
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8d11418e-71f4-3e76-a99b-f177cacd9406.roa
File: 8d11418e-71f4-3e76-a99b-f177cacd9406.roa (raw, json)
Hash identifier: PMD59qP9JHbPa7NUPOGoB8oPCJ2s3BWHUYFSoDCuwEE=
Subject key identifier: 3A:D4:1E:19:7E:53:76:15:1F:C1:3D:69:1A:FB:D6:52:AF:B9:45:FD
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F4328584BB02D02E1860AAE24BE7C16C0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8d11418e-71f4-3e76-a99b-f177cacd9406.roa
Signing time: Thu 30 Oct 2025 01:00:30 +0000
ROA not before: Thu 30 Oct 2025 01:00:30 +0000
ROA not after: Wed 28 Jan 2026 02:00:30 +0000
asID: 16789
IP address blocks: 137.66.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b0:2d:02:e1:86:0a:ae:24:be:7c:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Oct 30 01:00:30 2025 GMT
Not After : Jan 28 02:00:30 2026 GMT
Subject: CN=5ac4fd79-ebf4-4511-a845-35a250bcc7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:87:06:4a:40:20:30:18:e6:b8:83:84:c6:
d2:ae:f4:89:41:21:18:64:3b:42:cc:e9:bb:17:e9:
a0:20:cc:7b:de:02:d4:1f:14:99:bd:e5:4f:85:18:
88:81:44:da:b6:ec:2a:c3:29:1a:ef:a7:5a:fd:24:
8e:24:fd:e4:33:85:ee:6a:44:96:02:fd:cb:6e:63:
37:32:49:7c:81:05:a5:5c:77:9a:e3:cd:af:65:36:
87:f3:4e:5a:02:5b:1a:5b:2c:7c:7e:ad:1f:5f:96:
63:2c:4a:ff:d4:19:22:2d:c4:6f:a0:19:31:e0:4d:
42:26:57:4f:8a:ee:9a:73:9b:e5:cd:a2:d6:42:3a:
77:ac:47:2f:51:4a:62:0c:4d:22:13:ed:3e:e0:db:
43:f8:8d:8e:06:3d:7b:33:05:e9:da:27:32:5e:7b:
b3:90:0b:3c:c1:95:de:a1:ee:53:81:45:e8:44:6a:
3f:86:49:fc:6e:49:88:ed:b8:94:3a:49:ad:13:ad:
bf:e5:a2:00:56:bc:01:97:e0:17:a6:ae:cb:da:61:
3d:c0:8f:d0:be:9a:09:62:27:de:a2:ce:e8:e4:c5:
aa:59:5a:56:f3:9e:f7:22:fe:1e:6e:1e:c9:d7:d9:
92:0d:4d:30:51:0e:49:c3:a0:a1:6e:3a:9e:4f:e8:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D4:1E:19:7E:53:76:15:1F:C1:3D:69:1A:FB:D6:52:AF:B9:45:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8d11418e-71f4-3e76-a99b-f177cacd9406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
137.66.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:72:51:fb:14:4c:3e:19:03:12:06:ca:d7:9c:90:7d:80:66:
e5:08:cd:2e:7d:f3:e6:b2:31:d1:87:f8:15:5a:d5:0b:30:3f:
a5:1e:2b:8a:01:8a:73:09:85:5b:2b:d8:4e:4d:f9:6d:1e:d0:
7c:7d:e7:9d:55:5f:df:65:e8:b0:ee:c1:94:c4:81:4b:4e:2c:
95:e7:85:f5:39:9d:20:19:11:04:88:10:69:d8:1e:0d:5c:05:
84:de:75:1b:80:15:b4:13:a2:86:b3:3e:3e:27:8c:5a:10:d8:
59:0f:0f:d2:e4:39:be:5e:8a:74:ed:48:70:4b:1c:8a:95:06:
8a:15:5d:20:0c:12:bf:54:df:f2:58:8a:e2:e6:ff:77:7c:03:
84:0f:ff:99:03:15:71:d7:5b:14:75:2f:e0:4f:6d:b6:80:a4:
b7:d2:d9:bd:43:af:b6:b0:a1:b1:1b:24:bf:f0:67:2f:f4:cf:
25:c1:b9:94:70:fb:b7:58:7c:2d:b4:94:f5:70:61:2a:ac:15:
c7:48:93:52:f3:5d:58:92:0e:a4:dc:ce:7b:92:ed:38:9e:11:
db:85:e3:5d:66:c9:9b:a5:6f:d3:2d:b9:19:32:ec:11:89:f3:
f6:5f:8e:c7:b5:37:5d:1e:7f:e3:ec:37:7e:cb:c8:f9:5a:e6:
21:3a:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:42:08 2025 by rpki-client