
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22b1bab1-9754-3fb4-9282-5a6a6f6b5434.roa
File: 22b1bab1-9754-3fb4-9282-5a6a6f6b5434.roa (raw, json)
Hash identifier: k3X9+9QaVhO7Fc9POuF6P8LfciSIMJWIelXo3BOzLI4=
Subject key identifier: D4:0F:97:DC:35:64:71:04:12:51:D6:E2:B6:F1:BC:61:AD:FB:A9:C1
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584B980A6B86799A67D71A92AB80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22b1bab1-9754-3fb4-9282-5a6a6f6b5434.roa
Signing time: Tue 21 Oct 2025 09:31:34 +0000
ROA not before: Tue 21 Oct 2025 09:31:34 +0000
ROA not after: Mon 19 Jan 2026 10:31:34 +0000
asID: 35039
IP address blocks: 130.214.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:0a:6b:86:79:9a:67:d7:1a:92:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Oct 21 09:31:34 2025 GMT
Not After : Jan 19 10:31:34 2026 GMT
Subject: CN=46ba443c-36da-48e4-a792-cc5f4c22a70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:71:89:e9:ee:0b:c7:b7:83:17:3a:e8:6e:
91:79:c5:4b:c3:62:6d:71:c4:4a:f3:25:24:88:3c:
4b:8d:c2:43:ed:2e:8e:ff:11:91:d9:44:3a:cd:db:
e2:ef:15:2f:dc:8f:b3:e8:2e:77:ec:39:da:c4:4b:
fd:94:92:62:13:b0:6f:ae:33:18:f3:a8:3e:fd:71:
30:4c:97:34:3c:74:25:45:2e:3a:14:22:9c:0e:89:
ce:2f:11:3a:b1:6a:df:1b:f9:91:5b:3d:d2:97:04:
f5:25:a2:7f:54:f7:99:99:35:7d:ed:36:62:44:5b:
b5:9f:f2:24:ad:6e:44:85:10:b0:10:62:e7:ca:40:
3a:9a:f2:c0:af:b6:c0:8f:89:91:16:5e:47:d6:00:
65:16:dd:29:15:da:9b:ec:fe:93:9d:51:56:bf:0e:
c3:a7:45:a0:38:43:22:d1:34:b5:31:07:6f:49:2c:
09:6f:bc:58:1b:29:5c:11:e2:1f:aa:b5:a7:a4:eb:
0b:34:25:19:66:a9:48:69:76:7a:45:08:40:44:c1:
c2:82:1b:e9:c6:c9:4b:dc:4b:6c:d0:c1:b1:c4:72:
ee:fa:6c:4e:27:44:aa:aa:ab:d0:02:57:ed:55:9a:
1d:56:3d:57:07:35:3e:2c:f9:09:a7:28:2d:af:10:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:97:DC:35:64:71:04:12:51:D6:E2:B6:F1:BC:61:AD:FB:A9:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22b1bab1-9754-3fb4-9282-5a6a6f6b5434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
130.214.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a1:c7:d7:0e:76:c2:5a:f3:95:4e:e1:64:3a:87:9c:64:09:
db:47:db:00:67:04:d0:ef:3d:b2:75:93:52:fb:93:6a:0b:75:
e2:9c:d5:d2:52:47:87:aa:f0:d6:ba:c7:12:75:13:5b:ab:6d:
e6:5d:ca:1d:29:f7:25:9f:b5:7a:e6:5f:05:1c:03:8d:03:c8:
90:7e:92:66:9c:00:23:52:d9:95:17:1e:fc:e5:98:e0:3c:db:
9c:31:65:ff:4c:bc:54:69:46:dd:13:92:a0:51:df:8c:2b:bc:
97:dc:18:c6:0e:0b:9a:25:ea:f2:1c:46:cc:25:a6:89:92:42:
e0:46:6f:ea:3f:24:65:37:e4:4f:f6:8c:a2:9f:c4:d3:70:c7:
dc:60:cd:5c:2a:6b:c3:5f:93:bf:d2:17:cd:64:dd:0e:e7:bb:
26:e0:35:0f:a6:99:90:58:7b:c1:00:c4:47:38:3e:44:a6:31:
ea:e3:05:bc:e1:3a:d6:26:a9:42:5a:a8:c4:44:b5:ea:14:10:
2a:9f:43:02:e1:3d:81:86:bb:6e:ca:25:dd:10:2c:a9:84:34:
51:15:60:8e:c3:bf:b4:6e:6b:0c:d1:33:53:28:90:0a:98:4e:
97:8e:d4:8f:35:86:53:fd:59:23:4d:55:58:25:34:b3:ec:2f:
0a:79:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:53 2025 by rpki-client