
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
File: b08285ee-0972-329c-81d0-7964b995c67b.roa (raw, json)
Hash identifier: yEUOWLEwQCF6i1pDrB/0gk02Gi/CcSnj/rNocDEsqkY=
Subject key identifier: 3F:95:8E:AA:0B:B0:13:1F:54:6D:F3:E5:24:11:94:A7:12:0D:0C:B5
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F4328584AE1968BD23CB531DEBE81AE00
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
Signing time: Sun 17 Aug 2025 01:00:32 +0000
ROA not before: Sun 17 Aug 2025 01:00:32 +0000
ROA not after: Sat 15 Nov 2025 02:00:32 +0000
asID: 376
IP address blocks: 206.167.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e1:96:8b:d2:3c:b5:31:de:be:81:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Aug 17 01:00:32 2025 GMT
Not After : Nov 15 02:00:32 2025 GMT
Subject: CN=55ef8514-d66a-42fb-9370-8aac336889ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:0a:4a:46:75:6e:b4:9f:bd:1a:7b:a0:88:
f3:03:7b:a0:e2:7f:ff:b6:6f:2b:95:d7:55:60:c1:
ee:cf:82:5b:e8:df:f3:30:01:bf:06:cf:8c:59:81:
59:89:34:3b:5f:c8:e4:31:54:b8:9e:31:9f:d1:07:
5b:1f:bb:de:bb:9f:bc:66:f4:43:b4:72:3f:95:2f:
a0:ab:2a:4c:ae:f5:ae:97:db:2e:0b:8b:1f:24:f9:
a8:31:c4:89:80:c5:13:8a:35:19:9f:19:b2:25:67:
f3:52:4c:d5:50:90:1a:ce:a1:97:08:d8:b4:af:da:
0c:68:b4:3c:ad:aa:8d:48:5d:b0:0e:5d:5b:70:88:
82:50:36:96:4e:69:b2:22:65:ec:0e:55:40:cf:72:
b8:63:ec:f8:dd:3b:a3:73:f4:8a:43:4a:48:be:96:
cb:c9:9c:ec:b8:63:d2:99:62:91:a4:55:df:45:9d:
c5:ae:39:d6:42:90:cf:44:f8:10:f3:3c:35:ff:63:
3f:e3:93:0e:f8:5b:67:89:e4:a4:eb:d0:4f:b5:bb:
58:ff:c7:47:68:3d:37:56:93:d1:b2:24:26:42:30:
25:73:f7:7c:da:85:20:ad:69:37:fe:10:d4:51:23:
15:72:6a:f7:95:0e:1e:6a:45:5d:b4:2c:44:68:92:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:8E:AA:0B:B0:13:1F:54:6D:F3:E5:24:11:94:A7:12:0D:0C:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ee:50:73:f2:d6:95:6a:4b:0f:47:58:f9:1f:3a:89:ef:41:
46:4a:96:be:3a:ef:e1:52:20:36:f0:26:ae:53:fe:a2:d7:86:
e4:eb:81:6f:52:cb:e7:49:e1:1f:f9:be:b6:fb:bc:19:aa:63:
94:06:74:27:3b:18:db:7b:be:db:76:45:c6:ac:39:bf:d3:bb:
09:59:b0:c1:9a:14:78:d0:28:0c:d2:05:e4:25:6a:29:61:6d:
c6:e6:17:5a:79:cd:cf:54:16:12:53:ae:ac:c1:6f:89:dc:77:
18:35:ca:c9:1a:ae:b6:6c:83:f8:a2:38:ec:39:75:2f:ec:36:
52:98:e7:57:a7:ce:18:2a:7d:8e:4a:85:ac:81:bb:2d:b0:0c:
77:52:4f:6e:5a:ff:a0:f6:f7:c2:c5:7f:e3:9a:28:d1:d5:db:
52:c2:79:ff:9d:b4:5a:b1:6c:de:29:9e:fe:34:4d:99:61:00:
6a:63:6e:8a:37:cb:8a:4f:f4:35:b4:91:88:84:fe:c2:eb:ad:
e8:32:f6:c6:36:52:df:23:ff:38:41:8a:50:aa:8b:64:c7:e3:
fb:26:e9:29:d7:09:4e:ae:1a:b2:29:d7:1b:3d:b2:54:ac:36:
ec:dc:63:70:18:3a:6b:2d:e4:18:d5:06:69:65:8d:78:06:95:
f2:76:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:46 2025 by rpki-client