
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
File: d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa (raw, json)
Hash identifier: wNHzTOxPp+sVRgtaxYbWmRAbflv0Fb+pXXTKsLxJyzk=
Subject key identifier: 1A:62:BE:09:46:B1:F6:C6:CF:30:7F:D1:EE:FC:0C:6E:4E:83:EF:D7
Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial: 010D0C9F4328584BCD9B296C05B08AD6DA2EA380
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 26744
IP address blocks: 206.180.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9b:29:6c:05:b0:8a:d6:da:2e:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=643d859e-8d50-4d26-86d3-6fccce659f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:56:78:5d:40:4b:1d:1c:ae:74:6e:8d:69:
58:76:7f:81:f7:a1:ff:8f:6e:4c:8f:76:c4:20:72:
38:5a:2b:dd:d1:a9:e2:bf:a3:5a:8a:68:9a:a6:39:
08:e8:47:de:7a:a2:64:77:7b:2a:ed:db:e4:07:60:
31:73:56:17:e9:e5:df:2c:29:21:b7:52:55:b0:0a:
3b:91:d5:56:45:86:59:e0:f2:9f:c5:7b:18:cc:d8:
c6:08:6c:c4:39:21:73:3d:a7:78:16:c7:09:3c:9b:
32:db:7e:9a:e9:0d:36:66:45:a0:15:63:77:97:3c:
e6:3a:c4:df:d7:6d:3d:72:ba:0f:76:57:fc:c1:44:
95:f2:81:c0:81:57:25:9e:50:d5:d0:24:04:6b:38:
e9:4c:f1:cf:85:35:3e:aa:66:f6:8f:ed:28:4f:53:
2d:71:39:ec:bf:42:0f:37:03:21:1b:9c:d9:8b:43:
a5:71:1f:d6:ea:21:e9:f0:4d:35:ef:67:4d:bf:f1:
72:6e:e9:fd:df:1c:1d:43:60:c6:c3:6f:7a:a0:e6:
67:8e:de:96:67:32:47:22:48:aa:48:70:eb:50:3f:
ea:a2:dc:f9:bf:13:e4:f9:34:41:22:7f:12:ba:93:
d1:30:73:ee:57:1a:d7:5d:8f:77:94:68:d6:31:66:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:62:BE:09:46:B1:F6:C6:CF:30:7F:D1:EE:FC:0C:6E:4E:83:EF:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
X509v3 Authority Key Identifier:
keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.180.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:49:7d:4a:cc:f0:ac:3a:e9:e9:cb:56:a1:e6:52:e7:8b:f5:
54:e0:a2:05:e0:ee:fa:05:03:05:45:3b:52:c1:37:57:66:fd:
0a:a0:4f:c8:95:bd:d5:7b:63:2d:6b:ba:b0:ab:60:08:bf:77:
7b:97:d6:23:63:4f:7d:3d:c4:4b:8d:74:65:9a:49:8e:bf:e5:
b7:65:ab:74:61:54:b7:45:eb:17:00:85:f6:fc:db:c1:18:83:
c3:cd:8f:39:80:1a:0f:5b:9c:6d:c8:86:28:bd:62:d2:15:e1:
34:99:cc:50:b5:16:47:4e:03:bb:2c:2b:e9:8f:5f:41:f6:75:
df:3c:30:80:f9:a3:bf:42:e4:30:19:74:6e:50:d4:a6:24:3a:
53:c0:3d:e5:71:0c:16:e0:12:c8:03:73:41:cf:d7:c8:25:f0:
9f:a2:61:51:41:9b:7d:55:12:8b:db:b8:b2:1e:1e:e1:a9:3e:
8d:b0:a9:c5:92:c1:ef:f5:03:70:45:6a:69:fd:e3:92:77:99:
9f:0a:4d:a0:88:84:34:77:90:72:0a:a4:eb:d3:17:23:e9:15:
d2:a6:87:0e:33:98:1e:4a:d4:ab:13:85:57:91:40:c9:66:62:
dc:2e:19:f7:19:23:9e:c9:4b:76:76:7a:77:22:7c:25:42:5b:
5e:f1:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:06:56 2025 by rpki-client