
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa
File: 8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa (raw, json)
Hash identifier: dBN0/U+lQ3ELUTUsJQfqtdJ+ksYdDG/CN/BZGbVX248=
Subject key identifier: 5E:D0:DD:09:9D:C8:7D:84:9C:EE:16:CD:92:BD:24:07:ED:6D:1E:DC
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584B153C159031B3484638631540
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa
Signing time: Thu 04 Sep 2025 13:00:41 +0000
ROA not before: Thu 04 Sep 2025 13:00:41 +0000
ROA not after: Wed 03 Dec 2025 14:00:41 +0000
asID: 21949
IP address blocks: 173.243.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:15:3c:15:90:31:b3:48:46:38:63:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Sep 4 13:00:41 2025 GMT
Not After : Dec 3 14:00:41 2025 GMT
Subject: CN=af1973e3-96fb-4414-9d8f-c982626c7c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:ad:6c:d8:81:27:7c:70:23:27:ba:b7:39:
a9:b9:40:6e:ab:d7:24:42:15:f5:3a:a2:18:27:bc:
2e:a3:1a:22:13:ef:0c:7c:85:d6:4b:c3:2c:34:67:
d1:d9:a6:65:80:cb:a0:3a:68:66:db:86:0c:37:f4:
ec:1a:fe:67:4f:55:9e:aa:e0:71:fa:4c:8a:55:bb:
32:2c:d8:4b:02:0f:07:2f:bd:94:0a:bf:b1:c4:4b:
2b:c2:af:cf:12:a4:8e:ac:ad:40:f7:93:a1:9d:6f:
7d:a7:8d:04:0a:3b:e5:02:87:2b:00:98:70:da:b7:
a3:a5:cd:39:b9:58:11:da:bc:31:d1:2c:a6:0e:3e:
0b:8d:c3:85:ae:37:2c:8c:cd:d6:90:1c:8e:04:ce:
2b:87:a0:59:82:0b:a7:02:a0:ae:da:b3:bb:fd:fb:
0b:5b:fc:bc:21:61:b3:95:c3:94:67:da:7b:5f:86:
4d:bf:f5:9f:bb:2d:e3:88:f7:cb:87:77:3e:2c:5f:
54:b3:bf:7f:7f:fc:d1:75:ac:15:bb:bf:ca:8e:19:
22:bf:a1:95:6a:29:c6:10:3a:93:a8:df:90:fd:a8:
3b:b0:a9:e7:93:e4:47:b0:75:e2:31:f7:a8:bd:de:
f9:88:0e:cd:ac:02:d0:2e:7d:77:46:cc:b2:d8:85:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D0:DD:09:9D:C8:7D:84:9C:EE:16:CD:92:BD:24:07:ED:6D:1E:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:01:15:44:2f:86:83:e0:f5:de:d5:7f:3d:a8:97:5a:87:b1:
20:9a:5c:36:b7:56:8d:c7:e6:4e:97:4d:1b:61:9d:2b:14:d2:
50:6a:f7:b5:28:3e:9b:5c:b3:62:81:3a:9d:9f:89:98:af:f9:
b3:40:c1:f9:44:05:cd:7a:a1:28:a7:4f:14:3b:8e:e3:90:d7:
93:1f:82:db:3b:09:87:a9:a8:25:6f:5f:e8:d9:68:8a:7e:32:
a0:f5:4c:ad:67:25:5c:60:4e:fb:7a:9d:1a:e6:65:cf:f8:5b:
d1:4b:bf:ae:89:f9:88:b0:3b:97:84:9e:8d:52:1f:55:ce:8d:
08:1b:d3:a3:7c:35:02:36:2f:f9:3d:e1:db:92:f2:3e:38:4b:
21:d8:7d:bb:37:cf:68:8a:2f:51:f0:2e:8d:61:22:03:81:eb:
47:16:06:53:5f:31:7f:94:cb:fa:8d:a6:cd:e8:88:28:e6:04:
f2:57:3c:12:2a:61:c0:12:2c:cf:bb:96:bd:45:f8:61:eb:ca:
46:38:91:21:b2:1f:44:86:de:39:9a:e6:92:a0:be:47:91:a7:
78:71:48:3b:c2:93:79:47:dc:75:cb:d3:4a:be:d9:9e:07:20:
56:df:b6:7e:50:7c:9d:3b:c9:92:d1:2e:46:ec:36:e1:4f:90:
43:b4:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 02:24:23 2025 by rpki-client