
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa
File: 8bff03f9-a167-3414-b274-a9724bc100f7.roa (raw, json)
Hash identifier: YBMbZnGSw2rjw63a7CFer1D86JzNFLNJkMBAZdOEbgo=
Subject key identifier: 80:41:FA:FA:7E:63:56:BC:6F:45:E0:C5:7F:23:B2:E6:F4:41:78:E8
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F4328584B6D2C994DE80A6F0A79767700
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa
Signing time: Mon 06 Oct 2025 01:00:33 +0000
ROA not before: Mon 06 Oct 2025 01:00:33 +0000
ROA not after: Sun 04 Jan 2026 02:00:33 +0000
asID: 33185
IP address blocks: 64.112.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6d:2c:99:4d:e8:0a:6f:0a:79:76:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Oct 6 01:00:33 2025 GMT
Not After : Jan 4 02:00:33 2026 GMT
Subject: CN=0d3a0c1d-3f47-4221-8178-3d29d0a666cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:bd:1e:a9:d5:69:e2:fb:bf:74:f7:8b:6a:
d4:cd:e7:24:58:3d:1d:44:fe:e9:c5:ef:57:b7:91:
43:ac:f5:ab:c0:72:4d:fc:a2:bc:11:02:bd:b4:69:
ea:18:df:99:3f:94:b2:54:96:8a:db:7d:06:c7:93:
b7:16:41:09:c5:be:18:b7:97:4d:4e:f0:d1:3e:fe:
8f:e5:13:e5:36:13:09:1a:a9:81:53:8c:3e:87:47:
3b:4f:8b:02:6e:53:ea:09:57:7a:69:cb:71:15:06:
15:93:9d:90:7d:1a:96:3a:85:aa:8d:fe:3d:37:93:
8f:ec:24:12:4c:97:06:c6:a4:c3:2d:8f:24:6a:10:
6a:ba:7a:aa:af:4c:0c:8e:24:ae:13:0d:94:7d:ab:
29:38:64:38:dd:e2:7d:2c:c7:eb:0e:d7:8b:81:2c:
c8:75:eb:53:9f:07:06:00:01:55:6a:b8:3e:09:af:
f6:0f:65:36:62:8b:c8:49:d6:4f:3f:7c:32:af:30:
99:ea:a3:e8:a0:cf:12:72:f3:d1:c8:9d:51:66:8b:
9e:11:f5:16:d1:4e:66:01:ad:db:6e:8f:4c:66:97:
3d:a8:c0:1d:89:e4:55:a7:fa:da:c0:d0:33:ad:29:
41:5a:99:fa:f5:a8:00:4a:0e:eb:0b:1d:5a:5d:bb:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:FA:FA:7E:63:56:BC:6F:45:E0:C5:7F:23:B2:E6:F4:41:78:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:29:81:df:f4:c3:f4:54:84:a8:c1:dd:81:8f:9d:6b:03:91:
61:e9:ad:2e:96:60:73:ba:bc:94:65:b1:47:d3:9a:1d:12:20:
f6:b5:44:f9:2e:33:e8:0d:be:5e:db:69:98:86:0d:eb:10:6a:
5a:34:92:55:f6:82:04:26:08:39:a1:0c:0a:25:f5:a2:53:9f:
0e:2e:a1:01:75:72:f7:c2:1e:fc:0b:61:b5:70:76:f1:f6:0e:
57:5b:15:d1:d5:e3:1d:e3:34:26:44:00:19:a3:44:82:d1:85:
09:47:13:f2:e7:2f:2b:13:94:0f:e8:b8:10:d6:47:36:3a:ad:
b4:57:e5:e4:cf:75:1d:dd:95:4a:e5:0e:74:ac:89:c0:a5:a6:
78:9d:a6:21:d0:97:4f:6b:de:97:28:d3:bf:b1:be:b4:a5:fb:
c6:a4:35:71:45:c6:5e:3c:a4:70:d6:75:fb:05:fb:90:64:77:
06:a8:0f:8b:19:25:d2:a9:7b:ed:fb:33:7e:f8:0f:af:ea:e7:
a2:6e:13:5d:a0:3e:3c:61:5a:1d:cf:71:70:94:06:77:cb:f7:
ad:52:41:4d:a6:6d:e1:7f:e9:ba:78:1f:72:60:5e:20:db:15:
a7:4c:d3:06:61:b9:c0:85:d0:c4:02:05:b3:94:ad:92:50:50:
3e:d1:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:03:32 2025 by rpki-client