
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
File: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (raw, json)
Hash identifier: f7BwR8nYyjuWfveGHMywUObYXGgC7X0HZ+gPRdUpHCY=
Subject key identifier: 52:43:0C:CE:56:DC:66:24:DE:7D:80:3D:59:E0:9E:78:C0:83:D7:90
Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d
Certificate serial: 010D0C9F4328584B3AEC55293C7E6C1FB43E5700
Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
Signing time: Thu 18 Sep 2025 01:00:32 +0000
ROA not before: Thu 18 Sep 2025 01:00:32 +0000
ROA not after: Wed 17 Dec 2025 02:00:32 +0000
asID: 400228
IP address blocks: 206.41.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3a:ec:55:29:3c:7e:6c:1f:b4:3e:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d
Validity
Not Before: Sep 18 01:00:32 2025 GMT
Not After : Dec 17 02:00:32 2025 GMT
Subject: CN=1a938236-749c-40ca-9b34-3f057e436c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:e8:39:b0:51:36:0d:c7:86:5d:24:a2:ea:
94:ed:98:f4:5a:6f:b3:30:65:27:76:37:d6:0e:39:
ed:1a:aa:87:71:49:0c:94:82:97:85:4b:a5:af:98:
8c:ab:82:55:80:9a:a4:32:5d:59:48:45:06:5f:82:
60:e7:18:32:07:20:30:8c:d0:46:d5:0f:bd:85:5e:
35:d1:c1:78:76:2b:a0:55:62:34:d6:4e:7a:ec:8f:
f3:ad:92:bb:c3:1f:d0:64:eb:d7:1e:b9:bf:9b:23:
85:7a:a2:96:d1:3e:0d:80:ca:ca:29:31:9f:f6:b4:
5e:79:3a:52:fc:80:f1:32:fc:98:aa:11:36:70:1e:
dd:d5:a3:15:e5:28:69:de:38:47:bc:35:db:c8:fb:
7a:e1:f1:ee:46:51:ee:e9:e2:33:2c:7b:cf:7b:f5:
20:fb:34:89:2c:a4:02:f9:63:92:a5:68:6f:85:d8:
24:8f:48:5b:32:70:c5:0a:fa:f5:c3:84:81:e8:b5:
57:6d:9d:30:14:8c:c1:62:36:c7:c7:9a:2b:ec:95:
cd:51:16:e7:47:ed:00:40:fc:90:81:27:cc:cd:3a:
2b:d1:53:88:c0:d2:a1:c2:aa:94:a8:d0:55:08:ce:
52:e9:0a:b1:30:bd:20:84:8f:45:65:83:7d:0d:2c:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:0C:CE:56:DC:66:24:DE:7D:80:3D:59:E0:9E:78:C0:83:D7:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl
X509v3 Authority Key Identifier:
keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:40:5c:16:cf:c4:20:a6:e1:74:eb:42:ef:49:48:d1:df:b2:
09:e2:ca:0d:0d:b1:ba:52:b0:c2:bd:d9:ca:4b:b0:5c:5d:2d:
37:83:81:ec:2a:01:4a:53:7a:93:c5:0e:c0:07:ff:8f:7b:44:
b4:6d:f7:9a:29:49:d9:69:f9:8a:e0:4a:c7:27:84:32:b2:9b:
3a:a6:38:8c:f2:fe:af:4b:af:e5:c5:28:42:a7:87:95:26:70:
96:0a:2c:98:80:fc:26:c9:04:30:f2:a1:51:f6:b1:af:12:d3:
10:42:f8:d4:ac:77:f6:8a:70:14:3f:19:54:01:91:d9:dd:b4:
53:17:dc:7a:48:da:7c:d5:95:75:f7:4c:1d:7d:f4:32:22:2f:
79:76:9f:87:48:b4:c3:47:39:10:8f:de:59:11:b2:2e:f5:56:
84:dd:1d:6f:80:e6:e8:0f:c5:f0:7a:71:44:4b:5e:6d:78:5c:
04:2a:99:5d:24:7d:03:1f:bd:7d:6b:b9:62:3c:3b:b6:6c:e5:
ce:1a:33:a8:86:24:db:a2:07:cc:24:a8:04:92:e0:5e:47:58:
49:b9:fe:71:69:01:4b:95:9a:3c:3a:a5:db:ee:dc:4a:3b:e8:
61:a9:f2:83:be:b8:d9:96:d4:ac:1c:28:1f:6b:8d:5a:bb:61:
64:06:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:26 2025 by rpki-client