3:C7:69:43:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9efa5939-8f6c-3657-a274-f58c60efb555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ec:83:0c:3f:cb:f8:3d:2a:ea:28:05:8d:a6:e1:3a:67:00:
1f:66:77:12:83:6f:cb:d3:20:f8:3f:cd:a3:e7:9a:07:40:4f:
93:45:b0:db:5c:27:60:04:f1:e5:ae:4f:38:75:16:76:c6:00:
dc:35:ea:56:9d:2d:57:6b:e4:20:92:92:2d:9a:b5:66:ff:10:
09:a4:6f:31:81:ff:7e:41:de:ad:b4:9c:e6:e6:d3:30:ae:ec:
4a:35:50:c7:0e:e9:33:44:01:75:a4:ff:18:2f:f4:a0:25:4e:
34:4f:a4:0e:94:a9:14:fe:88:d8:64:c7:d6:25:21:d1:a2:db:
03:fc:7c:2b:b3:19:36:52:c0:cf:fd:77:29:df:a4:bc:53:cb:
d1:20:c4:c0:1e:6d:b5:81:b8:db:9a:e4:8a:cd:a8:1e:ff:c6:
ad:f2:d1:c0:bf:f8:7c:0f:28:6c:31:bc:52:0a:07:8e:bf:da:
d9:8b:e1:07:df:c2:08:68:25:4a:06:c9:af:3d:f0:6a:37:7f:
dc:56:23:4d:39:a5:8e:09:96:21:98:56:07:1f:98:83:f6:96:
e7:91:ac:be:ec:50:4d:f2:b5:8d:74:45:b4:23:32:18:f3:a1:
fe:f9:d1:4d:e5:a3:f0:45:58:cf:5e:5e:48:d8:47:45:36:1d:
94:a6:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:05 2025 by rpki-client