
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa
File: 8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa (raw, json)
Hash identifier: uA8dNSZkzzCZJ7NBEaVbccMPmES4n+VRCQFSwQtVR1Y=
Subject key identifier: 77:BC:AF:0E:0C:08:81:96:DA:83:9A:8D:E0:61:45:13:D0:A2:2B:9D
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584BC6A0300CCAC9C0578404BEC0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa
Signing time: Fri 07 Nov 2025 02:00:30 +0000
ROA not before: Fri 07 Nov 2025 02:00:30 +0000
ROA not after: Thu 05 Feb 2026 02:00:30 +0000
asID: 25645
IP address blocks: 209.42.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c6:a0:30:0c:ca:c9:c0:57:84:04:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Nov 7 02:00:30 2025 GMT
Not After : Feb 5 02:00:30 2026 GMT
Subject: CN=9bd8557b-a609-43d2-a385-bb987f3f0d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:da:f1:29:19:29:7d:d5:f3:f8:f5:bd:48:
61:a8:03:4b:6f:88:2f:c2:20:b8:39:86:5f:15:b2:
89:da:58:fe:ff:0e:1d:20:9c:40:98:ba:a1:ff:22:
d7:3a:4f:20:82:54:2c:4d:55:b4:51:93:59:c8:a0:
4f:0c:1e:2a:6a:0c:1a:c1:1e:1c:1c:d8:2b:9d:1d:
5e:09:cd:52:b4:d1:d8:39:de:e0:20:44:45:56:d9:
f3:ea:ee:ac:a4:cd:5c:d2:a9:86:b0:60:75:e4:0e:
5d:e7:6a:be:18:5f:b3:4f:b9:cf:2e:c3:f9:7f:dd:
a4:1a:6c:0e:a1:73:dc:34:43:f3:c2:0d:1f:c6:e9:
6a:c2:14:e4:6d:c9:de:72:cf:a6:81:0a:df:c6:55:
87:de:b5:f5:9c:f2:ec:f6:35:e8:ec:aa:d1:bb:56:
a9:4c:de:3b:af:88:cc:7c:fc:42:29:ba:6b:ab:7f:
10:c0:20:41:f8:82:fc:4c:f7:ff:ae:a5:e8:d2:48:
13:af:16:9c:20:63:fd:b3:23:10:1c:93:96:df:6d:
2d:20:55:15:39:a2:da:d5:ec:9d:e1:91:a5:39:42:
9e:f4:84:28:67:04:5f:b1:d6:64:39:b2:e2:02:ac:
1d:3d:27:b5:44:fe:61:85:b8:bd:f9:a0:0c:04:02:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BC:AF:0E:0C:08:81:96:DA:83:9A:8D:E0:61:45:13:D0:A2:2B:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.42.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:18:f9:54:ab:17:5b:f1:5e:fe:db:e9:90:6b:10:c4:56:84:
70:48:14:b0:60:26:cb:d3:70:55:93:73:31:67:5a:e0:2a:ed:
c1:5e:9e:b5:2b:41:27:2d:39:25:10:f6:bb:7f:21:17:c4:54:
78:de:1d:3d:3a:33:ac:c7:a2:32:13:7f:7d:1c:3d:b6:14:20:
9b:71:35:17:8f:98:8c:59:17:3d:93:31:63:e3:51:a2:61:5c:
6f:0d:54:70:64:82:e2:88:db:d2:0d:e8:d1:70:50:78:59:8f:
fd:51:38:9d:19:41:dd:ae:76:b2:b5:aa:dd:25:db:76:fe:e3:
bc:2b:51:e2:4c:fe:b7:9b:28:4b:ca:b3:2f:6b:c1:d7:1d:8c:
84:7e:18:e0:ea:a2:fa:bb:95:d8:b7:f6:04:9d:74:e0:90:c2:
5c:2d:27:f9:d6:10:ba:e0:91:02:2e:8f:0e:92:18:05:52:58:
a2:df:d5:c6:06:ce:4e:c7:bb:1b:76:e7:5f:55:c4:1b:dc:8d:
1c:32:6d:b7:19:3c:07:27:9b:d2:8d:6e:13:13:81:66:70:8c:
3c:3d:42:64:2d:d9:02:bb:84:9c:c7:55:40:e9:73:ea:95:88:
38:a4:1d:6e:67:02:ab:83:42:91:2b:65:0e:1b:39:9f:a0:88:
aa:ee:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 07:07:54 2025 by rpki-client