
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa
File: d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa (raw, json)
Hash identifier: 8CiSZLOPdIJmVB7XlBw04IRCCwhp5vk7L9UvKDPUH8I=
Subject key identifier: 82:B2:26:06:F1:3F:F5:3F:C4:7F:FE:0C:B2:05:94:2B:2C:94:54:D5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584B7A0C694BCFF73E3C5BC549E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa
Signing time: Fri 10 Oct 2025 15:41:20 +0000
ROA not before: Fri 10 Oct 2025 15:41:20 +0000
ROA not after: Thu 08 Jan 2026 16:41:20 +0000
asID: 19718
IP address blocks: 152.22.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7a:0c:69:4b:cf:f7:3e:3c:5b:c5:49:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 10 15:41:20 2025 GMT
Not After : Jan 8 16:41:20 2026 GMT
Subject: CN=b772ac95-316b-419e-bba4-e3f153dd6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:e1:89:3e:6c:6e:98:2f:37:c8:49:f0:79:
6d:89:4f:1d:97:fc:6d:10:4d:d8:6f:0b:2d:09:3e:
71:a9:f0:35:f6:c4:d3:0a:3a:a6:67:f9:22:f9:9a:
d8:f1:9c:55:ea:a9:b6:c4:b9:b1:5c:05:34:68:0e:
bf:c5:2a:a6:14:13:4d:4a:46:41:0a:64:72:8c:14:
07:af:bf:97:21:92:ee:3e:4e:a7:a7:05:1b:72:20:
89:37:4d:00:c5:4e:31:4b:ad:71:05:95:24:23:08:
af:74:a1:74:c1:c8:e2:51:a7:40:e3:55:e4:67:5a:
95:8b:c9:7a:4f:c7:61:6d:b0:53:78:d5:9b:44:f1:
33:0a:ea:c0:bb:22:38:db:74:85:cc:c6:1a:4b:28:
8b:d3:4b:3b:fd:1b:e8:c9:76:1c:6b:96:27:d1:2e:
8e:f7:e0:56:9d:dd:79:e5:d2:7a:78:0c:0d:58:f3:
15:fc:35:07:8c:f4:40:65:87:51:74:80:6e:53:d6:
1f:84:15:a1:e4:65:d7:50:57:a7:95:59:2d:b1:59:
2e:4a:67:38:a0:c4:63:6f:02:3d:53:a5:f1:90:85:
f5:ed:9e:78:18:01:3b:40:c8:80:81:65:14:30:a5:
d2:43:9d:3d:7a:27:0d:16:ad:e1:9d:54:1a:0d:33:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:26:06:F1:3F:F5:3F:C4:7F:FE:0C:B2:05:94:2B:2C:94:54:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:90:1b:d0:44:c7:95:4d:6c:40:9e:a8:aa:78:69:d3:5e:7d:
e5:e5:d1:77:80:45:d7:e4:af:07:6f:90:2c:25:cf:f1:de:ad:
d0:5b:5a:f4:fb:d4:5f:4a:1a:4d:69:c7:6d:ec:12:ad:e6:ed:
7e:ba:f2:bb:70:56:8a:54:d1:82:16:95:1e:29:a7:06:41:25:
5d:82:2f:91:3d:fa:f5:d7:70:1d:7c:7d:b6:d1:4e:c8:58:b5:
93:c2:55:4f:03:53:09:ad:38:ab:83:e5:20:a4:da:ae:39:3f:
3f:6f:42:c6:62:9a:af:95:69:f7:30:9f:af:03:8d:e7:29:ae:
ef:12:45:54:f1:5c:11:30:3f:10:14:5c:d5:99:75:01:d5:3e:
44:a8:45:6c:1a:1a:a6:9d:17:5f:84:b4:3f:fb:e8:b9:a6:06:
de:f7:3e:da:3b:bc:40:a6:db:5e:c9:0d:cc:c3:be:9d:42:78:
e9:dd:92:f2:0a:34:c9:89:f6:69:f4:40:49:7a:73:79:c9:2d:
32:c1:4d:af:8b:08:5c:32:67:31:ec:0e:9c:67:7b:0d:db:f2:
ed:02:28:9e:c7:9c:0f:7d:16:fc:a0:7b:08:de:1b:1b:64:3f:
3f:72:2a:27:c4:f7:74:ba:87:12:9e:b8:f0:28:24:b4:17:80:
f4:fe:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 09:46:35 2025 by rpki-client