
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa
File: 5aa4817d-b49c-314b-a92d-17a0633781f1.roa (raw, json)
Hash identifier: p9EUTj0J4iLdi5BX0l/VcGvhRm6w1z+LmxEg+xD8KBo=
Subject key identifier: 14:D3:1C:8E:19:1B:66:21:CE:72:79:C7:9B:3F:85:4E:E2:5D:E7:ED
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B7F52385D252FEF0168E2BDC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 396549
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:38:5d:25:2f:ef:01:68:e2:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=3710456b-caee-49f2-b86e-ace40e4c6ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:b6:f1:48:7a:db:31:63:cb:62:0d:46:5a:
62:28:57:6f:cf:57:99:35:4d:a5:96:6d:c2:09:4c:
6b:37:45:70:58:c8:8e:d3:73:57:b6:d3:0d:c4:69:
28:04:65:c4:bb:f2:59:a0:ba:94:75:50:4b:fc:69:
b4:c5:7f:f9:33:c4:83:fd:5b:cb:e5:97:f9:fd:57:
88:68:5d:dd:06:fd:01:8f:ac:1e:98:30:d8:27:8a:
1d:5c:8d:06:b6:7b:03:ec:ac:a3:98:2f:67:4c:29:
83:43:93:d8:da:6b:2f:b9:d3:0e:de:d6:e4:6e:36:
e4:49:b0:ec:22:ec:92:c0:a4:66:2d:c9:4e:f8:7b:
2d:13:12:c7:ad:75:a8:eb:62:6d:f3:03:ca:96:59:
23:ed:f9:9f:f4:6a:31:11:78:78:0f:a4:50:4a:5e:
e1:22:07:3c:d6:e9:d7:3b:c6:7c:b5:84:45:e3:fa:
5f:88:8f:3a:87:b2:c5:22:c7:b1:cd:32:37:6c:8b:
34:48:1f:ec:59:a7:09:0c:1c:fc:b2:d6:21:d6:70:
e3:d6:e3:25:5a:26:ac:31:54:aa:60:89:ba:78:74:
80:fb:0d:57:62:fd:8d:a1:cc:94:16:83:ba:a3:f6:
a8:e7:5e:6e:35:2b:f9:a0:f3:99:5e:5a:1e:d0:6e:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D3:1C:8E:19:1B:66:21:CE:72:79:C7:9B:3F:85:4E:E2:5D:E7:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:d0:9d:8f:f4:68:d5:65:35:bd:0b:8a:07:fb:74:2d:ba:43:
a8:64:55:8d:8a:96:68:03:91:81:5a:1c:5b:6a:b4:11:e6:72:
b0:ec:2b:60:a4:ea:bf:39:fc:56:6f:f6:f6:b4:48:54:0e:f9:
56:ad:d1:05:82:0e:1b:1c:43:aa:ec:88:55:d0:09:77:2c:32:
c2:85:e5:7c:a5:f8:fc:e9:69:29:89:91:bb:61:d9:8b:d3:db:
c9:86:40:ad:55:e8:b8:22:94:f2:14:ab:e9:76:c7:42:1c:67:
b0:cf:87:49:39:99:74:fb:a2:da:36:30:54:5a:4c:34:9d:d3:
94:37:0f:06:34:7b:75:4f:83:5e:4f:2a:26:a3:b4:bb:2a:39:
c5:83:1a:1f:3d:25:48:5f:95:3b:a4:6c:6f:23:6f:0b:90:30:
1d:10:ae:d0:fe:d4:6e:ef:36:2c:4a:01:22:3c:64:40:53:2a:
af:f1:1f:e6:08:ae:f4:48:1b:3f:c1:06:f9:dd:65:46:ea:c8:
92:ae:d1:7b:f0:7c:db:22:4b:81:bf:91:59:67:ac:8b:32:21:
4c:79:1f:dc:82:a2:af:54:ed:7c:b1:55:bc:5c:cf:d1:f9:dd:
56:b3:d0:b2:18:c9:b3:54:4d:c0:a8:9d:22:50:1b:6d:64:85:
2f:99:af:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:36:29 2025 by rpki-client