
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f91ddbb8-598c-34cd-8608-e7569087216e.roa
File: f91ddbb8-598c-34cd-8608-e7569087216e.roa (raw, json)
Hash identifier: v2GezEtdmqtmqLeFi5YO94wVEsdTYjBKEtFxN4XquFE=
Subject key identifier: 8C:61:19:B6:B4:EA:0B:02:4F:12:61:F7:C7:B4:0D:17:BF:D0:17:55
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584B97CA71CE80623790C77A7480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f91ddbb8-598c-34cd-8608-e7569087216e.roa
Signing time: Tue 21 Oct 2025 07:22:40 +0000
ROA not before: Tue 21 Oct 2025 07:22:40 +0000
ROA not after: Mon 19 Jan 2026 08:22:40 +0000
asID: 205886
IP address blocks: 66.253.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:ca:71:ce:80:62:37:90:c7:7a:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 21 07:22:40 2025 GMT
Not After : Jan 19 08:22:40 2026 GMT
Subject: CN=e32f3421-a8c1-488b-8639-11182059eae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:35:cb:66:bd:4f:19:5a:3b:ff:d9:38:e2:
d9:26:82:25:4f:ad:d1:04:80:6b:8e:da:b0:67:5f:
76:0a:4b:0c:5c:fe:36:3a:04:c6:cf:b1:17:1a:5d:
6a:2d:e8:74:bc:9a:b3:a3:b4:85:6f:8b:08:f1:39:
48:b9:20:22:4b:55:05:b9:04:f4:00:aa:5c:4f:3e:
df:89:13:4e:e2:4d:e8:b4:64:a5:93:74:af:d7:e6:
90:12:e9:6d:e4:f5:de:e7:1a:ab:dc:01:e7:5d:ca:
b0:ca:a1:e1:34:74:8a:b1:e1:d8:4f:45:40:1b:dc:
7a:1e:95:fb:e9:3f:d6:b5:91:02:a9:0f:7b:be:43:
12:4d:6f:09:2a:38:14:13:81:8f:ab:63:94:35:2a:
e8:91:c7:bb:47:19:3f:a0:a4:25:b2:4a:68:6d:b2:
90:91:43:a9:db:01:1f:fd:d8:8d:8a:06:74:66:16:
56:fa:58:54:c4:8f:e7:db:55:81:52:35:57:3f:4f:
a2:3c:41:cb:c8:80:13:ae:e3:fe:da:a7:f7:8d:d1:
44:1e:28:76:38:d8:9d:47:44:c9:b7:e1:e3:bf:c2:
37:6d:16:61:20:63:e5:81:7e:5e:32:ef:31:ed:77:
11:10:71:92:83:3e:92:88:4c:f0:81:0c:0b:b0:dc:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:19:B6:B4:EA:0B:02:4F:12:61:F7:C7:B4:0D:17:BF:D0:17:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f91ddbb8-598c-34cd-8608-e7569087216e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:64:fc:97:cc:ca:f7:04:b3:0f:27:52:32:9b:09:49:53:69:
2f:b1:c0:a2:1b:5d:a8:82:82:55:38:54:f7:d9:99:04:78:d3:
e1:a8:e3:5b:25:7a:8b:08:07:77:96:fd:96:ed:5a:ad:35:ad:
64:a7:6f:ef:57:4d:2c:eb:d5:92:4b:fc:92:4f:59:7a:9c:14:
48:7b:48:05:47:c9:b9:7b:18:9f:4a:03:bb:3a:48:24:54:38:
d4:3c:89:b3:83:ee:1a:a2:74:29:ab:32:1f:ed:fe:4c:dd:19:
c7:54:7f:ca:a7:90:1e:84:51:aa:9f:97:0c:2c:16:d1:9a:4d:
b9:7d:ca:f5:87:93:a0:0f:0f:33:51:24:53:6d:bf:da:bd:a1:
c5:b7:15:6a:18:a0:7e:4a:91:49:d4:38:a8:84:25:45:50:5b:
5a:df:f1:2b:3f:92:19:97:29:32:a9:fe:f6:1e:ca:7c:01:9e:
a8:24:5a:40:a1:38:a9:b3:6b:68:1b:0c:bf:3a:11:6e:91:97:
61:c3:72:fe:a8:d8:d4:a5:b7:e7:e2:87:c2:05:7f:23:24:7c:
5c:7f:7a:99:00:4c:12:09:2d:db:8b:83:39:39:c9:bc:48:2c:
b9:43:94:9e:40:54:f4:31:a6:80:d3:9d:96:4f:d1:cf:0f:b8:
ec:36:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:31:06 2025 by rpki-client