
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cdf434ec-10b6-316e-b725-113138fa2c0a.roa
File: cdf434ec-10b6-316e-b725-113138fa2c0a.roa (raw, json)
Hash identifier: oXD5phsy+oCD/H5gqR2uOydmwf4eEBjcr2auc+uC6mI=
Subject key identifier: 84:4E:F3:91:DB:F4:72:27:81:02:46:B2:DF:01:43:40:46:06:75:03
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584B980A85C5D231C744CEF7C440
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cdf434ec-10b6-316e-b725-113138fa2c0a.roa
Signing time: Tue 21 Oct 2025 09:31:46 +0000
ROA not before: Tue 21 Oct 2025 09:31:46 +0000
ROA not after: Mon 19 Jan 2026 10:31:46 +0000
asID: 35039
IP address blocks: 130.214.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:0a:85:c5:d2:31:c7:44:ce:f7:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Oct 21 09:31:46 2025 GMT
Not After : Jan 19 10:31:46 2026 GMT
Subject: CN=88680560-9765-465b-ba02-94c920ed27a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9c:ab:de:cf:8c:51:82:16:8b:c1:6a:98:08:
02:b6:2b:e0:f4:55:6d:a8:30:a6:af:59:d1:96:63:
89:55:68:b2:79:2f:51:54:5b:40:b9:c5:4b:7b:b6:
76:23:f5:95:f3:fe:ec:46:a7:aa:26:10:1b:84:8b:
82:22:fa:f6:a4:06:dd:80:99:33:65:06:66:2d:c4:
27:f7:10:b5:4c:a6:66:b0:dc:0d:96:75:fe:22:b9:
f2:6c:90:67:1a:e9:0c:0d:ce:1f:46:57:9b:14:29:
38:87:e6:be:90:56:6b:0e:fc:30:63:8a:c5:3e:22:
7e:2b:e1:ff:92:ae:2f:84:94:a8:38:1e:03:32:a7:
e2:dc:52:cb:d5:e2:15:4a:29:45:d0:4d:c0:f4:c3:
dd:c1:36:be:3c:97:21:ec:da:6f:e8:33:cd:c1:57:
9c:3f:c0:41:46:07:e8:fc:98:3f:40:2e:04:b8:0b:
6b:d4:f5:5b:54:37:f0:b2:00:25:cb:e3:21:0a:09:
e6:af:b0:ae:68:79:4f:3e:ca:55:1f:19:63:b2:76:
eb:36:09:a3:46:fa:8b:2d:e7:4e:b5:37:2b:8c:49:
fb:b6:fa:6d:0f:20:06:c8:26:0f:ed:47:8d:18:4e:
20:43:bc:d6:aa:e3:be:cb:4a:dc:4a:00:fb:02:d8:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:F3:91:DB:F4:72:27:81:02:46:B2:DF:01:43:40:46:06:75:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cdf434ec-10b6-316e-b725-113138fa2c0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
130.214.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:5c:0a:ba:e9:0e:13:65:59:fe:52:7f:e5:50:b6:7a:cc:fd:
ab:1d:54:c5:b2:fc:77:26:cd:30:55:b2:ed:95:c8:d3:b4:fe:
aa:5f:58:b7:76:5b:1a:49:c5:7f:9c:fa:96:e2:e1:65:96:3e:
c0:13:97:bc:3e:5e:22:54:50:98:8d:cd:4d:c8:24:8a:7d:59:
d9:84:cf:5b:af:9b:98:57:a7:2c:37:4b:a1:c3:12:48:6e:48:
9b:7f:b3:1a:6f:b2:64:b2:4e:f0:ac:89:14:79:94:c1:ce:37:
85:f4:79:65:07:3b:08:dd:0e:5a:a5:50:00:d9:91:77:26:f3:
12:bc:9e:d6:2e:cf:f0:a5:f1:4c:4c:78:de:8c:ed:e9:86:1f:
27:c5:58:f5:e1:dd:2f:7d:fe:70:8b:f6:e1:00:83:fa:7b:7c:
a3:98:30:8b:9d:d5:bf:44:a3:ba:a7:18:52:43:f6:2f:90:e9:
bf:62:29:80:e9:bb:53:d4:8d:8b:f3:0b:81:69:4c:05:77:f5:
ec:95:52:ed:21:5e:43:e6:99:9f:1e:f6:57:a4:37:87:35:9d:
ec:eb:ab:58:0d:73:0d:d5:8f:49:c4:87:65:53:61:8c:4d:80:
cf:30:e2:56:b1:fd:3d:b7:57:eb:ce:44:fe:69:3b:9a:a4:fc:
ef:9b:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:50 2025 by rpki-client