
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
File: 07f8c0d9-a730-33db-879d-4b7255a22c83.roa (raw, json)
Hash identifier: 8RKPZs9PxdVvJB7kmVFxK/QBvHBONc1oKKuS+qgOOrU=
Subject key identifier: 7D:5C:99:31:5E:18:9B:0F:19:98:6A:A7:26:76:5C:BD:C3:DA:9E:7C
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584BCD9AFAB067A83E64477C62C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 16509
IP address blocks: 23.239.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 11 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9a:fa:b0:67:a8:3e:64:47:7c:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=05e2f652-7326-422e-8f24-3458d7119632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:47:51:52:a5:4d:52:3b:3d:f8:e2:e1:f7:
d9:10:9c:00:ae:b5:6f:c1:7a:41:96:8c:a3:e7:48:
24:24:25:95:16:a9:03:72:36:94:ba:17:4d:ef:c1:
90:94:1c:d0:69:3e:dd:2f:1e:07:5a:d4:4a:b5:63:
b5:ff:e3:35:ac:e7:21:4b:70:04:57:bb:d8:0f:52:
64:eb:f1:96:7a:4e:80:1f:8a:a4:f8:51:96:f2:d5:
6f:ff:4a:cb:b4:0d:c1:d9:ae:7f:40:b2:1c:ac:31:
09:39:61:c6:ee:52:4f:41:59:b8:cb:61:fb:2a:10:
b4:4b:0f:79:19:58:c1:c3:30:78:30:14:73:33:b2:
fe:25:df:41:e4:99:7b:32:15:e0:44:a1:a0:f0:5c:
de:64:4a:9b:6e:77:c8:8b:80:a4:00:4f:33:a2:32:
de:a2:ed:ef:8f:d4:9b:f5:16:90:3b:f6:48:bf:af:
fa:fa:18:4b:67:0b:ec:c4:4c:44:92:a4:d5:27:00:
30:70:34:67:b7:11:98:8a:21:ff:dc:01:34:f3:9f:
fe:3a:a4:76:1a:c6:51:26:1c:9b:8d:99:ba:a2:7e:
f3:6d:87:3d:09:b3:29:9a:cc:1f:35:db:f7:b1:06:
5b:95:41:8f:32:2c:3b:34:bb:ff:ff:7c:0f:64:81:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:99:31:5E:18:9B:0F:19:98:6A:A7:26:76:5C:BD:C3:DA:9E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:a2:1b:65:af:8a:3c:b0:8c:78:3e:55:2e:66:a5:d0:c7:02:
0d:5f:d4:aa:61:88:4c:ec:a1:cb:06:41:43:32:7c:56:0a:54:
b2:33:91:66:bf:9e:e0:cf:a2:0a:70:3e:73:46:71:08:0d:08:
d7:a0:3d:cc:24:c9:11:ca:cb:c8:53:db:f3:88:cb:10:f1:33:
50:35:bf:b0:3b:16:26:9c:4b:aa:5b:c3:47:37:c9:dd:7a:14:
a4:06:12:ba:79:65:45:f6:97:f5:cd:6b:9f:0f:a0:5a:a3:bc:
e4:b8:17:00:f6:c8:8c:a5:98:19:74:ab:88:5d:19:84:60:c9:
b1:99:6f:fa:f9:c6:d1:63:39:70:8a:54:8a:3a:d3:bf:b7:4e:
b9:96:14:7f:01:ad:2a:40:a7:c1:bd:37:90:79:f9:5c:8c:82:
45:f1:69:58:f1:db:7f:0d:e7:89:da:5b:f2:be:04:f0:bb:e3:
89:f4:40:35:f3:f3:e9:e1:15:86:21:fe:e0:c7:2d:5f:29:b8:
23:a9:f7:03:18:44:6b:9b:44:16:72:3a:b2:18:11:ed:16:36:
f9:9d:96:1a:6e:7f:9a:35:53:64:25:d4:13:97:63:08:8d:37:
81:0e:28:05:33:90:76:0a:49:ce:56:40:aa:6c:d3:6e:38:71:
45:35:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 11:12:55 2025 by rpki-client