
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa
File: 968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa (raw, json)
Hash identifier: 0KulDYEUMH0FR+OIs5QBra4RNOytNNcShhAnRpvkblM=
Subject key identifier: CE:E4:C3:F1:42:AE:F4:70:EB:26:3E:D2:4D:8C:D7:6E:17:93:F5:14
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F4328584B583CA75091864571DAB9D7F0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa
Signing time: Sun 28 Sep 2025 13:00:41 +0000
ROA not before: Sun 28 Sep 2025 13:00:41 +0000
ROA not after: Sat 27 Dec 2025 14:00:41 +0000
asID: 376
IP address blocks: 206.167.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:58:3c:a7:50:91:86:45:71:da:b9:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Sep 28 13:00:41 2025 GMT
Not After : Dec 27 14:00:41 2025 GMT
Subject: CN=c89d698c-49f3-452e-90e4-4ee1b8287134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:cb:3c:df:8e:6d:3e:8d:06:2a:bb:ad:4b:
78:68:90:4e:3c:11:69:23:0d:df:a0:07:66:27:84:
82:c2:14:a6:07:da:4a:89:3e:8a:de:21:14:9e:c4:
10:c4:3d:ed:de:d4:35:fd:18:f9:7d:07:b3:02:7e:
12:5b:ed:bb:4e:6a:c6:79:66:3d:26:17:ba:a9:bb:
bb:7a:2e:3f:d0:f7:89:fe:b5:97:da:0d:b4:80:0d:
81:c1:7d:12:9a:06:a7:45:f1:2b:63:f1:70:bf:3c:
71:5a:0f:be:b2:12:e9:9f:bf:00:d6:4a:6b:37:af:
da:34:42:e8:d2:ed:94:de:0b:0d:89:b5:ba:c3:5c:
ce:1a:5c:e4:ca:a0:c5:ac:49:81:99:b8:11:79:6f:
ad:b4:fb:a9:33:5b:9f:ad:f4:1e:b2:5d:69:5b:65:
b4:41:f2:a6:ef:0e:52:d5:07:11:5b:bc:84:b4:6f:
a6:6d:3b:6e:84:a8:e1:da:3f:27:30:dd:65:92:98:
65:ae:59:11:1d:1d:b2:06:f4:82:7e:80:92:5c:59:
42:4c:1e:5d:02:a0:95:08:d4:45:ab:e4:cd:df:c0:
03:a2:88:88:22:79:21:5c:4e:72:6e:b5:ef:ba:98:
79:69:74:14:02:2c:7a:0a:69:1e:11:1e:8c:db:33:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:C3:F1:42:AE:F4:70:EB:26:3E:D2:4D:8C:D7:6E:17:93:F5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:fd:27:25:b4:ae:02:7a:2a:8d:83:f3:25:14:3c:76:de:0f:
72:0c:03:f0:80:84:68:09:c4:48:6c:18:3d:20:6b:38:11:af:
24:30:1e:98:cb:02:9a:7b:59:43:f6:63:f5:e5:2c:fb:5b:91:
9c:9a:cc:65:b7:ed:b9:d8:61:2e:47:52:2d:ef:c4:5e:b2:3a:
47:29:68:dd:eb:70:3f:6f:5e:e0:eb:de:15:c9:4b:3e:07:93:
cb:3b:2f:cb:5d:24:52:2b:9d:6c:be:5e:ca:6f:a1:51:0c:dc:
cf:a7:44:b9:59:13:5f:30:73:1d:4d:50:ce:5b:03:f6:5a:9c:
26:a7:8d:d5:89:91:cb:2d:01:88:8d:2b:f5:bc:64:77:a2:70:
1e:ed:a1:46:b4:26:a2:5a:3c:5c:00:0e:26:0b:26:4e:a9:70:
79:6c:04:5a:10:60:a0:36:a3:50:8f:52:85:be:9a:ad:79:11:
62:80:d1:a6:1d:e5:79:92:14:bc:54:e7:75:c3:f4:d0:d9:7b:
09:6e:18:25:c7:27:4d:6e:be:6d:80:e4:48:56:62:e6:92:b7:
1f:23:20:d6:76:9f:77:f3:b9:17:a2:c4:27:03:f5:8a:6d:26:
48:f1:1e:66:9c:0c:1b:b0:8d:c8:3e:96:25:37:c2:e1:10:91:
c4:24:39:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:35:02 2025 by rpki-client