
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
File: a211ca82-981c-32d0-8241-ba4946736b50.roa (raw, json)
Hash identifier: hETs3tBdwkx+Qw7rhHei8uh5xW6iMDW2M5KCkF+zvmo=
Subject key identifier: 28:2E:66:E4:0C:C5:F5:B2:66:5C:D0:6C:99:2F:6A:85:B7:48:E6:CF
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584B970CE55FFDAF67E377C37A00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 53345
IP address blocks: 205.252.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:e5:5f:fd:af:67:e3:77:c3:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=d916f090-b999-49b7-ae93-9bd7d6ce0a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:78:30:46:10:9e:12:c9:82:62:13:b3:3b:
4f:99:18:52:31:ee:e5:02:e9:81:8f:f1:5c:cf:26:
72:d0:9c:d8:a7:78:1f:1a:4a:8a:57:f5:0b:db:1d:
0d:cb:bb:fd:de:51:b4:35:1b:8c:1d:1f:59:1b:fe:
81:55:9b:4d:33:a8:3c:14:44:79:42:2a:56:16:e1:
01:c4:41:11:61:8a:a3:8d:b4:77:ad:e1:88:fe:3a:
0f:62:74:51:c1:89:8e:cc:ee:ac:2e:bf:ba:50:ca:
7d:59:2b:1e:58:55:48:52:e7:09:0f:57:6c:a1:52:
19:32:a5:0b:04:3e:13:70:55:4e:08:51:f5:fd:df:
86:31:96:c6:27:39:e0:a5:a0:6c:e6:a7:e0:14:a4:
bc:12:d0:81:00:9b:8e:b1:c1:7d:23:a9:22:0f:00:
9a:ee:35:bd:68:3f:fa:ed:ed:77:17:5b:c4:5c:52:
b1:de:1c:df:97:98:a6:52:d4:8b:49:48:af:7b:bd:
1b:e3:01:b3:63:06:c2:16:f9:4e:11:cc:ee:32:fb:
bb:06:f5:5a:6c:b6:8f:9e:fe:15:64:5b:99:b2:66:
72:46:10:6e:e8:ec:31:1d:7a:61:39:f8:44:7f:8b:
21:34:ea:e5:ea:24:fb:23:dd:bb:05:f9:db:90:e8:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:66:E4:0C:C5:F5:B2:66:5C:D0:6C:99:2F:6A:85:B7:48:E6:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:8a:80:71:11:7a:81:f8:57:6c:68:6a:39:7b:f6:82:ad:3e:
4f:09:fa:44:f2:5c:da:d8:17:fa:08:ce:ee:ba:10:bc:75:9f:
5e:6a:ae:ff:56:db:63:4f:18:2b:2b:40:3b:79:10:98:ff:ec:
22:78:23:88:41:0e:81:44:ad:79:32:8e:a9:cd:a1:64:b5:cd:
32:79:bc:f5:53:39:9d:ff:d1:e9:d4:87:80:7b:0b:cd:48:be:
d7:a5:c3:d7:87:91:3e:43:6d:93:c8:e6:c5:e2:50:e6:d0:0e:
80:4a:c6:4b:de:d1:dc:6e:c5:6b:83:09:a1:b8:36:f5:79:38:
7a:57:ab:0a:ac:ab:25:e0:f6:65:c8:72:fa:16:67:72:0a:fb:
a5:95:83:8b:0e:f7:13:13:80:11:ad:b6:f9:7b:7a:1f:c0:33:
69:da:03:5f:78:1e:c8:3f:e1:df:e1:99:6f:45:ab:90:71:14:
18:aa:f9:d7:f9:f8:b0:a2:d0:98:84:df:0c:13:22:51:f7:ca:
66:d7:c5:4e:3d:82:59:d2:0a:81:0b:6f:23:d2:71:21:18:0e:
7b:de:ec:33:ca:aa:dd:7f:8b:81:cf:fa:0b:b9:16:e6:1a:15:
b7:c1:39:bf:19:e3:6e:22:ce:45:a6:36:1e:61:24:04:09:fd:
2c:be:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:32 2025 by rpki-client