
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
File: 80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa (raw, json)
Hash identifier: dqvvb6mwRlBTXBjwZ4io8f7ILiL867JQJBZsIgG/tnw=
Subject key identifier: 0D:81:EE:9F:5C:A1:83:BD:02:C2:E5:E0:6E:9E:3D:67:1C:5B:71:B8
Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial: 010D0C9F4328584AB650EA6EB85C4326A44ACEA0
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
Signing time: Fri 01 Aug 2025 13:00:41 +0000
ROA not before: Fri 01 Aug 2025 13:00:41 +0000
ROA not after: Thu 30 Oct 2025 13:00:41 +0000
asID: 87
IP address blocks: 134.68.0.0/16 maxlen: 16
149.166.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:b6:50:ea:6e:b8:5c:43:26:a4:4a:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Validity
Not Before: Aug 1 13:00:41 2025 GMT
Not After : Oct 30 13:00:41 2025 GMT
Subject: CN=e79aa03d-1caf-4dc5-a1d3-a9a544a5a21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:6c:d0:82:97:83:49:bb:a8:69:8e:aa:84:
aa:de:14:36:ee:8f:d6:fe:20:03:e5:32:0e:b0:92:
b8:16:f0:f9:34:75:3e:bd:a0:66:fc:36:a3:fa:77:
52:7f:77:24:83:e0:73:bd:73:fa:ed:c2:8e:81:85:
c6:63:f2:38:cb:94:dc:4a:09:89:04:fa:2d:8f:0a:
b7:5d:9b:57:d3:6d:e0:91:fa:ed:59:02:48:1a:17:
62:23:6d:bc:f2:43:3b:73:c5:9b:a5:66:ae:88:7c:
67:8c:f8:8f:9d:45:e3:53:57:7b:7b:ba:2a:52:9c:
58:43:32:e7:58:07:49:bd:a3:10:1d:06:03:4e:74:
7e:cb:8d:2c:40:84:a1:08:78:a3:2b:e3:e2:41:bb:
7f:a2:ce:26:bd:1e:82:94:c0:37:f0:96:7a:e5:bf:
5c:26:54:3e:8b:b7:f7:11:7b:fb:14:f7:58:49:7f:
65:36:3f:99:0b:7f:af:ab:1c:c8:7a:53:8c:d2:8d:
01:9e:4e:ef:b9:9d:08:22:e3:67:1d:a0:39:d4:b9:
60:88:b6:75:c0:41:d9:b8:7b:b1:c5:f3:eb:f7:58:
ec:a7:9c:64:7d:f0:dd:41:0e:03:1e:97:bd:10:33:
35:1a:d5:fc:1a:a6:d9:4d:de:8d:d2:a8:1f:a2:e7:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:EE:9F:5C:A1:83:BD:02:C2:E5:E0:6E:9E:3D:67:1C:5B:71:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
X509v3 Authority Key Identifier:
keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
sbgp-ipAddrBlock: critical
IPv4:
134.68.0.0/16
149.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:90:83:95:e7:95:be:e6:a1:bd:9f:51:51:01:bd:c2:1b:0e:
dd:ee:61:4d:97:56:5d:7b:59:84:44:8c:1c:d5:f9:13:5b:3c:
b6:50:f4:3d:fd:27:3d:78:f5:79:c9:3b:c8:64:05:59:1c:36:
5c:6c:e7:54:96:7b:54:f1:a4:fc:fe:eb:0f:3c:aa:d1:66:1e:
e7:5b:fb:4e:fa:39:c4:ec:db:66:44:59:d1:b7:e4:b2:9f:90:
03:f1:6f:52:e5:3d:eb:56:0b:a0:c5:f6:c8:42:b9:d0:c1:4e:
ca:9a:4c:5b:29:6f:53:a4:f2:48:c2:d7:cf:87:c2:d6:56:86:
bb:45:60:df:74:d8:4a:48:cc:30:79:00:6b:3a:9b:28:f0:64:
1a:58:5d:10:65:4e:6e:98:ba:c7:06:be:60:9a:bc:72:eb:3d:
d2:fb:e2:67:38:ce:fa:56:ed:92:06:d4:89:c7:8c:36:3e:6c:
af:70:eb:7a:55:13:fb:7c:a3:e2:26:cf:8b:20:34:6b:52:4a:
b3:57:e7:8f:27:ef:4b:59:fe:3e:c6:16:61:57:1b:2a:27:5e:
33:26:a6:95:d3:15:67:59:07:29:fa:1d:1f:9f:74:dd:4f:bd:
02:fa:fe:5b:8c:0a:29:08:3c:cb:cd:02:58:49:2e:6b:89:9d:
d4:36:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:56:46 2025 by rpki-client