
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa
File: 28a41872-63b1-3476-b351-97f772fb1f96.roa (raw, json)
Hash identifier: cSwLzFGFmjQYYtfX68rwD5ooBqCQ1X1g/2+KElV96oo=
Subject key identifier: 13:AA:FD:EF:13:36:6B:1C:1F:F3:AE:7C:90:94:C5:22:91:8A:76:CB
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F4328584AF95140668A850CB3724F5300
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa
Signing time: Mon 25 Aug 2025 13:00:39 +0000
ROA not before: Mon 25 Aug 2025 13:00:39 +0000
ROA not after: Sun 23 Nov 2025 14:00:39 +0000
asID: 398712
IP address blocks: 23.227.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f9:51:40:66:8a:85:0c:b3:72:4f:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Aug 25 13:00:39 2025 GMT
Not After : Nov 23 14:00:39 2025 GMT
Subject: CN=4e0b6f05-23b0-4a49-b20b-9a9997f99e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:36:fa:68:b4:42:b5:d1:ca:bc:6b:14:46:
d4:58:42:12:ca:41:e1:29:f9:2d:6f:45:e6:51:cb:
30:f0:84:c0:2d:ec:34:d2:f3:47:41:f3:04:73:f9:
71:5a:2d:d1:0b:6b:f2:4f:6c:95:10:b3:79:37:2f:
e9:3e:c8:73:bf:45:fd:60:56:37:0c:e5:5c:94:5a:
c4:33:28:60:67:48:e0:85:00:e1:1f:63:5d:c6:26:
35:a6:21:9a:e7:72:29:fd:ed:1c:eb:be:2a:43:85:
10:13:33:98:76:52:86:0c:c2:66:be:03:77:c3:3c:
78:6a:2f:73:fa:1e:de:98:6b:60:b9:c4:6d:2c:ea:
92:58:7e:db:a6:93:79:9e:9d:66:63:d2:0c:2d:b9:
0f:41:00:71:5d:d9:8a:62:f9:ce:0d:75:f7:52:72:
f9:9d:ce:4a:43:02:d9:4a:d4:3d:38:e5:9d:04:60:
af:41:54:82:83:3e:3d:a3:cf:d4:79:c8:87:51:76:
4a:d3:ff:b6:75:32:01:87:d7:60:65:e6:f5:12:d3:
ab:a6:50:53:12:94:9e:cc:9c:14:ae:34:c2:aa:8a:
c7:d4:65:c7:b3:fa:ed:98:6f:68:bb:98:d2:77:ef:
26:a4:81:16:71:66:de:7e:ff:44:e0:3b:97:36:06:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AA:FD:EF:13:36:6B:1C:1F:F3:AE:7C:90:94:C5:22:91:8A:76:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b3:b9:ee:31:d4:0f:5a:d1:e4:fb:82:b0:33:77:81:94:87:
ab:60:15:b9:9b:e1:67:fa:c5:51:6b:78:be:e3:22:cf:f7:74:
6b:f8:65:1f:b8:03:73:90:76:bd:65:7a:ff:25:96:b9:03:14:
ee:d9:d6:d9:ad:93:2f:07:cc:9f:ec:b7:d9:ec:43:e4:3d:b2:
23:34:c1:eb:e9:26:fe:61:d0:1b:3e:a4:62:c4:26:e1:81:e7:
92:7b:f6:f9:5c:f9:55:1d:00:0a:c3:af:c8:cb:c5:2c:04:42:
8e:84:d8:39:8a:e8:bd:27:a7:6a:11:67:4a:7c:a2:97:6b:b5:
d3:80:6c:19:7d:d2:42:74:2b:d0:a2:cf:98:09:d6:8c:ef:50:
13:3b:5d:9a:dc:38:d6:62:01:68:53:44:a1:cb:93:a3:be:24:
a7:8e:ab:93:62:a6:18:91:f8:b6:7e:ea:81:ed:02:fa:fa:28:
5b:8b:74:18:c0:de:81:04:31:7b:a6:0c:0b:57:94:1f:01:b8:
01:3f:40:63:06:9f:b8:92:00:f5:b2:fb:70:64:56:90:9f:ad:
86:c7:cc:ca:c9:7f:4c:5d:71:a8:b9:e0:4e:51:97:15:0d:b4:
77:04:c3:77:27:ba:bf:4c:57:ad:49:8f:e4:f7:7d:4a:65:74:
37:a3:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:53:42 2025 by rpki-client