
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa
File: 0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa (raw, json)
Hash identifier: VYCBWbJHVGhZ9t/2onYhQ1WVLQtkRTVOrjeqKuE8IfU=
Subject key identifier: 2A:97:B9:80:99:4E:21:3E:1D:41:7F:B6:7C:BE:D1:56:C5:81:61:C5
Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83
Certificate serial: 010D0C9F4328584ABF8190A12574DE356F6C1680
Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa
Signing time: Mon 04 Aug 2025 20:01:13 +0000
ROA not before: Mon 04 Aug 2025 20:01:13 +0000
ROA not after: Sun 02 Nov 2025 21:01:13 +0000
asID: 2581
IP address blocks: 161.203.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 21 Aug 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:bf:81:90:a1:25:74:de:35:6f:6c:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83
Validity
Not Before: Aug 4 20:01:13 2025 GMT
Not After : Nov 2 21:01:13 2025 GMT
Subject: CN=28319873-5b85-40c2-aaf1-1790ba2acc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:f3:25:8f:bc:fd:c5:e2:90:7b:41:bc:2a:
05:d3:fd:bc:71:49:30:c5:fa:92:7b:08:86:37:c7:
fc:c2:b2:64:3b:46:92:9d:69:c2:cd:b4:83:62:8b:
de:dd:75:b9:b7:ef:ac:f8:d8:70:9a:99:ad:b0:ac:
c8:0d:ec:94:f3:52:07:1c:c3:64:ee:9e:99:f3:59:
be:63:06:79:0c:d6:26:81:e8:07:5c:96:69:03:32:
f0:a2:5d:97:c5:8a:33:76:85:50:f3:db:fa:87:18:
48:7a:e8:a4:2a:6d:c8:ca:d9:79:e6:47:f0:05:49:
43:40:3d:b1:b6:6b:c0:46:33:aa:e1:10:62:ad:f7:
23:d9:96:b5:f1:68:62:68:3b:db:d0:c6:3c:8f:0e:
c9:06:4d:63:16:3c:03:b1:6e:d2:af:26:81:ff:6a:
06:02:a6:cc:9c:8f:73:33:b5:e9:3f:22:ba:7a:3b:
0e:69:74:6f:6b:e5:ee:58:16:b7:ec:ac:fc:1b:94:
be:11:34:3c:fc:f6:02:1e:ad:1c:24:48:f8:37:37:
06:c1:bb:5b:43:42:e2:80:ac:fb:1e:e9:df:43:37:
be:f9:99:ec:58:a2:25:11:26:8f:04:16:f0:73:33:
82:2d:79:ce:66:2a:43:14:f9:1e:ef:3b:dc:9a:12:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:B9:80:99:4E:21:3E:1D:41:7F:B6:7C:BE:D1:56:C5:81:61:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl
X509v3 Authority Key Identifier:
keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer
sbgp-ipAddrBlock: critical
IPv4:
161.203.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:71:68:17:dd:28:60:2e:ce:ae:3e:e3:90:12:38:aa:b5:48:
db:23:f9:0e:13:f1:c7:f2:a4:d3:34:24:99:32:e2:c2:58:84:
76:e7:2d:8c:f6:76:a3:5e:64:0f:62:1c:0e:ec:70:4b:72:ed:
22:dd:c4:8c:26:6f:08:04:05:e5:0e:51:79:b5:9a:30:66:23:
8b:06:b7:c2:50:0e:e1:69:8a:50:be:c9:a7:24:37:f9:2e:f9:
53:4d:fe:ec:01:28:3a:bb:3e:70:2e:05:74:66:4d:fd:02:8f:
9c:6f:7c:16:b0:7b:c9:5b:04:07:ee:b7:f3:89:51:a6:e9:72:
1d:80:20:2f:ef:f0:f5:b1:84:87:ce:57:ec:d2:aa:b6:4a:4e:
a1:e7:d1:b1:36:20:9d:aa:09:a8:28:d6:e9:4d:4f:3e:67:8e:
13:39:a6:06:82:62:ab:55:02:61:96:11:bc:ae:9f:dd:a3:fb:
ee:4e:b1:85:48:57:af:f5:8b:b8:e3:f8:9c:e1:a9:f9:e3:e0:
ce:ba:46:4b:8c:9f:95:54:b6:a0:04:69:65:df:fd:6e:50:a7:
7e:a1:ca:f7:1b:cd:77:09:f7:db:c3:2e:b9:bf:2d:5e:90:ec:
5a:96:e7:1e:83:b1:bd:80:67:2d:f1:05:52:fc:2d:05:3f:b6:
d4:55:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 02:44:03 2025 by rpki-client