
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
File: 3401e74f-a936-383a-95be-c5719615d9b9.roa (raw, json)
Hash identifier: s1ieUh5bxBzwsTLSE6zyaicKWYS6lE7CIAFF47ORZGw=
Subject key identifier: 00:4F:08:50:B1:35:CB:76:38:DA:8E:1F:A5:7D:88:8B:98:58:2C:0B
Certificate issuer: /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial: 010D0C9F4328584BC96AE427484C1695CAA0F380
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 13959
IP address blocks: 216.150.32.0/24 maxlen: 24
216.150.33.0/24 maxlen: 24
216.150.34.0/24 maxlen: 24
216.150.35.0/24 maxlen: 24
216.150.36.0/24 maxlen: 24
216.150.37.0/24 maxlen: 24
216.150.38.0/24 maxlen: 24
216.150.39.0/24 maxlen: 24
216.150.40.0/24 maxlen: 24
216.150.41.0/24 maxlen: 24
216.150.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 10 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6a:e4:27:48:4c:16:95:ca:a0:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=2af177c7-229c-4f18-bf2a-7ebb7b69ed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:17:18:2f:b5:d2:7d:97:47:80:3d:7b:7e:
5f:16:f7:07:5d:10:4b:44:30:2a:84:22:ee:0c:e9:
8d:10:35:df:0a:4a:ca:67:23:fc:3e:14:32:d2:bc:
68:a6:06:42:14:e7:7e:bb:37:18:1a:1b:11:ff:bb:
e4:88:65:29:78:42:4d:ed:cf:ad:2a:75:b4:5f:16:
17:68:84:89:e0:72:10:c3:a3:fa:29:ac:be:32:fb:
ec:50:4f:73:9b:13:03:ab:4c:0e:da:55:f7:50:5d:
28:41:5d:05:75:98:57:9d:db:52:df:3c:58:b9:82:
82:e3:7c:f4:bf:f3:d5:4d:7d:72:88:1c:4c:e8:03:
8b:9c:0d:f0:02:de:ac:aa:be:1f:67:c8:f5:14:b9:
d0:77:54:69:24:13:05:88:14:fd:84:c2:c2:bb:57:
b5:54:fd:05:5d:34:40:b8:68:9b:ab:08:85:79:e2:
c1:ff:c2:ae:fe:09:f6:c2:04:f2:55:1c:c8:61:5f:
00:17:46:7e:92:37:6a:5d:4b:a0:57:b8:fd:2d:06:
96:4c:9e:22:0c:0b:96:15:46:7b:e6:f2:33:42:b4:
95:57:01:9a:44:1b:fb:64:dd:28:d2:6a:e4:fb:71:
46:61:3e:80:09:d5:ea:17:c5:38:ce:b4:7f:0b:62:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:08:50:B1:35:CB:76:38:DA:8E:1F:A5:7D:88:8B:98:58:2C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
X509v3 Authority Key Identifier:
keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
sbgp-ipAddrBlock: critical
IPv4:
216.150.32.0-216.150.42.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:5b:a5:b6:91:93:c3:d5:f8:15:62:3f:38:4e:f2:1c:e9:53:
9a:d2:2e:d2:41:bd:3f:55:1c:79:20:ec:f7:26:f8:b0:a5:46:
e1:b1:c6:4c:9d:08:31:cc:a6:b5:5b:9a:97:f6:4d:c8:9d:67:
54:56:3d:2c:1b:54:4a:1f:f8:1d:1c:6d:7b:30:c6:59:e1:4e:
38:22:6e:bd:b3:c7:15:a3:77:32:25:dc:9d:93:71:a6:95:8e:
76:b9:1b:e3:05:c3:58:b6:33:a1:4a:0c:0f:42:64:ee:9b:1e:
f7:6f:55:50:29:dd:a4:11:f0:4a:9f:95:e7:07:65:07:06:07:
85:fb:90:f8:26:ad:cd:50:40:e1:7a:e2:94:3f:e3:2c:f1:a4:
25:0b:bf:d5:69:32:2d:87:ca:c2:d3:37:b3:95:f1:02:31:79:
6a:2c:cc:fb:a9:28:db:4f:b4:11:21:5f:f8:b7:0a:ab:d5:07:
ae:ab:0c:29:e4:84:3e:67:02:e5:2b:63:06:1a:9b:73:84:a1:
c5:5e:7e:de:c9:f1:e3:c5:7d:9b:8e:f1:2c:0e:4e:7e:46:78:
21:80:0b:93:d8:f1:b9:5e:8c:f6:66:56:4c:b8:ef:ed:f7:0c:
6a:67:4b:a5:57:f2:94:ab:cf:2e:cc:89:3c:ad:39:1f:65:cf:
a3:34:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 20:31:39 2025 by rpki-client