
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ceba630f-b791-3d1c-8bf3-b39506de3604.roa
File: ceba630f-b791-3d1c-8bf3-b39506de3604.roa (raw, json)
Hash identifier: 553VKilSqT0ap3NC582FPPGODbxlrQO3Dyt01XPXb2o=
Subject key identifier: 2A:EB:1E:E8:B1:21:00:92:13:D5:4E:A7:EC:6A:46:BE:4A:F6:99:B8
Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial: 010D0C9F4328584BCD9B2813CBC6F7EE08AC6F40
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ceba630f-b791-3d1c-8bf3-b39506de3604.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 26744
IP address blocks: 147.124.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9b:28:13:cb:c6:f7:ee:08:ac:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=dcb16fe9-5f88-4b26-9aa9-c07a5b6b8c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:38:f8:1f:6b:3b:52:d4:97:94:78:26:06:
29:92:aa:ca:e0:e3:7e:96:97:bd:c9:9d:02:ee:57:
8c:df:7f:1e:f7:a2:1f:88:a3:9d:71:d4:c4:67:f4:
5d:e2:9e:0b:95:04:63:3d:ce:db:0c:14:db:51:d5:
41:e1:a5:a6:50:17:eb:a3:5a:ae:c8:ed:04:77:1d:
4b:b8:75:9e:39:6b:a1:a2:aa:31:e8:89:51:10:0a:
3b:51:b2:ed:b1:a7:83:8a:f5:bd:d5:8a:1c:14:dc:
30:8e:6b:dc:49:e8:f1:43:61:57:5f:68:54:f1:96:
79:b4:d5:ef:92:1e:01:29:aa:e9:76:0b:35:cc:8e:
93:08:a6:0d:d9:d9:9e:55:b5:b9:57:31:22:53:ac:
ce:83:7e:26:c3:df:63:ee:f9:ac:4a:d6:f7:01:f8:
bf:cf:a5:ec:7b:d1:23:99:12:2c:58:2a:d1:76:45:
3c:5b:7d:46:59:8d:03:4c:ca:25:0d:e1:49:f8:61:
aa:11:74:d8:35:bc:eb:de:2a:f5:c7:f8:57:34:ef:
2a:16:9e:c3:bf:36:d8:f2:3d:b4:24:1e:fc:e8:e8:
e8:50:f7:93:12:93:b9:79:98:6f:01:2b:2e:c3:5f:
a9:8b:c8:a4:85:af:43:2f:cf:03:e7:22:09:e3:ca:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:1E:E8:B1:21:00:92:13:D5:4E:A7:EC:6A:46:BE:4A:F6:99:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ceba630f-b791-3d1c-8bf3-b39506de3604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
X509v3 Authority Key Identifier:
keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:2b:52:ed:48:ef:52:a9:3b:7d:c0:64:f3:a7:23:37:02:27:
34:42:b2:38:6a:73:8b:4a:82:fb:c8:9c:e9:53:1c:58:b8:eb:
68:49:25:14:e0:84:4a:f9:bf:cb:6b:c8:ab:21:22:8c:20:f8:
a7:cd:63:f3:88:90:ea:01:e7:38:4d:cc:4e:cf:c2:a8:64:d7:
00:7d:31:e3:af:e0:10:58:2c:1d:8b:ee:91:6b:d2:41:ca:eb:
36:d3:6b:eb:f3:a6:49:14:09:94:93:5b:29:63:c8:ad:d2:69:
73:1a:4a:7b:3f:52:f3:cb:f6:0a:33:c8:cf:6e:49:9b:68:7c:
5b:bf:d0:ac:23:44:b9:ea:d0:aa:7b:f7:c7:dc:6f:8b:8f:7b:
b3:c9:3b:c9:78:5a:ff:1b:74:d8:e3:54:d3:2f:76:90:c5:2a:
bc:60:93:a3:e0:4b:d8:9a:16:e2:54:4b:f8:c1:40:db:0a:0b:
2f:27:14:65:b2:ef:73:77:44:81:20:59:f7:4f:07:37:ab:cd:
75:99:92:07:6a:a3:ee:53:38:7c:45:64:31:85:9f:6e:7f:d6:
bf:f8:f4:31:ee:e6:5d:cb:e5:93:0b:0c:1f:25:ae:1f:73:66:
f4:b3:d8:81:b8:0f:2a:d6:02:b3:a2:26:9f:fc:24:69:d4:29:
89:56:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:12:52 2025 by rpki-client