
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cee6d96-8f05-3001-b70b-2095f26a99d4.roa
File: 8cee6d96-8f05-3001-b70b-2095f26a99d4.roa (raw, json)
Hash identifier: HiLCie3YS0tdoOJ6MlsQ/tbtwqpZ/76pfny2xf3Tv4U=
Subject key identifier: 60:3F:5B:F1:7A:E4:E2:A3:16:64:8B:A5:D1:B9:28:77:C2:AA:10:C8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7FA6A4119061A6DE01C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cee6d96-8f05-3001-b70b-2095f26a99d4.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 398885
IP address blocks: 65.49.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:fa:6a:41:19:06:1a:6d:e0:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=50668c64-a3f2-488a-b69b-98084f36e431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:9d:9b:55:02:06:6f:35:6f:1f:ae:35:be:
d7:20:ad:26:03:24:de:d2:27:81:55:7f:89:1c:d5:
51:24:da:75:95:41:dc:49:6f:0d:7c:0e:d3:cc:ac:
1f:0e:e0:43:dc:3c:4f:33:82:8f:7f:03:bf:82:72:
96:99:b6:aa:cc:6b:81:8b:8c:b5:61:3b:69:08:3c:
d5:57:09:22:aa:9d:5e:8d:ec:f4:e6:10:c3:f9:8d:
36:34:b0:ea:87:34:4c:c0:5b:b7:7c:c0:86:be:a8:
a9:5a:86:2e:41:38:31:6d:21:04:5b:3f:26:a5:35:
69:78:91:fe:a3:34:79:3a:c3:59:16:d5:f7:fb:d6:
1d:e1:2c:97:52:fe:37:6c:40:1c:3e:e7:f9:17:48:
1c:aa:94:9b:2f:d8:ba:d4:3d:07:43:3b:1a:33:43:
0c:cb:39:ac:72:9d:51:0e:c6:29:e5:c0:f1:8c:4f:
d5:37:17:c8:b7:9b:8b:b8:df:ae:ca:28:9f:69:50:
b8:63:b6:92:95:7b:f3:90:e5:0f:59:f0:be:ad:f6:
18:9f:c5:89:8c:6b:15:36:0f:0c:a0:be:7f:6c:32:
5c:b6:cc:42:a4:de:b0:64:11:40:d9:88:1c:0d:4f:
d7:88:48:ac:ea:a6:6f:99:13:3d:75:92:b0:74:47:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:5B:F1:7A:E4:E2:A3:16:64:8B:A5:D1:B9:28:77:C2:AA:10:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cee6d96-8f05-3001-b70b-2095f26a99d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:de:fa:d5:aa:b8:b6:1c:b0:01:d6:e0:7f:9d:c2:d4:44:e9:
30:72:1e:90:f1:23:85:45:e5:ee:a2:65:a4:f0:55:6e:74:a5:
02:2e:52:be:eb:42:00:a5:12:44:0d:7b:dd:97:ef:f9:90:40:
25:96:c0:c1:d1:b1:43:37:1b:97:f0:1f:66:2c:82:54:28:5d:
d9:66:46:84:4d:5c:a4:6a:df:3b:00:87:2e:1b:48:e7:8b:c0:
62:75:45:07:c9:f8:c0:b0:a9:6a:8c:94:17:72:43:04:fc:ca:
a5:87:5b:d4:eb:42:ed:12:b9:90:08:d2:7f:89:a6:eb:52:85:
79:9a:a9:65:06:b1:c7:ff:2d:ee:90:b9:c4:8f:b6:fa:14:65:
ae:53:53:bf:a3:d9:97:31:f9:ba:ad:ad:26:19:93:85:4e:c4:
ca:79:f1:5c:8e:e1:b2:56:48:29:bb:0f:0f:04:8c:bc:ea:ff:
93:f7:0e:56:5d:81:78:5b:0f:84:ab:3d:42:43:a9:d2:d9:3d:
91:8d:4e:ce:57:59:ec:31:18:12:f5:16:e7:b1:39:1d:ca:68:
f9:94:d6:1b:f0:26:4a:ba:99:53:cd:ef:39:0a:e0:63:9f:12:
38:e9:37:d5:aa:06:83:34:ed:d9:4c:46:f8:8c:37:f7:5c:bf:
46:c9:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:49:57 2025 by rpki-client