
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa
File: 24a91ee2-c3ed-3ba1-9469-640cde946175.roa (raw, json)
Hash identifier: nJYqLESHiJhOy9wsPl2f9p9YwFa+p8R1zm/F4ZuERdo=
Subject key identifier: 6A:E9:CC:17:89:39:59:F4:E0:E0:E6:25:40:E3:A0:84:91:32:D1:68
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B6D2CAEACC1B2BBFA847F6780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa
Signing time: Mon 06 Oct 2025 01:00:33 +0000
ROA not before: Mon 06 Oct 2025 01:00:33 +0000
ROA not after: Sun 04 Jan 2026 02:00:33 +0000
asID: 396616
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6d:2c:ae:ac:c1:b2:bb:fa:84:7f:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 6 01:00:33 2025 GMT
Not After : Jan 4 02:00:33 2026 GMT
Subject: CN=7563f00d-b863-42e6-ba5d-2b002ab1376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:00:5f:53:68:f6:ef:73:79:09:d1:4c:5b:
5a:98:d1:bb:6e:30:98:4e:07:f8:36:81:1c:89:32:
03:98:ca:0c:83:f3:06:48:3c:4b:86:8b:40:56:df:
c4:71:cd:cb:e7:91:1e:fc:81:62:06:b9:ec:6b:18:
af:13:e8:57:71:fa:9e:05:94:fb:22:5f:42:49:5e:
2a:29:c2:b9:e4:b3:18:c0:3a:73:2d:7a:f7:9c:58:
7d:48:fa:5f:65:9d:ae:79:11:3e:b3:41:b9:7b:3e:
a0:af:bc:0c:e7:19:79:71:e0:3b:de:a9:99:05:6c:
98:ff:f8:5f:e7:22:28:05:1e:7d:a2:a4:65:14:9b:
7c:32:d5:de:4f:1a:b4:07:19:cb:cd:a0:f2:4c:d9:
7b:64:69:42:bc:de:76:65:dc:08:70:19:98:0d:4c:
45:13:d7:12:00:e4:66:1c:b5:bb:d0:6d:20:07:88:
1a:a3:60:eb:f8:87:5e:ca:a4:a8:0d:f2:ee:0d:70:
49:25:d4:78:03:b7:3a:d9:e8:92:cc:5d:65:cd:1a:
57:48:35:c5:7a:b2:72:9c:12:53:c3:fe:37:cf:6f:
c8:65:3d:38:f3:8c:45:91:1a:8a:74:44:58:b1:55:
2a:fc:69:43:bc:55:de:3a:1c:af:aa:04:b6:83:93:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E9:CC:17:89:39:59:F4:E0:E0:E6:25:40:E3:A0:84:91:32:D1:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:94:17:6d:40:2e:5a:2c:31:cf:6d:6d:9c:53:f2:f7:08:33:
cc:db:d5:ef:c1:ab:07:6f:f3:5d:b7:7a:5c:cf:14:02:c7:e0:
3a:08:d3:05:44:9b:f9:52:78:3a:a0:9b:bd:16:2f:b2:19:d6:
66:fc:69:f9:54:6c:57:cb:cc:b5:c1:08:b6:53:ba:ff:b4:64:
30:91:6e:70:62:fc:ff:5c:f0:06:53:29:2e:cc:da:7a:22:ef:
35:d4:7c:48:4a:bd:5d:ba:83:69:05:3c:67:5b:0d:e6:d8:25:
75:39:79:d0:d1:52:42:56:93:26:e3:df:d8:6a:8f:b0:42:1c:
5c:b5:73:cc:60:c4:93:34:38:6f:ff:4d:b4:68:b6:08:68:94:
c7:78:4f:92:46:33:f9:79:c1:f0:32:71:fb:d5:cd:d8:20:a5:
b3:dc:05:50:fa:bf:11:8f:f5:cb:2d:18:34:ed:1a:b9:4f:19:
be:3d:82:20:41:5c:a0:d3:25:f7:6c:78:80:e1:6b:b3:95:28:
ed:df:f1:6b:db:dd:e4:f5:d3:ef:69:85:21:e1:39:7e:0e:cb:
a9:5d:82:07:8a:4e:e8:73:86:77:cc:e5:f8:e8:6e:3b:c8:06:
14:ad:07:90:44:5b:d6:a3:a3:30:d3:31:ac:4c:37:1e:41:31:
b5:7b:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:25:13 2025 by rpki-client