
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
File: 86e34e6c-0e06-342b-9c88-f3f080f46e40.roa (raw, json)
Hash identifier: wIRapM59oFbzy2NvF2Ha4NYqPzAR/ISZApCF3Z/lhG8=
Subject key identifier: 77:01:D1:F5:C3:A4:E0:81:C3:A4:2A:43:B8:57:31:D8:28:9F:5B:51
Certificate issuer: /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial: 010D0C9F4328584B80B7534CCBAC75B7363397C0
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
Signing time: Mon 13 Oct 2025 01:00:29 +0000
ROA not before: Mon 13 Oct 2025 01:00:29 +0000
ROA not after: Sun 11 Jan 2026 02:00:29 +0000
asID: 399507
IP address blocks: 91.106.220.0/22 maxlen: 24
204.52.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:80:b7:53:4c:cb:ac:75:b7:36:33:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Validity
Not Before: Oct 13 01:00:29 2025 GMT
Not After : Jan 11 02:00:29 2026 GMT
Subject: CN=c7bd5f5b-0cea-402c-8a44-1136a42c1a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:45:1c:18:f3:bc:b8:5c:f2:fa:c2:83:d6:a7:
1a:0f:8b:e8:ed:5f:b0:ba:87:85:75:18:6b:2e:da:
55:56:07:64:74:fa:98:27:c1:8c:b9:60:1b:ad:56:
1d:ad:78:7e:fa:ea:d0:a6:95:52:d2:70:53:49:66:
63:0b:4b:3e:77:b1:2e:ed:2f:bc:d9:39:2c:db:99:
21:0c:5c:2f:4c:d5:7d:3e:ef:2f:5a:91:0b:71:d0:
a8:e7:17:b2:4d:d5:70:fc:e7:a3:3f:81:9a:4a:0a:
d6:5d:22:e2:3a:1d:c7:28:b4:62:8c:13:57:44:70:
22:e3:aa:bb:42:01:44:e3:3e:22:ae:c0:b2:47:0f:
d7:d7:fc:b0:ab:4b:5d:5c:1f:82:0f:d6:ab:0a:ed:
c0:3a:b8:cf:78:88:b2:ef:96:a9:5e:50:bb:77:5b:
56:f3:36:1f:50:7c:01:49:3f:d9:61:13:70:d4:70:
67:8b:28:21:cf:96:98:35:6c:22:c1:6f:9f:e4:6a:
dd:a2:c5:b0:9c:a1:6b:90:23:a6:1f:e4:f8:ce:21:
a8:65:c8:d2:53:57:6d:08:5a:fb:17:46:11:ab:3e:
a7:7a:9a:2a:0d:e9:f8:64:db:9b:c0:cf:89:55:56:
5f:05:5b:4b:58:72:ff:d3:10:65:54:80:4c:b9:93:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:01:D1:F5:C3:A4:E0:81:C3:A4:2A:43:B8:57:31:D8:28:9F:5B:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
X509v3 Authority Key Identifier:
keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
sbgp-ipAddrBlock: critical
IPv4:
91.106.220.0/22
204.52.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:46:c1:e5:62:7e:22:e1:c7:bb:fc:c2:13:5a:99:f7:d9:78:
db:68:5b:6f:f2:c4:53:f5:28:4f:2c:df:14:81:e7:0a:6b:b8:
30:8c:1b:b6:a8:76:bc:cb:0a:f0:bd:51:bf:f9:e5:88:10:82:
1b:91:41:cc:87:ae:ef:34:e4:66:b2:fc:a2:37:7e:bb:0f:58:
d4:ad:fd:ce:6f:e4:4c:b7:36:b0:9c:49:41:2a:36:fb:3b:f8:
c7:c4:29:17:2e:ab:a6:36:73:46:d8:d6:a0:77:df:d7:54:ee:
c1:04:48:f7:0e:24:d3:00:a7:23:56:b0:67:48:19:78:1f:d6:
62:b4:36:20:1a:e0:00:3e:31:52:87:a1:03:99:0a:9d:e1:b6:
87:e8:51:16:fa:3f:60:0e:43:f1:01:5b:12:83:f3:23:72:0a:
f5:68:70:1b:fb:b8:50:a6:02:05:4f:6d:28:8d:35:18:32:44:
7a:dd:aa:4e:2d:40:f8:9b:57:94:6d:02:65:33:88:4f:da:c7:
f2:7c:c0:99:6a:f5:35:3c:78:7c:a4:24:13:1a:4a:fa:71:db:
7d:2d:9f:3f:aa:ee:80:f4:2d:aa:c8:c3:90:1a:d0:e7:20:1d:
db:8e:3e:50:08:86:26:da:99:6c:08:12:62:4d:d6:7f:bd:9d:
77:e0:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:10:31 2025 by rpki-client