
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d70abf7-0afc-344f-8347-335dbe5877bc.roa
File: 8d70abf7-0afc-344f-8347-335dbe5877bc.roa (raw, json)
Hash identifier: i4GWP2+bTw1JD6zrr5tmsaSb3QbqZWEvdmkqBTuqPSk=
Subject key identifier: 68:43:E2:87:93:9B:AF:8A:EF:2B:13:5D:60:7B:DA:02:20:A7:19:74
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584B9BA9564EEEE9F73D9E3FC180
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d70abf7-0afc-344f-8347-335dbe5877bc.roa
Signing time: Wed 22 Oct 2025 16:39:11 +0000
ROA not before: Wed 22 Oct 2025 16:39:11 +0000
ROA not after: Tue 20 Jan 2026 17:39:11 +0000
asID: 212238
IP address blocks: 198.145.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9b:a9:56:4e:ee:e9:f7:3d:9e:3f:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Oct 22 16:39:11 2025 GMT
Not After : Jan 20 17:39:11 2026 GMT
Subject: CN=df5c2e87-2d90-428c-a246-e9c70ed0d093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:bc:5d:02:6f:35:f3:01:6b:0d:df:0a:40:
ed:51:56:10:07:05:e7:42:23:b1:9c:73:3d:57:0b:
38:ab:7a:83:0a:91:77:49:00:bd:18:d2:c8:52:35:
a5:1b:05:6a:48:5b:77:42:34:63:b4:cb:d0:c4:15:
d2:17:d6:48:10:19:3e:12:5e:e3:45:f9:e6:e8:8a:
d5:b7:27:6c:1b:c2:82:40:40:f9:90:e8:9f:83:bf:
41:f6:ab:48:6e:f3:32:a2:37:e7:c8:36:3d:6f:6a:
0c:ef:66:c4:24:bf:6a:b8:10:2d:22:fd:7d:78:a6:
e3:d0:c0:d1:8f:5d:fd:0a:8a:78:a8:d9:76:35:d7:
af:ab:da:28:8d:ed:ee:0b:2a:15:e9:6a:12:22:73:
6c:10:b1:56:5b:26:c9:9a:17:3b:11:e0:b5:61:0c:
9d:7b:a9:0f:a4:1a:bf:49:97:08:7e:59:82:92:f8:
77:5f:3f:28:08:17:3a:82:d9:00:ea:d7:e2:d6:ee:
06:76:88:23:01:62:74:d2:da:1d:9a:3c:6e:9c:b1:
45:19:23:0f:32:04:e8:27:d4:f0:6b:fd:5d:f3:6f:
dc:14:54:ac:da:33:33:8b:41:71:4b:01:a8:57:14:
e3:af:8b:bc:e7:c8:10:12:1b:10:d1:f5:55:a3:a9:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:E2:87:93:9B:AF:8A:EF:2B:13:5D:60:7B:DA:02:20:A7:19:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d70abf7-0afc-344f-8347-335dbe5877bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b3:2e:f1:18:de:67:48:ff:4e:53:ae:73:04:f4:55:90:47:
0f:9a:4c:74:0a:9b:35:f8:29:4a:3e:54:f7:34:71:d6:6e:9c:
98:41:4a:eb:df:d2:67:83:ca:0f:da:51:ad:92:36:5e:24:82:
26:13:83:89:7a:f4:d8:c3:43:29:24:3a:fa:35:db:ff:c7:52:
e2:2e:07:00:36:54:0e:2a:86:59:c9:f3:dc:43:44:38:45:61:
07:7d:7d:51:23:da:db:09:f6:3b:42:46:08:bf:ec:8b:9d:69:
20:91:77:29:0f:cd:6d:81:0b:54:ac:7d:6a:75:2b:2d:2b:f6:
f4:7a:7a:f8:c2:49:d5:5e:86:9a:fd:c2:4c:b6:05:04:d8:c8:
79:43:03:f1:7e:0e:5c:59:4c:04:ce:77:35:5d:26:b5:09:76:
99:4a:98:14:38:1c:be:46:2a:11:69:1f:21:0d:e9:9c:3e:4c:
94:87:01:51:68:a7:28:86:9f:47:55:07:8b:d6:df:8e:bd:10:
10:24:9a:e3:58:67:2a:2d:69:17:c5:3d:79:73:ee:d0:d0:4e:
a8:14:cd:35:c3:6a:38:99:1f:f7:fa:5f:34:f1:e1:75:0d:40:
18:a9:84:8d:cd:af:74:a5:be:bb:06:0a:d3:02:1b:0a:df:6f:
9b:a1:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:14:49 2025 by rpki-client