
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa
File: f6631a5a-2668-398c-87e1-c8c974958b25.roa (raw, json)
Hash identifier: 4bIFaxY50D8QoxMmpNmK+v5GIc5+X+8ZnuBRlRvRzLU=
Subject key identifier: F0:C3:42:72:DA:7A:26:0F:0A:E4:49:D2:1B:98:73:19:6A:FA:41:AA
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F4328584B4E7713EC7011AB82A84C1DE0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa
Signing time: Thu 25 Sep 2025 01:00:33 +0000
ROA not before: Thu 25 Sep 2025 01:00:33 +0000
ROA not after: Wed 24 Dec 2025 02:00:33 +0000
asID: 204325
IP address blocks: 192.228.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4e:77:13:ec:70:11:ab:82:a8:4c:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Sep 25 01:00:33 2025 GMT
Not After : Dec 24 02:00:33 2025 GMT
Subject: CN=7c4b2b71-b685-4b75-9c46-800f99bee467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:ec:28:ff:24:51:73:38:6e:de:8b:ea:43:
dd:2b:aa:c3:b4:fb:6d:9a:9e:fd:b2:0a:f9:b1:c3:
ff:22:e6:4c:03:c7:2b:6c:a8:24:73:47:29:97:07:
13:94:86:d8:d6:c0:98:7b:ab:dc:18:8f:9c:3c:9a:
db:f9:22:59:cd:a6:2a:09:98:3c:fa:af:b6:ec:1c:
7e:18:97:7a:d5:7d:b2:ef:66:33:15:12:72:b2:6e:
d4:d2:b2:d6:ed:9d:00:96:d5:51:a6:2f:2d:a3:f0:
58:bb:62:6b:27:60:21:e1:96:41:20:a9:71:85:8a:
63:09:2c:75:e4:3e:41:d9:13:1d:f5:c1:44:3e:74:
b1:18:9f:7a:b8:7e:83:3a:af:c6:03:80:34:b4:7e:
18:9d:2e:30:5b:98:3b:6c:5c:ba:df:cb:48:ad:38:
bf:af:3f:55:9b:b4:2e:44:2c:57:bc:1c:6a:f6:08:
69:70:db:e5:66:e3:de:c1:2c:48:5f:b4:e7:f6:ff:
fd:d5:37:ca:ec:be:3f:1c:7f:32:09:53:d8:cc:fb:
eb:4c:90:45:73:a3:2c:a1:62:49:84:f4:ac:20:af:
7d:cd:be:54:c0:6d:69:16:2e:bf:ce:9c:81:19:10:
28:3a:a4:3a:02:7c:ae:21:e5:8f:5b:52:78:c5:5a:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:42:72:DA:7A:26:0F:0A:E4:49:D2:1B:98:73:19:6A:FA:41:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.228.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:8b:be:40:07:0b:bd:f4:be:da:b2:1d:63:1a:5e:88:23:9e:
d2:dc:07:85:4d:f3:45:97:fd:ef:8b:2f:66:98:7c:34:e3:ef:
c6:05:3c:22:22:f3:b5:41:2a:4c:ae:10:46:62:7c:0c:d8:47:
0c:ca:1a:d5:57:b4:49:ea:89:d9:d9:16:be:fb:50:78:76:e8:
8a:97:72:35:27:71:62:68:6d:b5:3d:39:de:56:51:bf:5e:e4:
76:57:ef:05:10:73:87:bd:9b:07:57:96:6e:49:fc:2a:d1:61:
4e:d0:b6:e8:b3:d8:b2:b9:f1:bf:5d:22:c8:61:07:62:ca:9e:
87:71:32:fa:a6:16:ef:49:d6:04:b6:35:10:06:97:a7:ea:a7:
76:75:94:48:2e:66:d9:08:75:7d:e3:e4:7f:45:58:9e:b4:d6:
f5:d5:69:e0:34:e0:0c:c5:f9:0c:43:85:77:89:e3:e1:de:7e:
eb:61:39:3e:f2:18:af:1c:a6:db:a0:d4:b0:c9:a3:66:a5:cd:
7a:3a:a0:05:62:40:5b:ab:d9:98:a1:45:46:20:f6:88:67:b2:
d3:04:4a:06:be:78:4d:72:3e:71:f9:3b:3d:05:60:0a:5f:7e:
e2:b6:4c:88:c3:d7:00:8d:df:5a:ac:67:12:cd:f8:ca:2e:c4:
2d:f1:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:01 2025 by rpki-client