
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/709de0d8-1ed7-3d28-98d3-257120b25a4d.roa
File: 709de0d8-1ed7-3d28-98d3-257120b25a4d.roa (raw, json)
Hash identifier: w27yJHtdkfJlg+e9B530CIpNT3OuJExntiabVlLSFsg=
Subject key identifier: 75:A0:5B:13:39:8A:23:D9:78:25:03:90:A8:3E:C8:6B:5B:0B:E6:C3
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F4328584B9E07D46820636122B84F18A0
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/709de0d8-1ed7-3d28-98d3-257120b25a4d.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 14114
IP address blocks: 169.145.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:d4:68:20:63:61:22:b8:4f:18:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=62852c73-deda-4e93-8111-e2d385d8bfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:4f:ab:81:69:a6:3f:cd:24:cb:63:01:e4:2a:
a3:ef:b2:1b:b9:df:f4:6c:26:48:ba:14:bc:84:c2:
87:94:69:12:f6:b4:61:7e:21:81:ad:ca:93:92:dc:
03:32:f6:49:d3:73:3d:7c:e2:f6:39:5b:70:f6:3e:
df:92:51:84:58:e5:29:eb:b9:68:ed:82:f7:74:ff:
10:e9:3a:8b:e7:26:c2:01:3a:f3:79:48:0f:53:3d:
42:a4:f8:16:08:82:5c:6d:0b:d4:d2:2a:90:02:75:
2a:ff:ff:9e:fb:ed:5d:b9:0c:1c:01:5b:3d:c8:44:
4d:d4:bc:8f:b3:8a:b1:5a:0f:07:ce:0d:ba:62:11:
e3:2b:29:f3:5a:ab:2c:08:41:e5:0b:42:77:07:39:
56:d0:61:12:af:00:3b:91:7d:f6:7f:5e:44:f0:84:
3d:1a:8d:fa:d9:63:2d:4a:bc:5f:53:63:90:12:b5:
ef:25:de:c4:35:44:49:70:5f:eb:40:b4:3a:5c:d9:
1d:fd:db:1e:95:7f:33:de:3a:fb:56:d1:a8:00:4d:
6a:64:c5:cf:24:8d:40:0d:9d:83:9a:44:81:15:ce:
64:77:2d:17:94:ab:b3:6e:d1:d8:5c:ee:61:ef:f1:
91:2f:2d:89:05:d7:d5:75:a1:fc:47:ab:3f:05:1f:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A0:5B:13:39:8A:23:D9:78:25:03:90:A8:3E:C8:6B:5B:0B:E6:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/709de0d8-1ed7-3d28-98d3-257120b25a4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:99:b3:4b:bf:4e:b9:68:95:da:cd:83:91:3e:ed:41:45:c7:
60:d0:ed:5f:2a:70:b9:13:3d:81:a3:ec:ed:ab:22:74:50:a7:
ac:bf:3a:05:59:c5:78:13:36:58:a3:b5:22:8d:e3:29:aa:87:
cf:3a:73:c1:47:43:04:f8:0b:ed:0b:83:38:a0:77:18:53:46:
a4:43:a9:fb:3a:da:ba:44:a7:1f:ab:00:ed:77:ac:af:a7:5f:
22:e9:cd:16:73:0d:dc:44:31:2b:31:a2:50:d9:51:7a:32:59:
5f:c9:74:35:30:2f:d8:04:1d:0f:a0:ea:42:45:46:a5:c7:9b:
3e:20:d4:70:65:8f:e1:c4:63:57:ca:5f:53:1f:39:f2:55:03:
d4:5a:ba:65:39:36:c4:b2:e6:a1:09:73:41:3c:01:ce:d4:2d:
4a:d5:58:a6:ae:4b:99:b5:00:11:e8:b7:74:92:d8:d4:14:13:
0e:77:f4:b2:9b:61:53:27:b5:05:a9:f4:63:03:eb:3d:39:fd:
c8:8b:f7:6d:00:1f:83:f1:47:f7:26:27:e4:2b:7e:54:df:5b:
94:65:c5:ca:f2:0a:8d:4f:43:06:6f:c0:b9:b9:dd:0c:fe:06:
9b:c0:82:80:a5:db:d1:51:42:6f:ea:e5:44:c2:cd:77:2e:70:
7f:95:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:33 2025 by rpki-client