
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa
File: 63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa (raw, json)
Hash identifier: gxm1rtqBiiLLL96TGd0ddA/tTztfTyYKSBM4HNiVfSk=
Subject key identifier: 7C:1F:67:D1:92:C7:D4:66:32:39:44:07:06:C0:FD:30:AE:D2:3C:78
Certificate issuer: /CN=94738821-1f1e-430f-b49e-05e511cc80b4
Certificate serial: 010D0C9F4328584BA39D28B78FE3A3D6E1CA5F80
Authority key identifier: 80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 32475
IP address blocks: 209.222.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:28:b7:8f:e3:a3:d6:e1:ca:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94738821-1f1e-430f-b49e-05e511cc80b4
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=479f7d85-43b5-49f9-b5b3-2e9413d3dc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:d1:27:29:a0:0d:cc:d8:96:6b:f0:c3:bf:
67:8e:e7:34:fb:34:59:46:29:d1:41:21:42:9f:ef:
21:1b:ac:54:e6:36:b9:1d:cd:75:46:c8:28:b3:85:
c3:95:04:0f:d3:e0:ea:dc:27:cf:12:c5:05:9e:3f:
ea:9b:d5:f5:30:4f:47:bd:ae:7e:62:3c:cd:71:e4:
f0:75:c0:1e:cb:36:2a:21:62:e2:15:c6:2a:aa:b7:
0b:4a:62:48:71:ea:64:fb:86:40:58:56:14:14:ac:
ce:f6:bd:8c:5d:7d:6f:4c:9f:df:1f:62:7f:a2:ab:
b3:45:bd:0b:dd:13:0e:ba:a9:24:47:1e:50:4b:17:
9f:be:03:96:39:50:da:20:f0:26:a9:d3:ee:d0:2f:
65:aa:3b:4f:c9:f5:d5:31:17:8f:74:4a:d4:21:25:
1b:e6:58:7a:30:c4:be:28:30:a5:f3:27:ec:21:9e:
06:c9:cf:80:1d:e5:f3:2f:f1:b0:43:ec:3c:c1:fa:
09:fe:f2:8d:fd:ee:7d:de:48:53:53:f2:35:a5:7b:
da:0e:2e:c5:9e:d9:e2:df:a1:31:fe:34:e9:15:b5:
89:2a:7a:75:9c:86:40:49:0d:bc:1e:ef:24:11:c3:
2c:7f:3b:ba:fb:86:70:93:28:f3:0e:4f:46:08:85:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:67:D1:92:C7:D4:66:32:39:44:07:06:C0:FD:30:AE:D2:3C:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl
X509v3 Authority Key Identifier:
keyid:80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:fb:b5:77:f2:e5:6b:41:ac:97:d6:1f:49:d4:85:0f:c2:88:
67:97:ab:bc:2c:24:05:a5:30:b8:c6:13:d0:58:05:0f:01:ec:
b5:a2:28:74:bb:b9:6c:09:9e:99:49:1b:13:ab:ef:56:dc:63:
77:b3:51:51:aa:3d:00:3d:a0:56:be:4e:e8:a2:c5:71:15:84:
89:f3:23:06:d8:d6:d6:46:21:ed:b3:9d:51:cf:1c:ac:14:25:
44:fa:04:dd:ca:d2:db:1e:cc:fd:c0:8d:01:9f:80:0d:c6:e2:
e9:71:87:69:4a:54:70:b9:88:ee:57:4d:f9:f3:37:1d:80:d8:
48:15:6d:1f:91:02:ca:6a:a4:21:f4:de:94:a1:f3:a3:ab:62:
b4:8e:7d:65:04:1f:fd:f3:56:8d:56:2d:ff:44:1f:50:61:f1:
83:bd:05:b5:6e:3e:6d:76:fd:85:d5:3b:56:0e:34:e3:67:b2:
09:14:35:20:fa:07:d2:ff:89:49:ec:9c:a1:e4:3a:cc:4f:8a:
bf:83:58:4d:d9:56:f6:c6:c2:c9:cc:94:79:d7:9a:93:5f:5d:
b8:48:10:8c:d0:77:9b:57:96:83:e6:fd:42:35:5e:17:7a:08:
5e:e7:83:1e:80:74:2f:96:ca:b8:e9:41:91:8a:b9:4d:c2:99:
32:09:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:36:38 2025 by rpki-client