
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9888d1b-6fa9-334d-b84b-2fb211fd28b6.roa
File: a9888d1b-6fa9-334d-b84b-2fb211fd28b6.roa (raw, json)
Hash identifier: GlXmCtqJaS6ejl2VbTqF+AIqYvqMYvP37qhqXkv65Ec=
Subject key identifier: E8:28:85:EF:50:95:6A:BA:D1:BD:6B:97:AE:F9:75:42:B4:75:C5:8A
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584BA2D5077E37522146D8C47D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9888d1b-6fa9-334d-b84b-2fb211fd28b6.roa
Signing time: Sat 25 Oct 2025 06:17:53 +0000
ROA not before: Sat 25 Oct 2025 06:17:53 +0000
ROA not after: Fri 23 Jan 2026 07:17:53 +0000
asID: 205886
IP address blocks: 66.92.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a2:d5:07:7e:37:52:21:46:d8:c4:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 25 06:17:53 2025 GMT
Not After : Jan 23 07:17:53 2026 GMT
Subject: CN=ee176707-1277-4815-a256-53efb00d0f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:4c:10:20:27:53:07:3c:de:5e:9e:29:a5:
e4:17:35:a3:7e:ec:1b:87:66:9e:5a:a5:30:29:e8:
bb:1a:25:b0:2d:ee:e3:11:2b:72:3d:cb:78:e9:76:
ed:37:21:e7:3c:61:50:79:42:3a:4f:24:d2:0d:23:
79:ec:0a:54:61:ba:43:fe:ab:a3:1b:9d:dd:d4:4a:
a0:90:59:6f:88:9e:6f:61:da:16:2e:50:5b:35:e0:
1a:ee:9c:3a:69:07:db:f3:3d:cd:45:df:7c:b7:b7:
59:52:16:6c:bb:2f:bc:88:8c:ec:24:d2:df:59:3f:
5f:91:b1:31:81:c2:b5:83:eb:e9:11:f3:3e:23:a4:
3b:2a:bf:2a:f4:5f:db:fe:16:36:c7:d6:59:1b:fb:
e6:e6:65:b2:05:be:6b:a9:fb:67:d3:f3:6c:35:18:
dc:2b:9b:cf:ee:51:66:91:38:d4:6b:0a:63:1b:16:
c8:b4:9c:17:8b:3c:14:93:f9:0f:25:a0:e4:e7:bb:
7e:d2:67:26:d2:20:c1:c4:59:d4:6f:eb:4c:a8:7d:
6c:ee:e8:3a:0b:7f:96:59:b9:96:41:96:d0:9c:e0:
5c:d3:6f:2d:47:43:73:87:68:6f:8d:c4:ca:6a:b7:
ef:48:00:1c:d7:a3:a1:34:aa:72:1b:30:a9:07:da:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:85:EF:50:95:6A:BA:D1:BD:6B:97:AE:F9:75:42:B4:75:C5:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9888d1b-6fa9-334d-b84b-2fb211fd28b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.92.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:97:e4:1d:4b:e5:81:3c:93:ac:5a:81:6a:47:2f:54:79:10:
d5:b1:8d:60:a3:b6:4b:f9:fb:fa:55:cf:8c:b4:b8:21:61:fa:
48:13:60:43:b0:c0:91:ab:2f:f1:eb:93:e4:cd:d5:9e:0b:20:
d3:f0:40:cc:f0:29:a8:7b:17:6d:b3:ca:da:a1:af:4e:ec:c1:
ed:ba:ff:ca:3a:5d:60:ec:94:25:e3:60:34:db:c3:83:88:3d:
a7:0d:82:b3:69:8f:b7:79:9e:8a:a7:68:36:bb:d3:ab:87:d9:
56:39:6f:f1:91:5b:28:f8:ae:11:4e:5e:6d:35:3e:7a:74:a8:
6a:41:89:20:d5:82:68:a1:44:40:eb:78:40:d2:45:13:f7:ac:
20:53:98:10:dc:01:86:3d:94:9f:64:de:43:cf:f6:b1:3e:17:
cd:df:f3:63:66:66:dc:74:8c:85:58:bd:69:7d:20:6b:15:a6:
90:01:fa:54:f9:55:de:73:99:6b:ae:3c:31:f4:dd:a8:bf:30:
91:b6:e6:e7:8c:2d:04:e0:ef:cb:78:86:be:37:51:01:29:0d:
bf:0e:3d:e0:c7:ae:19:62:08:d8:5f:ed:02:59:0c:d3:f5:09:
11:6a:1f:f2:97:9f:e4:d8:21:f7:2d:22:7d:f2:cf:e3:ab:0c:
4d:09:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:30:50 2025 by rpki-client