
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa
File: 649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa (raw, json)
Hash identifier: p9X/F7owbo8k2JZ0/GHDYjD4nM0HO/Sw6yaDfqAw+Xs=
Subject key identifier: 8F:D2:81:DA:07:12:B7:E9:34:2B:A0:90:AB:78:1C:6E:97:C7:23:C8
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F4328584BB88D2E52DE5136F1EC052700
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 376
IP address blocks: 132.219.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:2e:52:de:51:36:f1:ec:05:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=59b2ef4c-1c23-42fa-99be-948b1908bb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:7c:55:39:27:a9:22:c2:e0:71:8a:f9:73:
00:81:81:a4:32:0d:0e:ee:7c:e0:f8:a4:37:a6:d5:
a3:e8:93:ff:bd:f5:ca:96:9c:89:53:d0:08:83:3d:
34:22:03:de:79:55:f2:ca:26:b1:84:81:3b:6c:31:
c9:28:f3:53:df:e2:04:1c:ff:30:fd:ce:53:0d:6a:
ac:3b:b6:15:52:4e:0b:8b:07:f0:d1:67:6c:c3:f7:
9a:b9:f3:c6:f2:08:94:89:69:6e:b0:16:d2:4b:e8:
06:ad:4d:9f:41:7f:69:e3:5d:88:52:9d:36:0e:ef:
a1:68:e0:24:be:16:cb:11:87:9d:34:17:97:1b:5a:
74:5b:c0:66:eb:77:85:69:d7:02:0f:3a:fe:7f:30:
0f:d1:57:27:d4:96:a2:0b:6a:1a:1a:b7:a1:e8:e6:
bf:d5:d5:ac:41:5a:2f:ee:3c:64:3f:e4:1d:a7:e8:
43:9f:eb:e6:5d:1b:92:9a:93:fb:5b:ce:93:00:e1:
03:8e:6a:54:2d:36:0e:cb:57:b3:a3:18:b1:67:9a:
92:aa:16:c6:db:a2:46:21:88:4e:19:d8:44:a3:8e:
bd:d4:23:b2:39:b4:75:cf:a6:b5:19:3b:bf:c4:2d:
24:8d:11:e2:be:91:f3:7e:e7:8a:e3:d5:6a:39:bd:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D2:81:DA:07:12:B7:E9:34:2B:A0:90:AB:78:1C:6E:97:C7:23:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
132.219.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:47:70:f0:a2:7f:27:cf:cf:1e:4a:c0:da:ed:f7:00:df:1d:
b3:b7:3d:fc:4a:a9:a7:fb:fa:1a:e9:87:13:f5:34:34:7f:85:
f4:ca:47:ab:ab:c7:28:37:66:ce:dd:53:0e:fe:37:79:b0:71:
fd:9f:91:eb:dc:94:a8:e3:60:5d:9c:5d:e5:8d:ce:8c:bc:2b:
3e:4a:16:0a:9a:58:20:cb:09:77:17:3a:0c:4a:7e:1e:b6:fb:
83:76:b7:c5:ee:04:79:4d:fa:b4:c3:df:18:0b:30:db:66:d6:
95:08:32:8a:c7:df:8b:34:af:38:5a:ca:d6:d4:34:00:0a:b7:
73:99:c4:5f:86:45:4a:72:b4:e8:52:b1:2a:3a:dd:c8:30:ad:
b9:2f:e4:56:e2:10:c5:37:65:0b:bb:bf:56:40:8c:7a:52:c8:
40:72:cb:9b:6d:91:d4:13:22:9d:ac:39:91:e8:c2:7f:16:27:
c0:b2:e2:6c:5c:2e:a4:06:d3:d2:0e:e0:73:eb:c4:8c:71:78:
51:1f:7c:3f:fb:05:e7:ae:1c:8e:cf:e8:2d:01:3a:1d:ad:da:
a2:fc:42:8e:5a:11:fb:e7:cb:3a:b5:20:ed:f5:41:04:78:b4:
7a:a6:5e:e0:4a:f5:c5:79:18:dd:93:72:97:21:bc:51:1a:b6:
54:c6:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:40:23 2025 by rpki-client