
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
File: bedfd239-0021-3ee0-be05-d5cf473a267e.roa (raw, json)
Hash identifier: S5U0ekiLYIuqFnOpw6KqjH2KKhpdgIfdHgo2ENaQ1zI=
Subject key identifier: E8:6F:C3:2A:CD:39:87:9A:A7:73:32:F2:2A:21:34:60:01:6B:CB:FA
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584B0746AE760F5DC39ADBD01200
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
Signing time: Sat 30 Aug 2025 13:00:42 +0000
ROA not before: Sat 30 Aug 2025 13:00:42 +0000
ROA not after: Fri 28 Nov 2025 14:00:42 +0000
asID: 13414
IP address blocks: 64.63.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:07:46:ae:76:0f:5d:c3:9a:db:d0:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Aug 30 13:00:42 2025 GMT
Not After : Nov 28 14:00:42 2025 GMT
Subject: CN=5c8a6b2a-447f-4807-9005-6062ccacf4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:f0:fc:ad:6b:5f:73:0a:6d:14:f2:96:7c:
a9:0d:c8:68:a4:b6:f3:4d:93:85:97:71:c5:20:bb:
45:76:e7:b6:ba:7b:dd:c5:a1:08:62:cd:1b:37:50:
24:a7:70:12:08:10:56:9e:13:00:fb:c7:2f:37:38:
d0:1e:dd:fb:fd:da:d9:06:ed:d4:be:1e:c2:f0:ee:
ec:37:3e:3e:2b:ae:55:d5:59:7e:4b:d8:f1:5c:0c:
cf:dd:36:c4:c7:a4:dc:36:44:21:14:e9:91:51:e4:
f0:d8:3f:cf:c7:a7:1e:4b:c4:17:46:b4:6a:d2:cd:
5d:ca:06:9e:c9:77:04:41:20:e9:ae:aa:54:74:83:
b5:4b:0b:55:46:f3:af:bb:54:fe:26:5e:9d:51:8c:
a5:4d:2a:3b:e4:ea:18:3d:33:b4:f7:80:1b:dc:e7:
ce:e1:b1:5f:ea:f2:08:56:61:06:15:3c:f4:73:95:
ef:85:06:2a:3d:eb:ed:e3:84:da:52:90:52:5c:82:
f8:31:66:64:d0:8c:a3:51:cf:a3:25:ec:52:65:71:
e9:75:20:e9:5a:13:a7:7d:8d:fd:ae:09:bf:5f:87:
b9:cb:cd:e6:e4:5c:98:02:12:75:ae:ac:5f:5a:cd:
b8:f4:05:88:1d:58:99:ec:3b:e1:1a:4c:c1:db:66:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6F:C3:2A:CD:39:87:9A:A7:73:32:F2:2A:21:34:60:01:6B:CB:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:11:ab:c6:0f:cf:28:09:cf:4f:12:3b:f9:ed:e7:f6:5c:dc:
7b:f1:34:a2:45:70:5d:36:e8:e9:5a:ce:2f:f1:68:fd:e7:6f:
45:39:30:3c:21:53:f1:0b:67:5b:cb:84:2f:ba:e3:fb:07:10:
03:bb:85:64:0b:c6:6e:db:51:64:bd:eb:3e:d7:af:7d:ef:01:
a5:11:a7:da:24:24:ab:1d:d2:70:b1:ca:73:45:9d:ec:77:e4:
f5:fa:5c:0d:45:32:f3:66:8f:50:a3:c1:c2:c7:aa:02:a1:f1:
b6:2f:29:33:e7:7e:ba:60:ce:e8:d2:ad:d9:46:9d:a9:f7:f4:
52:48:40:a8:a1:2f:0e:f7:1c:c9:96:01:4d:36:be:ca:7b:ac:
05:d0:45:d1:73:71:21:20:eb:6e:5f:07:5f:1f:6f:02:de:46:
d8:8e:4e:4e:e9:c5:de:43:9f:55:86:8b:6f:db:c1:e1:fd:46:
ee:c5:fc:6e:04:6d:72:c9:89:6e:06:a4:97:97:45:e2:9a:be:
39:ab:ae:a7:90:d7:42:21:c9:11:4a:3d:8c:0c:e7:e3:44:9c:
77:03:a4:72:ee:50:60:14:5e:00:8a:18:55:81:09:68:b1:d7:
be:98:bb:04:78:27:b2:89:23:99:df:f2:2c:2d:0d:18:80:b7:
3f:03:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 13:45:57 2025 by rpki-client