
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec319f14-ebe0-3399-ab0c-187dfc9b543e.roa
File: ec319f14-ebe0-3399-ab0c-187dfc9b543e.roa (raw, json)
Hash identifier: uYUb30WeBym63z99Xo9Sx8/cwgyYVgHFjtVQcZLSnQA=
Subject key identifier: 6A:AF:8B:63:81:F2:5E:05:1A:41:C8:E4:8E:BE:AC:B5:4A:CE:6A:80
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB19269A6E3A248702B121600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec319f14-ebe0-3399-ab0c-187dfc9b543e.roa
Signing time: Thu 30 Oct 2025 13:00:38 +0000
ROA not before: Thu 30 Oct 2025 13:00:38 +0000
ROA not after: Wed 28 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.70.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:92:69:a6:e3:a2:48:70:2b:12:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 30 13:00:38 2025 GMT
Not After : Jan 28 14:00:38 2026 GMT
Subject: CN=445fd1d0-4848-4e59-b946-f7747a869c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:fc:e0:cc:9f:87:4e:ad:5a:1a:af:0d:38:
1f:17:36:01:08:ed:c1:07:8c:b5:ff:ec:a6:99:06:
40:31:8c:df:7d:8c:8b:70:30:3d:98:47:19:78:96:
39:0f:94:20:65:30:31:5a:85:98:02:53:a3:a5:d4:
2e:bc:9f:9b:cf:74:4a:be:1e:f5:5b:fd:93:9a:4c:
5a:b3:b1:04:63:84:51:1a:fe:f5:29:55:02:25:5a:
9a:44:8b:60:c2:7e:66:e6:8e:2e:41:6c:a8:ef:ee:
3e:06:3b:d2:bf:5e:59:00:c9:ac:4f:4c:6e:8a:48:
eb:55:40:b2:82:f2:19:ae:0c:b2:97:58:47:97:20:
52:47:35:93:36:50:ab:d5:df:37:dc:8f:bd:21:ec:
23:a7:1d:2c:4b:6b:90:be:68:0b:ba:2f:71:3b:e2:
7c:7d:f4:07:15:fb:ba:19:a3:5b:21:63:60:91:14:
d7:81:ba:63:95:1c:83:c0:88:20:54:74:6b:ef:05:
5d:bf:ca:02:54:03:98:14:a0:a9:98:e4:ae:a1:f5:
19:2b:bb:5e:d8:2e:ad:41:40:e3:cf:d8:95:5d:0e:
2f:08:5c:1b:fa:75:89:18:c2:5a:23:67:0b:f4:46:
06:ef:f6:83:4b:6b:39:b7:c6:a4:08:6f:74:b7:2b:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:8B:63:81:F2:5E:05:1A:41:C8:E4:8E:BE:AC:B5:4A:CE:6A:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec319f14-ebe0-3399-ab0c-187dfc9b543e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:1f:a0:21:da:1d:89:50:b8:e4:d9:de:d9:ec:98:c1:cd:93:
0c:ce:e3:8f:f7:7f:31:44:51:77:3b:0b:67:02:8e:af:fb:30:
06:a2:d5:71:68:15:99:04:fd:be:08:d1:e3:5a:c2:5a:3c:68:
64:15:f3:c8:45:47:14:7e:1d:ab:e1:ca:1b:b1:df:51:c7:fb:
a5:e3:68:43:39:df:31:5a:4a:e2:8f:bd:de:e7:89:08:d0:b6:
35:6d:91:45:f8:88:97:4d:c8:d0:06:9e:13:3d:37:96:b8:7b:
06:28:00:db:2d:83:5e:4a:1d:a3:eb:34:6a:48:ff:8f:7f:00:
59:97:f0:76:3b:de:5d:a6:c5:b7:0b:1c:30:f8:fd:82:7e:03:
79:39:28:bb:4a:ba:47:33:3a:4b:88:1e:ee:bd:8e:44:77:84:
73:0a:c8:87:65:7c:51:84:30:2d:29:f1:3e:0f:74:78:11:6d:
45:e6:ac:f7:7c:3c:3f:4b:49:a8:99:d7:86:ce:bd:e6:82:70:
29:5b:e4:ca:09:d1:ca:ca:6e:14:ec:a1:40:64:f7:a7:e2:f0:
61:ef:2f:43:b4:25:fe:48:2d:be:23:9a:a7:be:b9:4e:0c:51:
48:08:0f:de:ea:0f:ab:f1:68:73:f7:d1:28:d4:f0:a5:6f:c9:
e8:b9:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:30:52 2025 by rpki-client