
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/8d05b34e-c249-392e-b896-84319c8e2955.roa
File: 8d05b34e-c249-392e-b896-84319c8e2955.roa (raw, json)
Hash identifier: NqY787We0S/tkeFoLOhdpgG0gjfyDpmyoYVsxhVncnI=
Subject key identifier: 56:16:AD:CC:2A:77:6A:81:25:A3:EE:79:25:35:02:95:11:B9:36:54
Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial: 010D0C9F4328584B51A457BB8C71CA51E644BB80
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/8d05b34e-c249-392e-b896-84319c8e2955.roa
Signing time: Fri 26 Sep 2025 04:19:08 +0000
ROA not before: Fri 26 Sep 2025 04:19:08 +0000
ROA not after: Thu 25 Dec 2025 05:19:08 +0000
asID: 11878
IP address blocks: 198.44.128.0/19 maxlen: 32
198.54.128.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:51:a4:57:bb:8c:71:ca:51:e6:44:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Validity
Not Before: Sep 26 04:19:08 2025 GMT
Not After : Dec 25 05:19:08 2025 GMT
Subject: CN=49ca4657-2da0-42ed-82c3-7297498e6615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:72:27:8f:ef:93:25:15:58:c7:00:63:b4:
f4:a8:a6:ff:25:fc:e1:10:65:52:d1:6c:ff:f9:da:
24:ec:8e:e0:cc:d0:78:0a:f3:ab:07:a7:71:0b:89:
c8:b1:6c:04:57:79:53:82:ef:94:ac:2b:da:10:2e:
a8:d8:25:c2:21:10:e7:cc:17:29:ba:73:a6:fc:a2:
4d:42:7c:8e:35:a1:0b:da:a2:9a:d0:d7:05:9d:05:
62:b3:de:b9:66:ec:02:40:a3:a3:bd:73:b3:88:13:
84:b4:71:fe:e1:eb:e0:c2:59:1b:02:19:9d:36:60:
78:58:af:3d:45:e0:2f:75:ce:43:15:b8:55:59:94:
03:0c:59:88:2e:c2:56:c0:34:00:6a:a7:60:10:a2:
31:8f:e0:f0:2d:00:30:c5:e7:27:96:f0:6a:63:94:
b6:ec:da:c4:a8:58:7b:59:c6:63:e3:32:af:0b:49:
ad:98:21:e2:03:ce:d2:4f:07:e1:ce:f5:97:52:82:
41:54:56:38:bf:cc:9b:fb:fe:21:8e:5d:47:53:49:
a3:10:37:bf:ff:b4:bd:5c:33:f8:07:36:62:1b:5f:
d7:8d:50:a5:93:81:05:01:1e:38:4d:7f:c6:c6:f1:
ad:ae:f9:3c:31:f6:8a:89:6d:88:05:99:47:fc:cd:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:16:AD:CC:2A:77:6A:81:25:A3:EE:79:25:35:02:95:11:B9:36:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/8d05b34e-c249-392e-b896-84319c8e2955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
X509v3 Authority Key Identifier:
keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.128.0/19
198.54.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:62:4e:9c:3e:e4:e0:ec:85:12:46:68:46:d2:4f:d0:97:59:
df:c9:89:1d:b4:62:6d:f8:5d:11:f8:08:b6:d8:53:1e:e3:9f:
37:95:28:93:e4:01:7b:3e:32:56:aa:1c:24:28:85:48:55:b1:
5a:f5:09:70:48:1b:3b:55:f8:6c:d8:1a:62:c2:1e:28:10:fb:
91:46:a5:12:b8:fa:90:01:60:0c:0d:c1:31:9e:3a:bd:cb:0f:
b2:8b:9c:82:90:dc:2a:6a:4f:b2:b1:26:6c:64:f6:d5:da:52:
f1:2e:3e:7b:df:9f:57:9b:88:49:97:83:17:de:88:79:fe:01:
91:1c:46:1b:9d:bd:41:6a:10:54:54:17:38:9a:e3:55:12:7a:
a0:85:2e:69:3c:93:27:44:1d:8c:f2:16:6a:76:75:93:12:36:
f2:df:13:5e:75:db:fd:3b:fd:89:71:1c:9b:27:90:e6:5d:62:
76:3e:cd:9d:3e:b2:e6:e2:3c:54:27:63:4e:88:7e:48:19:64:
b6:f6:70:79:d3:e5:df:ce:2f:b0:79:c8:8a:fc:ef:0e:b0:ed:
89:02:6d:3c:4c:63:28:e0:d4:27:cc:94:2e:0c:17:fe:fa:f5:
98:64:67:87:0c:f6:df:1a:84:ab:d1:5c:39:e9:ba:53:88:f2:
d8:9a:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:22:48 2025 by rpki-client