
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa
File: eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa (raw, json)
Hash identifier: fzJTltxMMy2wVGYiWR6W80qSk8C88BuHXvt2yS62WG4=
Subject key identifier: 6D:EA:5C:BC:C9:9B:BC:3C:AA:06:EB:E5:F4:F4:5C:BC:13:E5:A9:B6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584B94BD2209CFD23BBB5F324C20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa
Signing time: Mon 20 Oct 2025 05:08:25 +0000
ROA not before: Mon 20 Oct 2025 05:08:25 +0000
ROA not after: Sun 18 Jan 2026 06:08:25 +0000
asID: 13335
IP address blocks: 172.64.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:94:bd:22:09:cf:d2:3b:bb:5f:32:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 20 05:08:25 2025 GMT
Not After : Jan 18 06:08:25 2026 GMT
Subject: CN=5886f37a-aef9-44bf-b710-523f003da90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:ed:10:86:30:30:0c:d0:8a:56:00:59:26:
ac:2e:33:00:44:60:41:ac:72:4e:6b:3a:19:b1:5a:
bd:b7:ba:77:80:48:79:b9:78:cc:05:36:23:6f:6b:
99:bc:ae:10:b0:a9:30:ac:d9:04:a4:2a:a9:14:00:
af:31:b7:eb:3d:76:53:45:c1:d3:9d:d2:50:9a:d4:
2e:cd:2b:cc:46:53:2c:1e:bf:c5:76:83:e3:34:d7:
66:d6:db:a4:d9:f8:db:eb:ea:21:ae:c5:23:2d:22:
ef:6d:74:82:0d:db:28:b1:ba:d0:a3:ee:f0:d2:e7:
e6:b5:47:67:d5:34:17:63:64:aa:59:45:00:ee:31:
81:bb:5c:ca:64:46:19:86:4a:72:3b:e1:fb:b2:ea:
ed:78:c6:b3:b7:68:8d:94:1c:5f:96:19:a1:01:d8:
16:ef:c3:5d:a4:13:1c:67:69:ac:dc:96:ef:7a:71:
12:2c:af:ec:4e:bd:eb:57:7d:53:80:b3:8c:fc:ba:
27:8d:d1:90:73:b7:df:97:ac:d8:96:46:31:03:28:
68:29:fb:79:27:9b:1a:79:22:7e:e0:07:c5:13:17:
0c:37:ef:71:c3:b0:85:06:46:96:bd:17:8c:c2:a5:
33:35:3d:f5:96:6c:87:2f:39:8a:b2:85:df:7b:04:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:5C:BC:C9:9B:BC:3C:AA:06:EB:E5:F4:F4:5C:BC:13:E5:A9:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:51:30:85:68:1d:97:6e:af:56:0f:02:23:4b:c3:29:50:9e:
52:51:8d:d6:0f:70:ea:f1:50:31:9d:12:fa:77:53:67:f3:e5:
f2:a9:9d:fc:96:ac:d3:d9:94:66:14:0e:ec:c8:94:da:ee:7c:
fc:92:04:19:57:43:bc:98:e1:9e:c2:9a:f4:53:72:46:36:16:
28:bd:73:5c:60:52:a7:59:ec:ec:cb:02:1d:52:36:ae:7b:43:
a2:da:72:f7:26:ad:ac:67:38:1d:63:05:a0:48:4a:95:b3:17:
ce:b3:b6:4d:ea:f8:11:fb:92:47:42:b2:5c:8c:82:f6:43:65:
9c:91:11:2b:8c:1c:65:8d:4c:01:89:59:d2:da:7a:a9:42:2c:
c0:ab:2e:ca:1b:04:6c:ec:2d:e7:b0:58:3b:72:96:11:b7:62:
9b:9a:d5:66:c8:0a:07:fd:4d:60:37:26:bc:da:90:56:7b:87:
35:cc:e1:d8:9f:ec:41:34:e3:3e:03:98:9b:d2:1f:ac:20:1e:
42:cd:1b:f7:1b:d3:2a:53:f8:4d:2e:55:c8:d4:8e:29:0e:6c:
c7:b6:60:17:dc:1e:bd:60:54:f6:e8:fc:36:20:19:44:0e:ae:
dc:75:61:88:67:ce:7e:4f:26:41:cd:cd:47:38:a9:2e:f7:ea:
98:f6:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 09:59:09 2025 by rpki-client