
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
File: 09591a19-c6e3-3973-9499-51ef6efc847d.roa (raw, json)
Hash identifier: Jf8N10CqA+eJxnYp8ZOr4pix//Expl+CqC+Iwpm/q/g=
Subject key identifier: EF:E5:59:56:04:B7:BA:16:B5:74:70:71:73:1C:EC:4D:8B:6C:6D:45
Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial: 010D0C9F4328584B970CE8AD23F2AEB11AEA2600
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 0
IP address blocks: 206.41.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:e8:ad:23:f2:ae:b1:1a:ea:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=a4acd567-bc35-4d43-a223-cd5a88a7e274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:88:25:3a:5f:6a:ec:5c:1c:31:3c:93:b4:
11:fc:cc:25:53:6f:ea:aa:f9:36:3b:42:30:bd:75:
ed:8e:d5:54:49:32:f8:a3:b0:ca:b3:a0:26:cf:24:
b8:01:c5:97:f7:a1:66:54:92:6d:57:24:9b:33:6c:
3c:1c:57:32:47:92:a3:13:d0:02:d3:6d:2a:ca:02:
93:55:99:39:7e:af:ae:de:34:8f:a6:e8:73:41:5a:
2e:05:09:63:53:fb:94:da:23:af:ba:b1:e2:cc:3c:
eb:05:4e:95:30:41:f1:ac:32:f3:56:56:c1:74:2a:
be:90:75:47:81:aa:9e:0e:e3:48:57:72:72:cb:74:
8a:11:79:ac:0f:64:a7:55:4e:ab:a7:f1:c2:f7:be:
dd:d9:6f:07:69:89:b2:0e:a9:fc:6d:6d:0b:30:c6:
f3:1a:e2:18:59:a5:ea:23:e3:25:de:64:93:6e:08:
c4:e4:82:3c:83:4d:b4:9e:24:c3:4a:fd:e7:8e:4a:
0a:70:09:07:67:3f:45:24:96:18:aa:1c:03:18:e3:
b4:66:07:e9:21:a2:d0:85:8d:59:15:54:41:97:66:
42:65:af:e5:3c:c8:fb:ee:34:30:d9:24:ff:fd:db:
bb:ff:0c:54:9c:59:19:ac:84:af:32:d1:c0:fd:53:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:59:56:04:B7:BA:16:B5:74:70:71:73:1C:EC:4D:8B:6C:6D:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
X509v3 Authority Key Identifier:
keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:f7:c4:88:61:31:29:21:26:bb:5d:bf:83:14:cd:e5:3e:b0:
a7:67:48:31:67:1c:36:89:33:66:69:63:18:e4:a5:53:77:6d:
5f:4c:70:47:fe:94:51:0a:99:17:a8:ed:a5:31:b7:94:4e:68:
5b:e8:23:e7:30:e6:2c:78:b1:92:74:8e:df:29:fc:d0:ad:b4:
04:7b:93:4b:57:25:3a:dd:40:fc:e3:30:c3:2c:26:a1:18:cf:
23:ee:59:87:4f:5f:6d:ef:ea:9a:93:f5:49:0c:6b:81:47:b9:
b0:6d:50:7f:b1:8d:8b:9b:a0:8c:0e:9c:28:c5:80:a7:ae:bb:
9e:2d:66:18:b4:7a:ac:2c:ad:b5:b3:56:4b:f3:53:14:b3:42:
dd:f8:42:a5:23:bd:e9:ae:e5:52:4c:bf:09:44:ba:81:a4:70:
3d:7f:1d:94:ad:4e:11:56:7f:88:c5:64:75:73:58:5d:30:85:
f0:45:1d:ca:1e:34:d7:46:09:db:6e:8e:c5:27:26:c0:3e:37:
ae:be:f5:b6:06:fd:83:0d:ce:cb:4d:c2:a1:ec:73:2e:ab:3f:
09:13:55:3f:85:15:1d:63:c7:81:0d:4d:f1:a6:da:4d:81:07:
a8:69:44:c6:c5:54:3c:9d:99:b7:95:23:6c:e9:fb:7c:b4:4c:
62:e9:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:08:15 2025 by rpki-client