
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbd7751c-23d3-3421-a3d1-f804b8f0c711.roa
File: fbd7751c-23d3-3421-a3d1-f804b8f0c711.roa (raw, json)
Hash identifier: zsFKm7Vu2YjQ1fumkmqsbKaOIyLiPj4qPMjwE71Qqfs=
Subject key identifier: F2:FB:B3:3E:ED:79:F5:DB:F1:1A:1B:72:15:22:81:4E:20:21:31:95
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA9328715F26382F6799BEF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbd7751c-23d3-3421-a3d1-f804b8f0c711.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 162.158.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:87:15:f2:63:82:f6:79:9b:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=b33f59e0-e112-42bc-aa72-4b3f7d2adc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:95:28:7a:a0:58:3f:6f:73:02:c6:d1:b3:
18:b5:3f:f8:72:74:4d:88:e6:98:09:6c:7c:88:2d:
e0:f3:6d:ba:02:13:c0:57:67:f0:51:8a:f4:77:28:
d3:d0:ba:2e:4a:a3:8b:76:94:eb:60:26:fb:ed:47:
a2:77:2d:d8:d4:7d:83:d0:43:ad:a6:ba:fd:97:83:
b2:74:88:57:92:73:5a:02:60:3f:4d:d8:51:2d:5a:
08:97:d0:4b:69:d6:a5:1b:04:96:44:08:22:73:ec:
64:a7:bc:f7:43:00:0c:e3:d4:9b:ca:de:4f:80:df:
3f:5f:09:a3:15:79:5d:ad:03:ab:01:3e:70:e6:cd:
ed:51:dc:a2:5e:0d:1a:12:90:84:14:1c:fb:a3:ad:
1e:9f:e5:5c:42:70:36:74:0a:0b:6b:46:5e:14:3c:
c7:bd:9d:77:68:48:95:c0:80:16:fe:21:ca:05:80:
69:89:2b:f8:d1:4a:0a:6c:59:2b:14:9c:ca:c6:e2:
66:75:11:04:75:26:95:94:91:a4:6f:3c:e6:c4:ef:
51:22:83:e7:e5:bd:b4:6b:01:aa:0a:42:9c:d5:b9:
1a:b5:7c:02:b1:55:46:de:ce:0b:b1:e3:12:d7:fb:
af:3e:c1:be:7e:b4:68:c8:fd:48:fd:ef:d5:6f:66:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:B3:3E:ED:79:F5:DB:F1:1A:1B:72:15:22:81:4E:20:21:31:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbd7751c-23d3-3421-a3d1-f804b8f0c711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:de:d1:e2:f3:11:9c:73:ca:a7:17:6f:0b:5c:d3:5f:74:19:
70:82:57:35:df:df:02:c1:be:3b:24:ee:73:0b:5e:99:e9:80:
5b:a8:20:da:c4:a1:83:21:d8:b9:f5:a8:77:fb:4e:c9:2c:bf:
ee:43:32:17:2e:b1:64:1d:d7:7d:6e:2d:8f:b4:2e:38:1c:29:
a3:23:ac:87:ea:16:fe:9d:ff:da:ac:c2:f4:66:a8:4b:41:22:
4b:8f:f6:37:2d:c5:89:ee:ff:00:e0:24:c5:4d:17:5d:b0:bb:
18:de:33:66:d3:8e:35:d5:73:28:1b:a3:6c:1c:b0:ba:e5:1b:
2a:97:9e:b6:5b:7e:b6:1a:82:d8:c0:c7:7f:50:de:06:21:1a:
26:f9:ff:7f:e4:13:71:a6:95:39:33:72:5d:25:3d:cc:4f:4e:
32:b7:41:b1:f0:5a:29:24:3e:14:89:08:d6:6a:62:96:c4:37:
99:90:72:4f:3c:f8:e8:80:c6:e8:9d:c3:0a:a6:44:74:0d:2b:
5a:ba:5d:2d:da:0b:7b:2a:f5:0a:27:38:8b:1c:ca:75:e8:c4:
dc:e2:f2:fd:50:65:7f:18:bc:d1:7f:61:ba:c7:15:d9:d9:b5:
5c:db:99:ac:73:95:04:19:e8:9e:70:b8:1d:c3:8a:5b:37:5b:
b4:fc:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:36:31 2025 by rpki-client