
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa
File: ef653022-c567-35f5-b846-8c4d43059dd0.roa (raw, json)
Hash identifier: rHMeCWxM0eq1+Hk5fCtgCDIHld9ROGVLoWk8B8q6IUo=
Subject key identifier: A6:F9:A8:2A:81:61:B3:23:60:ED:0C:D4:E3:06:F9:C2:A4:6D:31:9D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B7F52328A5F2C100A7E2C1700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 396562
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:32:8a:5f:2c:10:0a:7e:2c:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=0eab384f-d5ff-4fd5-94ce-f76194594cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:9c:cd:02:fa:69:e9:fd:6e:49:da:56:6b:
fe:56:7a:fb:f3:e7:18:1b:17:96:41:cf:b0:9e:47:
3b:6d:63:69:1d:00:0e:56:bb:49:2d:42:30:46:75:
8d:33:1a:58:c3:8b:35:78:9b:b4:a1:34:cb:c7:b4:
86:4d:fc:40:f2:45:74:c5:df:b6:7d:15:ed:68:c0:
84:2f:fa:b2:21:90:55:f0:40:88:a0:15:39:98:fc:
d2:21:0a:ef:e5:74:61:3d:11:30:f0:c3:0a:05:ca:
8b:8b:73:83:95:86:f6:7d:59:f8:56:92:ec:e5:0a:
d9:bf:91:17:9f:a7:12:22:ec:36:78:15:7d:9f:a2:
bf:5d:eb:59:23:5b:10:e2:3c:e3:06:c3:cf:d3:b5:
05:81:d2:fa:fb:32:40:98:11:0f:bf:12:ca:36:1d:
9d:b4:fe:a1:4d:c0:c7:61:1e:53:aa:ac:a4:9b:16:
d3:8e:66:05:62:57:0b:b0:4c:be:c9:c1:19:f2:d3:
3a:b7:30:55:39:44:29:7c:13:1b:d5:19:f7:bd:57:
0b:52:f5:9b:cc:cb:be:21:30:e9:9e:b8:45:bf:1c:
a4:6b:04:23:27:dc:1d:e6:a1:f8:31:f2:32:2b:e9:
b8:3b:90:f3:b7:4e:19:5c:e5:19:b3:b1:76:f2:34:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:A8:2A:81:61:B3:23:60:ED:0C:D4:E3:06:F9:C2:A4:6D:31:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:96:8d:a7:d1:f1:36:36:10:17:48:99:7e:7c:89:ad:4b:09:
05:bb:9e:21:22:28:bb:f6:20:81:60:57:a4:60:95:b3:84:4a:
1c:30:6f:f1:63:10:a1:39:f5:a0:05:91:dc:ec:d9:d7:ab:86:
1c:25:ab:d3:9a:16:00:eb:4d:53:63:76:4f:3e:58:ce:3b:af:
99:f7:0d:41:5a:9e:c0:90:41:95:50:ef:74:52:74:db:08:39:
34:95:93:66:10:4c:c4:1d:33:44:b1:5b:78:df:82:a4:a1:2e:
24:80:84:a0:aa:58:75:32:4f:ad:58:3c:96:d7:95:59:e2:31:
34:57:51:e9:45:26:14:4b:1c:ae:5b:43:4a:eb:7e:0b:00:aa:
7c:3a:83:51:55:26:02:b5:13:04:db:f7:24:7b:47:8c:30:e3:
ef:c6:7a:26:0a:22:2d:78:73:9e:7d:cd:dd:23:dd:5f:49:36:
62:86:24:38:41:34:de:83:d8:3a:c3:da:e2:a4:70:49:ec:2b:
c3:22:c8:fd:fe:b7:1c:bb:d1:83:f6:fe:8c:d7:2c:e2:80:6e:
74:9f:16:94:71:a2:22:d7:63:65:dc:e3:4c:ab:e8:47:96:e0:
11:14:d7:44:5c:92:ae:f1:49:0b:5b:c0:90:38:ca:1a:be:7b:
7b:ab:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:38:53 2025 by rpki-client