
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
File: cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa (raw, json)
Hash identifier: zdB3T4GeeR0rkvUUi9kXbPH6nQJvLp+IpM4dUoPCE34=
Subject key identifier: F3:CC:3D:6B:40:78:6A:98:BB:E5:F1:F1:45:B8:D6:51:40:3D:AD:CE
Certificate issuer: /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial: 010D0C9F4328584BA39D1EF61DC1B00812BB1880
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 44324
IP address blocks: 23.149.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:1e:f6:1d:c1:b0:08:12:bb:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=9ae52a7f-b5f8-4ff1-939c-9b295170e743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:26:d7:8f:bf:e1:41:e8:91:23:0a:9c:2a:
87:38:b1:d2:d4:be:5a:fa:c6:42:52:cd:c9:34:ff:
9b:0a:86:fa:b1:3b:14:a7:8a:1e:30:51:95:d0:1a:
67:2e:2d:7b:2c:ad:27:41:e9:bb:ba:3a:b6:3d:bb:
92:f3:17:0e:de:7b:31:da:5f:3a:00:2e:9d:8f:db:
65:a9:6d:b3:df:d2:7c:70:6a:6a:d7:37:7a:0b:6e:
02:55:88:cf:36:c9:3f:40:83:9f:d8:ed:c8:6b:1f:
90:77:76:42:3b:e9:48:54:11:7e:a9:48:1e:b4:34:
a4:cd:51:d9:81:91:c2:b4:19:72:31:3a:67:68:8d:
a1:42:98:15:47:44:b7:e1:c2:97:af:71:bb:d6:a2:
40:69:d1:9b:b4:dd:6d:29:b3:28:d9:41:83:c4:d0:
96:f7:ad:78:a1:6f:fc:4e:27:11:d4:93:2e:33:b1:
1f:35:29:3b:b1:2e:1e:75:c9:59:f1:59:43:d7:47:
25:62:31:b4:7d:37:44:53:10:ca:61:e9:81:b2:4a:
3f:87:9e:b4:90:ec:4e:a2:5f:44:ce:c7:81:0b:f2:
2b:07:0b:39:3d:14:b2:64:2e:04:fe:0e:04:2e:1d:
7c:a8:e1:f4:d8:c2:00:03:1d:35:c5:52:a7:90:61:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CC:3D:6B:40:78:6A:98:BB:E5:F1:F1:45:B8:D6:51:40:3D:AD:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
X509v3 Authority Key Identifier:
keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:2b:ec:78:81:db:11:3c:3d:a7:77:68:59:d7:3d:fc:90:86:
e0:0b:03:73:cf:fa:3c:6a:ee:ba:eb:2a:2e:8b:b4:00:ee:ed:
aa:04:47:a9:9f:2b:22:20:86:99:4a:0a:fc:5f:92:cb:d3:13:
76:9e:f9:bd:07:c1:97:f5:e8:62:c3:32:65:c5:84:95:50:db:
fa:2e:b3:ea:28:76:56:ef:51:60:ae:8e:04:8c:b2:8e:da:1d:
16:a1:da:33:fb:b3:ee:04:0d:5e:ef:4c:33:c2:da:2d:2f:5f:
be:34:9a:2a:d0:cc:f0:b1:74:4c:6b:13:b7:f9:30:4a:c2:68:
7b:d1:6f:a5:83:a3:65:e3:b7:7a:2f:a9:e5:fa:6e:52:eb:0e:
ae:e8:d0:3f:9b:96:f0:9d:b3:a8:5d:1d:74:3c:f2:06:b3:84:
3b:48:7d:ae:04:20:75:66:49:69:7c:ad:2c:c7:aa:86:46:91:
bb:e2:f3:97:3f:05:96:cd:7c:71:b2:73:85:00:65:b6:db:ff:
ca:ac:9e:f2:cf:33:30:e1:d9:14:db:84:77:4e:d8:fd:fc:d3:
c8:5d:11:ad:1a:73:5d:63:0d:3c:ca:89:de:2b:47:0a:e0:6f:
80:8a:39:8c:38:9b:47:f8:d3:05:f7:28:d7:5f:df:72:d0:cb:
36:4b:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:23:06 2025 by rpki-client