
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
File: f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa (raw, json)
Hash identifier: DokkB6Pf6YJdUhcJV3KlN5o8C707ieJh4AcJqZ+ap98=
Subject key identifier: F6:B8:A4:9A:89:30:7F:4B:2A:C4:B2:1B:11:8C:A9:1A:A4:07:47:F0
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F4328584BCD9B11A557A46AA0B7C09E80
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 14618
IP address blocks: 68.71.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9b:11:a5:57:a4:6a:a0:b7:c0:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=787b6349-562e-4fb1-9890-87d105d08747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:bf:38:c5:70:b2:e7:a2:b6:19:ff:91:4a:
53:35:c7:9d:3c:51:bd:78:b1:68:ae:e2:93:7a:9b:
3c:b9:f5:c7:e2:97:2b:f7:c4:d1:ac:15:da:f9:3b:
42:d8:70:65:02:e5:98:16:79:4c:ec:1b:13:12:72:
00:32:59:dc:3c:be:a3:56:d0:57:66:29:79:51:53:
4b:43:18:75:b6:f8:9b:00:b3:02:73:e4:b1:89:02:
c3:6a:af:80:3b:66:70:82:aa:c5:54:6f:0b:26:6c:
9d:7b:9c:d3:4e:6b:87:53:5e:f6:77:4f:7d:09:4e:
62:02:9b:d5:55:c9:dd:9d:74:71:f5:53:da:56:1f:
1c:79:d1:af:25:60:cd:3e:8e:a6:38:8c:d5:2e:77:
7a:0f:f3:bc:6e:be:d9:c3:8f:39:3a:52:24:3b:41:
68:ef:9e:07:54:cd:e1:ef:7e:e1:b2:bc:6d:48:aa:
e8:81:5f:14:91:ac:b7:b3:51:40:a1:09:5b:6e:c5:
29:9f:a8:ed:d0:f3:11:18:71:36:f6:67:69:fd:cc:
f9:00:3c:a9:84:a2:0d:43:da:d8:0c:ed:1c:ec:53:
e6:ba:0f:47:d1:f8:aa:90:1b:f6:91:30:30:38:d7:
75:db:85:5a:e0:d8:37:e9:f1:aa:f7:c3:b2:8c:d4:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B8:A4:9A:89:30:7F:4B:2A:C4:B2:1B:11:8C:A9:1A:A4:07:47:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:75:82:b8:bd:06:7a:d3:a4:c5:f6:98:cc:4e:2a:25:d9:f6:
76:fb:6c:fa:c7:c9:9c:77:ea:ff:cf:3e:4d:58:19:c7:ac:54:
f9:84:50:0c:96:30:a7:05:fe:47:83:eb:64:e3:ba:7c:3c:e6:
1b:57:51:4a:f4:3d:e0:4b:56:47:77:b0:28:04:29:5a:ac:99:
0a:c8:b7:f5:25:fe:31:cb:2d:b4:43:a5:11:7e:aa:c8:98:da:
57:01:1d:a2:28:87:a2:d5:dc:6c:13:b7:b8:53:72:54:49:09:
4b:2e:2d:1d:76:e1:45:9c:3c:08:5c:66:19:94:a8:80:ad:23:
21:43:3e:47:9b:02:21:95:cd:04:1f:2d:52:c0:f5:27:0d:ac:
dc:ba:b8:f6:62:19:49:c6:bf:d1:cb:77:96:64:4c:a6:b2:5b:
6e:00:8b:30:f0:cf:be:ab:34:29:50:57:cc:7e:f4:be:15:5d:
11:95:63:8d:40:52:ab:82:e3:22:7f:77:96:a6:37:4d:fd:77:
08:3b:95:3e:0e:6f:02:3d:03:4a:b8:af:15:17:cf:70:31:25:
bd:09:58:4a:fd:39:a6:e2:ef:d4:ea:12:bb:39:f8:0b:86:a7:
ed:01:9f:9f:34:a4:fc:2d:f1:74:ab:55:40:77:2e:17:49:b5:
de:fe:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:09:49 2025 by rpki-client