
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa
File: b74f5713-0a96-3395-960f-93394e99cc6e.roa (raw, json)
Hash identifier: vkVlR1ez3RAoP8UOpw2LmNZB+sVXxdnpYmTBsm8j9L4=
Subject key identifier: 0A:C0:9C:23:1D:AE:18:EB:D2:40:E1:FE:F8:46:33:D4:C3:0A:18:64
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA9327FA24F9F7AC7D6AC6900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.65.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:7f:a2:4f:9f:7a:c7:d6:ac:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=47632525-f80a-40e3-8e3a-2ab47070cbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:99:91:ad:06:2e:a0:48:e1:42:eb:18:45:
8d:32:53:7d:86:ef:f2:b3:f3:5e:7a:ff:af:35:0a:
a3:1b:46:3b:af:c3:c8:b9:60:78:3b:fa:48:08:80:
02:87:67:1e:84:dd:b7:c9:df:21:36:14:0a:cc:ed:
9d:18:7f:9a:4b:fa:c2:82:3d:6c:9f:62:72:92:55:
cc:2f:d6:b0:32:ec:1f:f8:fb:3b:7f:e6:9a:f0:6c:
a5:c2:25:67:cd:7d:80:0d:a7:39:89:3c:c4:a3:8e:
9f:b4:36:49:b7:59:f3:b8:17:d4:52:52:78:08:a3:
a4:e9:39:c2:93:01:cf:0b:46:fc:eb:56:97:ee:57:
b6:8a:1b:5c:e2:28:62:66:39:24:98:bd:63:c3:3b:
0d:95:38:e2:08:29:3a:5d:88:3a:0b:3f:45:81:cd:
9e:36:b1:5b:b0:cb:f0:18:30:34:53:e0:97:05:de:
fe:a0:ae:5b:fe:8e:72:32:c5:3b:d3:6a:68:c9:67:
7c:26:86:de:1c:ac:3c:20:71:92:2a:fa:91:1a:8e:
f4:cc:fc:96:10:8a:3a:87:17:df:f3:ed:e9:a5:ad:
5d:92:96:e8:85:e4:b6:b5:e5:f6:ad:c5:59:36:8c:
e6:f2:03:40:01:2e:33:c7:e8:c4:e3:2d:09:e2:85:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C0:9C:23:1D:AE:18:EB:D2:40:E1:FE:F8:46:33:D4:C3:0A:18:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.65.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:fc:1b:ac:90:1f:36:0d:2b:45:d9:ef:df:58:61:9b:9f:29:
c2:1e:7c:94:17:f6:91:51:cc:5e:31:0f:86:de:73:38:72:dc:
12:20:b3:5c:ac:23:ea:35:22:2a:0b:43:d1:94:7e:75:85:8b:
20:b9:53:da:ae:c6:c8:e0:a8:39:f9:11:6f:e4:84:b9:06:ba:
28:44:ef:ae:79:4d:55:cc:ba:f7:7d:c3:6b:52:a0:bd:8c:f7:
07:e8:9b:79:6b:5d:3d:75:4b:14:91:3a:ab:0c:61:4a:de:a3:
3c:99:0b:32:46:d1:69:ec:5d:8f:d0:58:0e:4d:cd:7a:3d:40:
97:50:2b:4e:d5:d4:f0:c3:43:c0:26:54:82:bb:e6:b6:10:fa:
17:78:0b:25:3b:7f:f3:c3:d5:d3:f5:56:86:71:b0:a4:a8:64:
4e:2e:1a:84:ad:bd:57:bc:de:56:7d:2c:68:07:b7:73:5f:e3:
6c:c3:ba:e8:9f:c6:37:78:d2:50:85:3b:bd:3a:5d:55:69:40:
b8:ed:6a:43:a5:51:12:ad:58:0e:fd:b2:bf:50:7a:58:9c:a5:
0e:17:d9:fd:75:e0:46:75:c7:b0:55:01:0c:b9:88:89:b4:3b:
9c:f8:a9:08:fc:ad:f1:ff:57:6c:62:5f:11:96:53:b2:c8:2b:
8e:c4:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 09:59:28 2025 by rpki-client