
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
File: 27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json)
Hash identifier: SX4I7TVjUyMtqYn/ac85XlUA/ajiO9+1ifJI4TBDEQU=
Subject key identifier: 1C:0A:20:D3:25:D1:B6:08:7A:75:5C:DE:82:CD:78:77:D2:AF:C4:F5
Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial: 010D0C9F4328584AF5214C201424DA1246ED5D00
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
Signing time: Sun 24 Aug 2025 01:00:33 +0000
ROA not before: Sun 24 Aug 2025 01:00:33 +0000
ROA not after: Sat 22 Nov 2025 02:00:33 +0000
asID: 393433
IP address blocks: 162.254.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f5:21:4c:20:14:24:da:12:46:ed:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Validity
Not Before: Aug 24 01:00:33 2025 GMT
Not After : Nov 22 02:00:33 2025 GMT
Subject: CN=df62340b-df14-4050-ba44-5f45db5239a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:df:1b:00:eb:9d:1a:8c:e2:3a:0f:13:62:
bb:7b:5b:a0:e0:be:ae:e7:87:2f:aa:e1:e0:d5:5b:
56:69:77:f4:a7:04:e2:a7:29:c0:5a:a6:fc:1d:2e:
f4:58:22:23:71:61:5e:8c:9b:5b:83:34:f3:9c:f8:
22:e0:1a:05:1d:7d:be:d4:4f:af:54:fa:3d:a2:69:
45:70:04:e4:86:f4:43:9d:28:97:1f:a9:cb:79:79:
e1:50:9d:a7:e7:c5:96:8c:ec:6b:51:5d:c9:fd:b6:
5f:23:ef:ec:0b:f0:3d:83:fd:bb:a9:2b:ad:c1:df:
12:b1:3b:2e:19:31:eb:10:e3:75:60:06:9d:d3:6d:
7f:20:d9:69:d7:66:70:e6:dd:16:92:cd:39:11:a2:
86:9c:d5:82:bb:d2:b3:c9:01:b3:51:34:53:62:1a:
9c:75:68:44:d7:72:20:c3:30:92:eb:79:fc:96:12:
2e:53:89:ca:e8:b7:22:77:1d:ec:5d:bc:de:1d:1a:
7b:d4:cf:80:a4:da:9c:a7:20:e5:c3:ae:3b:a1:84:
a0:5d:20:e0:9a:f3:28:b8:9a:7b:de:20:0a:e9:d9:
a3:ba:e8:48:ab:a2:ab:3d:49:56:7f:95:64:78:b3:
eb:cb:68:fc:28:47:8c:4a:c4:33:95:60:88:20:3c:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:20:D3:25:D1:B6:08:7A:75:5C:DE:82:CD:78:77:D2:AF:C4:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
X509v3 Authority Key Identifier:
keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:df:9d:c4:15:e7:bb:6f:1d:95:e4:c5:80:80:ad:25:cd:37:
0f:00:4c:8d:c7:da:be:33:c4:1e:3b:91:6b:20:82:3c:79:5e:
f6:91:42:a8:7f:00:0a:d7:e0:ae:14:dd:9a:f5:eb:09:a9:3e:
53:66:79:a2:65:33:39:48:15:26:0e:e8:78:ef:65:87:76:f1:
01:6c:0c:00:b4:c5:bf:dc:6d:10:cb:c1:3f:8a:7d:4b:41:e3:
c0:51:1c:6a:6b:1d:6e:75:37:71:3f:cc:d9:08:43:13:78:8d:
91:03:5d:71:47:f1:7d:d1:13:db:ec:a0:c6:10:ec:05:1c:3f:
1c:aa:68:8a:7c:4d:c4:c6:f8:fb:fe:94:e3:37:11:73:c6:f6:
81:f2:5c:cf:6b:bd:ed:07:52:b8:4c:f0:66:52:ee:38:e9:98:
ca:2c:fe:5b:9e:dd:45:37:7e:02:61:c2:29:82:e1:bd:b2:59:
01:67:7f:11:42:a3:a8:50:fa:75:70:4c:5f:ba:96:25:7b:c4:
c2:ad:8c:e7:65:69:f2:8b:df:c6:1f:7f:6f:1b:0d:9f:56:eb:
10:6e:f1:1f:48:cb:f0:a1:81:a7:95:2c:bb:52:50:7a:c0:34:
a5:91:d6:b3:79:ad:27:ef:e5:d7:d1:c1:54:1a:c3:71:b0:24:
34:42:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:50:17 2025 by rpki-client