
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
File: 603d6a12-edba-37c4-bd67-825034ce3d96.roa (raw, json)
Hash identifier: OF86RIIQVJCE5ZTxomPN58r2ldIwUo+2Wcf648op6ys=
Subject key identifier: 49:F4:7B:39:C1:7A:97:59:F1:43:07:B6:CF:E5:40:3A:B8:B6:59:0A
Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial: 010D0C9F4328584B153C1B78AC6B259A1DDA5E00
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
Signing time: Thu 04 Sep 2025 13:00:41 +0000
ROA not before: Thu 04 Sep 2025 13:00:41 +0000
ROA not after: Wed 03 Dec 2025 14:00:41 +0000
asID: 7018
IP address blocks: 64.84.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:15:3c:1b:78:ac:6b:25:9a:1d:da:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Validity
Not Before: Sep 4 13:00:41 2025 GMT
Not After : Dec 3 14:00:41 2025 GMT
Subject: CN=86799cb9-d936-41cc-bcf1-72032ea4bcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:ac:2f:fe:60:e8:34:22:97:9a:ef:63:ff:
45:aa:fd:df:67:c9:1a:31:6f:8c:e2:35:dd:10:61:
d5:29:0b:fa:41:da:65:45:69:52:30:71:d0:ba:28:
4c:4f:55:a1:0c:83:a8:d5:8c:0e:47:0c:06:6c:58:
f5:da:2e:11:0d:30:2e:13:8f:bc:64:f6:63:21:d5:
4e:12:49:e3:12:81:fc:3f:53:45:8e:34:e9:5c:82:
10:f3:25:bd:e9:ab:e8:40:c2:45:a9:65:ad:da:66:
6a:d2:42:ee:12:1b:30:87:74:78:1b:7c:15:47:42:
1e:21:0a:2c:ca:43:31:85:67:56:49:20:1d:aa:d5:
27:45:1d:6e:c5:62:62:03:aa:76:9a:96:76:35:8f:
6a:19:e9:5e:e8:76:7a:f1:84:52:37:65:4e:b5:3b:
ab:41:38:65:78:50:55:8b:ac:e6:6c:3d:0d:df:f6:
f8:7d:10:e2:7a:e3:8f:6f:ec:78:fd:fe:6b:b9:81:
89:29:ba:41:0d:8a:d8:e3:4d:61:92:75:fe:8c:73:
55:09:b8:a3:d3:65:09:08:be:61:73:67:a5:83:30:
22:9f:71:fd:06:9a:af:a5:8d:01:8d:a8:b5:26:2c:
82:97:43:96:8d:a1:81:41:69:52:17:37:77:57:44:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F4:7B:39:C1:7A:97:59:F1:43:07:B6:CF:E5:40:3A:B8:B6:59:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
X509v3 Authority Key Identifier:
keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.84.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:7d:a4:a7:ab:1e:18:a6:c8:cd:5c:2a:da:27:25:fa:22:7e:
02:28:05:30:28:fc:cb:63:6c:26:b4:00:7f:c4:81:a0:9b:8d:
ff:91:15:42:38:95:c7:09:5e:a9:ed:20:24:dc:3d:8a:2a:4a:
8f:74:f4:07:20:c2:c7:53:4f:77:ea:05:f1:67:11:4d:c5:75:
7f:00:eb:fa:02:aa:35:42:58:90:15:32:34:82:e1:36:49:4b:
8f:24:62:03:09:04:ee:66:83:d9:c7:38:e4:0d:c3:8c:48:61:
36:a3:6b:9c:be:5f:14:1b:7d:8f:d6:f9:e6:f8:93:c5:00:71:
7a:1f:69:d8:39:38:78:9d:90:4c:be:21:35:c6:1d:4c:9c:2e:
20:61:f0:bd:a8:e4:78:47:35:60:be:6c:0e:77:4e:aa:4a:64:
d9:01:96:8b:3c:e0:1a:ca:1f:2b:37:c5:91:9c:b2:f2:49:d9:
8f:08:5a:fa:f8:0d:e8:89:9d:3f:58:7f:ed:b1:14:c3:63:29:
ba:3a:1f:14:fa:cb:0e:ac:26:3a:bd:3c:7e:ab:1a:8d:c3:86:
f0:f7:e8:0e:ed:3f:12:82:2c:a4:31:01:08:75:00:73:9c:4f:
16:a2:c0:65:d9:28:4f:13:26:5f:ed:15:6a:d0:a2:35:52:cd:
6b:09:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:11:36 2025 by rpki-client