
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/760ff67c-e86c-3c88-913e-23608404fd7a.roa
File: 760ff67c-e86c-3c88-913e-23608404fd7a.roa (raw, json)
Hash identifier: Np7Ge9XNb+cFJBawOhV/CspHPXZ3JV4r7vTKS1vV63k=
Subject key identifier: 4E:33:1A:0E:FA:A2:D1:93:CE:45:4C:78:BC:9D:D2:CC:36:79:D3:93
Certificate issuer: /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial: 010D0C9F4328584B99D77F3A0C0FD7F294B48DC0
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/760ff67c-e86c-3c88-913e-23608404fd7a.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 19331
IP address blocks: 199.33.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:7f:3a:0c:0f:d7:f2:94:b4:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=c9d4bfae-4ad6-481a-a168-aaf26c77ac4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a4:bf:82:fa:48:f5:da:d8:0d:43:52:97:8b:
09:fa:27:41:a7:41:68:6d:90:55:ce:56:d7:88:55:
2d:a9:96:2d:37:e5:30:b8:18:82:65:01:ea:75:3d:
a5:0e:29:06:22:56:31:67:16:0f:36:d9:ff:1c:7d:
6c:c3:0a:21:fd:6a:7f:3e:09:ab:78:ea:77:26:4c:
69:e1:35:58:04:42:25:fa:d7:fe:70:cb:f3:f5:29:
21:7d:37:d5:eb:76:0f:99:13:40:6d:f4:1f:13:2f:
21:05:c4:af:46:24:8c:3e:66:e0:9c:bd:78:90:47:
a1:cb:28:5a:2a:07:9c:06:4d:cd:98:7f:24:8f:71:
95:81:2c:76:b1:bf:f6:b5:6c:57:6b:b4:76:8c:ef:
b6:17:3f:17:90:b3:71:6d:d2:28:9f:73:04:05:7c:
4b:02:6a:11:db:53:c9:34:49:d1:1f:4e:47:fe:7b:
27:6d:11:1f:d1:99:b6:bb:d1:f3:ec:dc:0e:bb:12:
2b:cd:e9:bf:72:10:5d:7e:52:bf:e7:9f:12:b3:aa:
b6:ce:9e:47:6a:4f:8b:be:3c:c7:30:aa:5d:21:36:
1a:02:8e:51:a5:30:3d:32:18:51:97:1d:3b:5e:05:
8c:36:e1:69:76:03:ad:a6:e9:4c:30:8e:88:13:66:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:33:1A:0E:FA:A2:D1:93:CE:45:4C:78:BC:9D:D2:CC:36:79:D3:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/760ff67c-e86c-3c88-913e-23608404fd7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
X509v3 Authority Key Identifier:
keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.33.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0a:ab:41:2e:8d:51:4a:f6:ba:d3:14:2f:e6:05:bd:79:97:
e7:6e:91:90:3b:71:e9:38:00:41:65:50:38:b0:89:ef:58:23:
a7:ad:77:05:b6:11:7d:04:39:f0:42:43:3e:b2:d0:09:fa:8a:
69:51:04:e1:17:2c:2a:27:2a:5e:2d:ae:a2:5e:40:67:e4:64:
0d:d6:94:4d:41:12:21:36:5a:2d:27:dd:17:2f:4a:a0:18:3f:
b4:69:46:eb:25:47:e7:85:28:13:19:3f:94:13:19:bc:3e:9c:
e4:00:a7:72:55:19:29:af:dc:56:c0:1b:15:6e:5b:9e:0d:c3:
63:36:e9:ec:9d:41:aa:e8:92:01:42:ae:54:78:08:5f:ea:c9:
20:57:c8:72:5f:fa:26:5e:02:c8:f4:11:f8:21:60:af:33:b5:
86:5b:e9:f1:91:63:7a:e0:6f:5c:03:9c:fc:36:8a:12:e7:0e:
16:7e:f5:38:3e:5e:95:37:30:d4:27:82:40:15:ce:5e:88:49:
93:2d:cd:e4:b0:d8:e6:b9:6f:31:97:72:fa:94:44:1c:88:e0:
a6:7a:1f:ea:dc:79:22:98:71:0e:97:63:15:8f:42:a1:6f:4a:
42:6f:02:72:c9:46:f1:5e:72:a4:b5:1e:0f:63:3b:27:14:a1:
32:65:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:16:13 2025 by rpki-client