
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
File: 88d13f0c-ccc2-38b5-b670-66ee16223370.roa (raw, json)
Hash identifier: ngJdb8sOG+cDC7rH1vQ4zBGmtRVmo9dxZGuhoJDFerE=
Subject key identifier: 78:F8:1E:C1:57:45:FF:21:33:1E:5B:C7:A1:E4:F2:C2:C1:E2:6E:CF
Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial: 010D0C9F4328584B0B76B211561414071EB7FF80
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
Signing time: Mon 01 Sep 2025 01:00:33 +0000
ROA not before: Mon 01 Sep 2025 01:00:33 +0000
ROA not after: Sun 30 Nov 2025 02:00:33 +0000
asID: 15257
IP address blocks: 173.195.233.0/24 maxlen: 24
173.195.234.0/24 maxlen: 24
173.195.235.0/24 maxlen: 24
173.195.236.0/24 maxlen: 24
173.195.237.0/24 maxlen: 24
173.195.238.0/24 maxlen: 24
173.195.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0b:76:b2:11:56:14:14:07:1e:b7:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
Validity
Not Before: Sep 1 01:00:33 2025 GMT
Not After : Nov 30 02:00:33 2025 GMT
Subject: CN=050fa22d-6059-4c2f-b2f8-6371f51f940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:fb:99:b0:2d:76:ff:06:2e:be:dc:85:65:
51:5a:9a:14:df:fc:1c:3e:8d:52:64:ac:a6:6f:72:
7b:34:30:29:33:47:7e:f8:aa:8a:90:8d:39:b4:7e:
53:2f:17:9f:22:40:16:cf:b6:8c:42:a8:68:27:4f:
ec:96:05:e3:21:1b:20:bd:ba:89:2c:c5:10:61:44:
0d:27:4d:b0:16:06:fb:2e:df:c7:13:5d:a5:af:90:
63:09:51:68:22:98:e8:21:71:be:ea:31:ab:33:c0:
d0:4e:35:d0:34:50:b3:ce:33:90:ad:97:0b:d5:19:
2e:15:05:5a:b6:83:69:d0:c0:69:8e:e9:6e:2b:54:
a2:57:86:af:0f:8f:d8:da:81:25:82:cd:5b:bd:df:
55:6c:e4:7a:b0:48:98:2c:b5:b4:3b:b3:95:ed:63:
5a:c1:4a:52:2b:a4:96:73:9c:5e:b1:aa:85:5f:08:
2f:c4:49:69:a3:d1:56:37:bc:7b:1f:ee:d9:37:a8:
af:48:3a:84:44:34:70:bc:86:a6:56:a2:c7:2d:e2:
c7:f7:13:1d:58:3d:d3:a6:bf:5b:e9:19:8e:e2:07:
66:25:81:80:01:e0:04:9e:cb:a2:ea:10:07:a2:5d:
1d:3d:56:06:44:18:3e:4f:75:aa:2f:fc:42:04:6e:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:1E:C1:57:45:FF:21:33:1E:5B:C7:A1:E4:F2:C2:C1:E2:6E:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
X509v3 Authority Key Identifier:
keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.233.0-173.195.239.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:3c:ed:30:90:10:b4:48:c3:fe:86:69:43:d5:86:e7:49:96:
45:0b:2f:00:80:de:a1:ef:40:49:45:02:67:fe:26:d4:c3:01:
e4:e8:8c:05:b0:29:3f:f0:0a:fd:90:86:d4:a9:9f:b5:50:fa:
f7:fb:8f:1e:8f:fb:09:7c:74:d8:0e:e2:13:51:a1:66:25:a6:
bc:2a:39:56:93:1f:5e:ad:50:0d:a1:f0:6a:b2:9b:81:86:46:
14:17:d0:53:b4:6b:e9:f2:cc:4e:56:8a:33:db:c3:b8:80:28:
41:a4:61:8b:34:60:c8:a8:5e:5b:7c:02:53:d9:fa:ff:33:83:
08:94:fb:ab:01:24:4e:5e:06:8f:c4:e2:2e:57:06:44:76:59:
d7:a7:a1:03:59:13:c4:a9:b8:7c:ed:23:6b:3c:ba:f2:0d:ba:
8c:19:74:b2:43:b0:2d:6d:61:23:f4:bb:49:4c:d0:20:6d:ab:
16:02:4f:84:cd:11:3c:ea:08:58:f3:65:ee:d4:93:0a:f4:0c:
29:f3:42:83:b1:c8:76:e3:f5:b6:b2:41:fb:41:9a:3e:f6:ec:
e8:9e:44:9c:ca:c3:cb:3b:2d:51:1f:c7:3c:7e:95:b4:d2:d7:
a1:d3:4b:b1:33:7d:6e:6c:b4:6c:3b:89:92:1a:e9:3b:1a:de:
63:a3:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:54:24 2025 by rpki-client