
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa
File: 22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa (raw, json)
Hash identifier: KtlCiZnlEz4LSBma/ikBq2+vMh173xO59rDwu/hd7qI=
Subject key identifier: 9D:71:CE:D1:EA:86:DE:05:8B:55:3F:B4:C5:30:20:56:9C:8A:2B:00
Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial: 010D0C9F4328584B970CD46C7660D2D41D646B40
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 13984
IP address blocks: 209.151.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:d4:6c:76:60:d2:d4:1d:64:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=719d2aba-6172-4eac-90b8-659cf0d91d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:58:9a:6e:22:8a:45:87:83:63:b8:97:ea:
c1:ef:f0:19:26:49:2f:d4:cd:d9:06:b4:8e:bb:09:
dd:ed:9c:0f:9c:22:a9:09:06:0e:7f:23:18:e4:b5:
4c:95:da:e4:bb:8b:98:a7:dc:66:d0:7a:22:f6:ab:
ed:12:4a:d4:3b:06:82:07:43:31:6d:92:26:5a:4d:
43:38:80:fe:b2:c6:5e:0f:ee:d7:6c:47:6c:4c:b0:
f9:dc:61:4c:2d:04:d4:1e:b9:b1:a4:34:67:d5:9f:
d5:d8:e2:43:6e:86:ba:e6:8f:5e:17:19:8e:cc:d3:
b9:07:46:dc:0a:f1:a7:74:44:f3:ed:02:9c:95:a0:
5f:3e:b5:e5:91:30:95:be:8f:00:71:ac:76:51:b8:
21:ca:e1:c9:9a:46:ad:76:92:96:5e:db:73:b8:2e:
be:5d:6c:2d:bc:a1:4a:6e:e6:34:b4:f9:de:10:6a:
28:3c:08:8d:4e:ea:77:a1:57:84:97:9b:7f:3a:3f:
72:eb:43:32:cc:31:22:02:fb:42:e7:fd:89:25:21:
92:72:49:68:1d:95:9b:79:c7:75:ec:ee:16:42:ce:
42:e3:72:09:ec:e5:1c:86:ec:26:b4:84:f7:d3:a8:
ab:ed:97:d7:9d:ce:80:13:66:62:e7:87:54:08:dc:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:71:CE:D1:EA:86:DE:05:8B:55:3F:B4:C5:30:20:56:9C:8A:2B:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
X509v3 Authority Key Identifier:
keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:19:e2:51:1f:a0:d6:e4:96:ec:25:f2:13:e4:99:91:98:1c:
7a:3f:5b:1a:8f:5f:3d:c7:78:74:3a:81:a4:bb:cb:10:99:c7:
a6:b7:c7:2d:32:50:8f:25:fe:69:6f:67:43:97:4b:dc:95:71:
75:9f:6e:c5:aa:ab:05:3e:61:7b:23:7b:d6:2d:c2:e0:6c:11:
3a:82:e0:a1:4d:5c:86:c0:b9:71:df:5a:f0:1b:81:eb:93:b9:
3e:1e:09:6d:72:c1:b5:ea:08:45:94:67:c0:fa:a9:45:1e:77:
d0:29:dc:bf:3c:d8:ac:e6:25:0d:7c:0f:14:1a:68:e4:70:ec:
f2:f4:cf:6e:04:4a:f1:42:e4:c6:82:5f:f8:7f:03:ec:33:ff:
4e:45:4a:19:37:fb:30:e6:ed:53:0f:d6:36:90:e2:f9:f8:13:
99:90:e2:dd:e0:5a:8b:41:5d:e0:dd:ef:bb:1a:3a:10:68:ed:
4f:d9:ff:c0:e5:31:78:0a:23:5f:9e:fe:89:c5:12:23:1e:ab:
a1:e3:8b:a6:93:8f:b3:9f:c2:ac:75:1d:3d:ec:48:75:fd:9f:
14:43:48:38:61:18:b9:24:03:f8:d8:29:54:b6:b4:56:35:fb:
6c:fd:06:5e:3e:14:6e:e2:f4:a3:96:08:ab:59:bb:22:b4:7b:
87:57:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:01:41 2025 by rpki-client