
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa
File: dfc98d87-51b3-3316-896f-e0a483a854c6.roa (raw, json)
Hash identifier: IeBDSclfddV6uARtmK5eORESm9v4KbVg9boH3i/IaG0=
Subject key identifier: B1:1C:DE:75:C5:97:5F:5F:61:17:85:34:D7:68:37:12:68:08:1D:A3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B7F523A388D5687B1F7AA68E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 397198
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:3a:38:8d:56:87:b1:f7:aa:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=84a77ab0-a095-4f4e-9240-f4c6ac2bc287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:80:3b:d2:4b:22:e1:62:91:9c:ef:7e:e5:
53:2a:c1:2d:6d:b8:35:19:96:be:11:66:7a:ee:41:
ce:77:09:1f:af:f4:80:bf:d1:ec:51:08:30:4a:06:
52:ab:ac:81:09:fb:a1:9f:49:15:82:3c:a9:90:ee:
8c:9a:c6:ff:3f:cb:fa:cb:c4:9e:f5:de:81:b5:d8:
bc:9c:a7:9f:8a:c4:56:f9:ba:dd:67:4a:b1:63:d7:
df:1d:bf:60:3e:49:48:ee:9d:4b:30:15:d0:fd:2f:
3d:1a:7a:77:4a:e6:f4:2e:04:15:ca:b9:ab:ee:d6:
86:55:8c:09:f5:5d:ff:27:cf:de:d2:49:9b:45:c9:
c8:a5:5f:bc:1e:8e:15:4b:7c:d2:6e:22:36:cd:63:
e1:07:36:a7:7c:15:08:96:9c:06:83:9c:f0:f0:16:
d2:b0:96:87:dd:7a:f5:6b:36:b1:8c:8c:b6:ea:9c:
3e:3a:c2:0b:db:77:45:f9:a5:43:7e:a2:37:20:24:
a3:42:25:b7:79:43:a4:33:5f:a7:69:b7:5f:52:28:
20:cf:e0:35:0a:0c:6b:9b:78:9c:5f:fb:50:15:f6:
e9:4f:4c:e9:1e:63:cc:43:b2:27:2a:5b:fa:28:5a:
58:91:de:f9:bd:48:56:a2:8d:62:9d:48:cc:bf:c9:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:DE:75:C5:97:5F:5F:61:17:85:34:D7:68:37:12:68:08:1D:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:95:56:38:05:6c:dc:2a:29:b7:08:c7:aa:3c:75:84:ca:48:
42:4e:ca:06:66:27:19:64:a2:88:b4:ab:f4:63:41:b9:2a:56:
63:37:57:0a:03:af:3f:09:20:3c:b7:5d:11:93:cd:75:d2:c6:
9f:c4:b6:96:c9:50:a2:97:62:21:f2:b1:be:32:02:92:b8:3e:
69:1e:af:ed:01:c7:26:24:b6:30:16:47:b8:09:b4:45:a6:6a:
43:07:ee:c7:12:21:71:f9:85:30:df:b9:37:2c:8b:d5:9b:ad:
58:a0:7a:0b:eb:ca:99:79:43:79:a2:be:e7:e3:0b:76:e5:77:
2b:ad:c8:0d:9a:c1:2b:1e:92:e0:0e:33:6a:2d:82:56:81:4f:
d1:da:d8:82:4c:5f:d0:88:dc:00:9f:70:9e:ad:4b:92:f8:5b:
51:bb:2c:c7:96:fc:46:c2:ee:6a:cb:32:07:c0:93:79:d7:f8:
79:3c:5e:12:56:99:64:28:ec:c8:39:14:33:ae:ae:6a:da:29:
b4:63:b2:bb:df:59:0a:d7:e4:25:86:26:d5:e1:d6:86:6c:3c:
63:32:b5:8c:ac:43:76:ad:b0:d3:f6:e1:bc:65:2c:5f:3a:e7:
32:fe:f0:4f:9c:35:70:6d:48:2f:7f:b2:45:8c:8f:48:ec:6f:
05:8a:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:29:20 2025 by rpki-client