
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa
File: 2c733a41-1d85-3fff-a8e9-5ef96865182f.roa (raw, json)
Hash identifier: inItiQwzpvU7o1BvNNBuM0MLFcX4kVtYLn2tdp5rlt0=
Subject key identifier: 04:F9:F2:A6:56:01:E1:17:5C:53:DF:EE:2B:FD:BA:AE:A6:D3:93:E3
Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial: 010D0C9F4328584B0B769B9F913AC4E2FA7D9D60
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa
Signing time: Mon 01 Sep 2025 01:00:33 +0000
ROA not before: Mon 01 Sep 2025 01:00:33 +0000
ROA not after: Sun 30 Nov 2025 02:00:33 +0000
asID: 395437
IP address blocks: 143.55.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0b:76:9b:9f:91:3a:c4:e2:fa:7d:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Validity
Not Before: Sep 1 01:00:33 2025 GMT
Not After : Nov 30 02:00:33 2025 GMT
Subject: CN=35ef5077-beac-42f8-a108-f88368cd79e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:da:f9:c2:2e:39:33:94:8e:e2:ff:16:8c:
9f:ae:98:a4:35:ae:5b:54:c9:2b:19:6c:63:90:43:
96:e7:51:7a:ba:da:56:89:b7:ea:5b:e9:14:36:29:
f1:26:87:12:cd:ef:7c:b3:ac:64:e7:61:48:2d:8d:
04:a7:92:35:fc:49:8a:4b:26:ae:86:f2:76:4a:4b:
ae:07:a6:97:b2:82:23:9b:b6:9f:d4:74:c4:0a:bf:
81:3c:38:33:88:a7:c1:7d:63:86:74:00:26:dd:e0:
38:17:91:42:97:3e:b9:86:02:94:a2:68:d7:55:fc:
cf:d8:42:7f:9d:50:05:1f:08:10:15:41:46:fd:f1:
fe:17:a4:1c:e3:2b:0b:cd:cb:dd:6f:87:bb:a2:cf:
0b:73:e4:ec:c4:15:f0:3a:50:1d:c2:b1:1c:c5:ba:
4b:8a:b3:a4:dd:e4:f2:04:4c:10:c9:88:c4:14:f0:
f1:bf:64:c7:05:ca:e0:01:33:3d:4a:d8:36:f6:3d:
45:c0:a8:f6:4d:86:8d:da:ef:ec:3c:36:1c:3f:d6:
cc:b5:1b:99:df:c7:3f:ed:70:7d:71:83:02:a3:f7:
55:e3:ea:90:2b:25:83:77:0e:48:c9:ad:94:7b:01:
b6:2f:9a:cc:bb:55:ad:28:5b:51:4e:d4:0d:08:38:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:F2:A6:56:01:E1:17:5C:53:DF:EE:2B:FD:BA:AE:A6:D3:93:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
X509v3 Authority Key Identifier:
keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
sbgp-ipAddrBlock: critical
IPv4:
143.55.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:0e:0c:8e:b5:7a:df:31:51:79:06:c0:66:65:69:3b:c6:fe:
be:c7:69:37:0e:72:a0:54:16:ea:0e:6d:ce:f2:60:19:33:e8:
c5:ce:ad:3a:5c:89:44:e3:45:8f:30:6f:4b:3d:54:53:32:92:
61:fd:61:cf:20:bc:d8:27:e4:5d:26:78:52:54:6a:c7:64:da:
ca:97:30:56:c9:b1:bf:a8:e5:66:ea:c6:b6:1f:5c:b7:4d:02:
d0:c6:85:6a:57:24:aa:6f:47:22:16:11:fa:50:cf:75:dc:9d:
92:e3:7f:d3:9c:73:c7:4b:28:12:3a:5b:dd:7c:53:6b:7b:40:
2b:e7:cb:4d:b2:50:e0:c3:36:8c:0e:8a:1d:1f:a5:9f:71:d0:
10:c2:0b:ff:33:1f:fe:78:05:cd:a0:dc:f5:1d:17:1f:15:67:
f3:a9:4e:b4:61:5e:32:1d:37:3e:56:eb:75:0f:0a:d5:1b:a8:
01:5b:c8:d1:3b:fe:9a:0a:74:11:ef:10:eb:0f:fd:92:48:31:
17:59:6f:fc:cf:bf:d4:dd:82:f2:08:7c:b0:a4:5c:08:9e:3d:
f4:f0:c0:eb:e0:86:ea:b7:28:d6:3c:9f:32:2e:a1:39:a2:3b:
9d:85:9c:c9:f0:58:d2:87:33:e2:70:02:18:b6:2f:cc:84:82:
00:97:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:53 2025 by rpki-client