
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/eef35b92-60ea-3292-aeb7-03114f10bd1e.roa
File: eef35b92-60ea-3292-aeb7-03114f10bd1e.roa (raw, json)
Hash identifier: J8yHJAs9y/hdaCqsYLthSwb2Qr2Z4GxzXhYZxeEgz28=
Subject key identifier: FA:05:C1:F3:F3:D6:4A:05:47:0C:EA:A5:1F:C6:6F:2A:D6:75:04:48
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584BD33062D522F93608C0CE2140
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/eef35b92-60ea-3292-aeb7-03114f10bd1e.roa
Signing time: Tue 11 Nov 2025 14:00:38 +0000
ROA not before: Tue 11 Nov 2025 14:00:38 +0000
ROA not after: Mon 09 Feb 2026 14:00:38 +0000
asID: 18434
IP address blocks: 156.55.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d3:30:62:d5:22:f9:36:08:c0:ce:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Feb 9 14:00:38 2026 GMT
Subject: CN=03fad455-c822-44dd-93b3-26536e78efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:76:b0:7e:62:30:cf:05:63:ac:0a:54:71:95:
93:1a:69:9b:07:2e:ea:14:0c:e9:1f:bf:8c:1f:d6:
43:17:e9:ed:7f:9c:ed:34:0e:6d:51:24:d2:0e:95:
e8:ff:53:51:10:40:ba:c9:26:e7:7c:f4:3d:9a:c8:
b7:dc:98:39:7b:41:7a:3d:ff:8d:9f:4e:36:65:42:
27:50:0b:1e:4d:99:f8:37:76:f8:3e:32:87:c5:d1:
95:83:e6:f7:7c:80:f4:8e:ab:9a:0a:bc:3f:14:2c:
00:5d:c4:89:05:30:79:98:73:c5:2a:3a:12:8f:ee:
2f:49:4a:03:cf:f0:4c:71:2b:20:57:3b:1d:d8:cb:
ac:d1:22:e4:48:e6:dd:a1:b2:8c:03:cb:24:db:84:
75:90:20:3c:43:88:ad:99:8a:b6:6b:dd:f7:69:a2:
f0:15:e0:7f:b4:31:53:7a:17:2c:f9:d0:f0:6b:26:
8b:20:9f:f3:29:3a:0b:90:de:64:08:97:60:eb:be:
c9:c0:2f:e5:35:ed:7b:9e:21:25:77:3d:8b:e0:e7:
d2:1b:4f:f1:63:ce:b8:68:93:00:e5:8a:2f:f3:71:
f9:59:50:8c:67:dc:f1:d2:c4:01:e0:36:8c:51:fc:
77:33:f3:49:4c:54:c1:4e:3b:6e:0d:f3:21:31:18:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:C1:F3:F3:D6:4A:05:47:0C:EA:A5:1F:C6:6F:2A:D6:75:04:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/eef35b92-60ea-3292-aeb7-03114f10bd1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
156.55.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d7:8b:0e:8d:f8:6e:a5:1a:82:80:8c:31:7c:19:4f:e2:5c:
59:99:64:2d:80:d0:6b:1b:f0:59:d6:29:77:91:a1:5b:7d:e9:
32:21:d5:48:aa:5e:7e:a1:2c:f5:e8:68:ed:49:91:67:9e:e9:
a1:6c:41:3f:c0:46:5b:0d:fe:f1:af:b7:c6:35:2e:cc:6a:bb:
eb:8c:2b:c8:6a:4a:c2:2c:64:61:49:5f:02:8b:53:19:a8:62:
72:b5:87:83:e0:66:e0:58:3f:3f:6e:98:07:ad:14:b6:8e:7e:
c9:02:6d:72:1e:82:97:4b:68:57:ef:d8:dd:84:37:5e:ad:68:
d8:18:71:b1:4f:21:0d:8a:50:e8:d8:2f:e5:9c:fa:b9:a0:b1:
08:05:5d:8c:cf:bf:d0:11:96:20:d5:2e:49:84:af:e3:91:fb:
fb:bd:8e:b3:38:db:e2:23:57:f1:c1:7a:a9:83:f2:9f:c7:9d:
90:28:e2:df:c7:42:14:c4:fa:81:ba:54:2e:f0:9f:59:b6:fe:
2d:25:12:2f:c3:8a:eb:0b:7e:2d:9f:f9:3a:50:ec:90:be:16:
8b:0e:76:b9:19:3f:0e:13:b4:8d:9c:ff:b0:0d:14:2f:c5:0e:
ad:fe:d4:e8:2f:84:14:d0:46:73:55:47:a0:93:57:36:78:52:
af:3c:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:39:32 2025 by rpki-client