
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
File: 6f2a8979-499b-3861-8229-f7dcb3b30854.roa (raw, json)
Hash identifier: xWXzDbsAqQetn1xsuzOxZ6RZEMCWjOVgEvZo9ZEsu2Y=
Subject key identifier: AC:C4:61:E6:EB:94:21:02:2C:37:D4:6C:E7:73:42:D6:87:AF:1A:EC
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328584BD1CB10A581DE6C0326FA94C0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
Signing time: Tue 11 Nov 2025 02:00:30 +0000
ROA not before: Tue 11 Nov 2025 02:00:30 +0000
ROA not after: Mon 09 Feb 2026 02:00:30 +0000
asID: 30607
IP address blocks: 198.41.8.0/22 maxlen: 22
198.41.8.0/23 maxlen: 23
198.41.8.0/24 maxlen: 24
198.41.9.0/24 maxlen: 24
198.41.10.0/23 maxlen: 23
198.41.10.0/24 maxlen: 24
198.41.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d1:cb:10:a5:81:de:6c:03:26:fa:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Nov 11 02:00:30 2025 GMT
Not After : Feb 9 02:00:30 2026 GMT
Subject: CN=64a5225c-0aa0-4269-a109-9540037770b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:db:9b:e4:16:66:e8:fb:c2:31:b4:92:b8:
40:d9:a4:62:49:1e:6e:57:23:c6:ff:fe:3c:6a:58:
bb:49:e8:f4:cf:da:3e:d8:28:7a:ba:99:f1:b7:1a:
55:2f:f7:43:bb:4f:f9:4c:8a:76:54:cd:03:fd:ae:
8c:70:13:72:be:64:7a:93:3a:2e:63:79:ac:c5:45:
73:19:db:27:21:6f:9b:8d:cb:9c:b3:91:6a:6f:97:
70:92:e3:8d:dc:79:f4:de:0d:d9:ce:38:91:1b:40:
1c:3b:47:42:f0:2a:3a:1c:ec:d0:6d:03:d6:10:c8:
2e:b8:c9:c0:f7:e0:87:da:14:ee:b5:83:e4:57:35:
7b:8e:3e:39:b1:b9:25:1b:e5:af:02:fd:01:3e:87:
bd:34:03:a6:f6:44:d3:fe:3f:01:80:b9:8b:29:07:
c1:66:d5:39:d4:1b:6c:b0:97:ff:c3:88:98:ac:31:
72:29:2f:43:11:02:d3:80:c4:c2:cd:d9:43:fb:65:
06:80:c1:9e:8c:c5:b4:30:9c:7c:33:26:09:97:81:
33:91:4d:f5:b1:c4:ae:1d:dc:49:ec:17:69:3f:29:
ff:39:1e:2c:53:0f:02:64:d2:05:52:ff:29:cd:3c:
b3:ee:3f:13:49:e2:80:a7:f8:9e:82:a0:fe:c4:9a:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:61:E6:EB:94:21:02:2C:37:D4:6C:E7:73:42:D6:87:AF:1A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f5:77:7d:a0:ee:28:7b:1b:ad:67:25:01:ec:b9:5f:d3:62:
bf:49:06:75:29:1b:3a:dd:50:00:81:81:f9:76:fb:e4:80:a6:
df:4f:c3:a3:ea:7e:de:ac:56:1e:bc:ca:18:6f:ca:a7:ba:4b:
9c:e8:77:a2:86:57:bc:a8:7d:84:52:c9:cc:ef:f6:12:58:cf:
18:18:fd:7e:cb:60:73:94:6e:97:d1:96:bf:d6:bf:16:93:d6:
47:a1:38:10:ef:8d:80:2a:15:2b:9d:f6:b1:16:4f:9c:37:23:
c4:a7:ba:dd:53:0a:0a:f9:ef:e8:a7:d0:01:ac:72:e3:eb:7a:
0e:11:91:f8:38:9a:98:65:c8:8d:ed:22:5e:ec:7f:a5:63:ce:
a5:90:de:de:46:67:42:ef:62:e2:00:bf:e6:0b:f3:b8:bd:2f:
ec:92:e2:7d:21:23:55:23:fc:1b:8f:a8:e3:57:e1:c8:65:3e:
db:aa:64:ca:1b:83:82:f7:57:5a:b4:38:b1:f1:3a:e7:df:8a:
74:00:76:f0:57:fc:0d:58:e8:9b:07:4b:16:03:ab:ce:ff:4c:
eb:99:68:4f:c6:82:76:cf:d3:89:37:c7:60:75:46:40:2b:30:
aa:94:18:41:21:7b:61:4b:47:5d:1d:15:b9:09:42:84:9f:ed:
b4:fc:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 22:14:08 2025 by rpki-client