
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
File: 49950327-e458-3c3a-8593-2cea9f0380f0.roa (raw, json)
Hash identifier: 09HzQP8qTr71QFI1TQmb6jf9yAUxs0LgKerYlQO6wqo=
Subject key identifier: C4:F9:CC:7A:20:14:BA:17:1D:3A:F4:06:54:41:38:08:52:BA:07:BC
Certificate issuer: /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
Certificate serial: 010D0C9F4328584B99D791887FF70E78550834A0
Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 3737
IP address blocks: 24.55.128.0/19 maxlen: 24
24.102.128.0/17 maxlen: 24
24.115.0.0/16 maxlen: 24
24.152.192.0/18 maxlen: 24
24.229.0.0/16 maxlen: 24
24.238.32.0/19 maxlen: 24
24.238.64.0/19 maxlen: 24
24.246.224.0/19 maxlen: 24
50.29.128.0/17 maxlen: 24
64.67.0.0/16 maxlen: 24
69.12.12.0/22 maxlen: 24
70.15.0.0/16 maxlen: 24
70.44.0.0/16 maxlen: 24
75.97.0.0/16 maxlen: 24
104.36.124.0/22 maxlen: 24
216.49.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:91:88:7f:f7:0e:78:55:08:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=59006878-7b2b-49ab-b0fd-95ddd3349b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:c0:6e:b0:1d:98:0a:5f:1e:e0:fb:78:f0:
7d:d9:d8:67:fa:e1:f4:cd:05:e2:23:d2:da:d1:3a:
36:3f:3a:4a:43:a6:32:6f:ee:0a:23:90:5e:fa:0b:
b4:10:f2:d6:b4:f5:5f:b4:d1:77:4a:13:15:31:1a:
67:55:63:5a:d0:5d:c4:51:eb:85:0f:3a:64:47:17:
c0:54:db:c9:a2:55:23:ad:18:46:91:49:09:c0:9a:
28:0a:bd:2b:66:82:82:cc:1f:f9:fc:16:3e:b4:b3:
f1:83:4a:b3:75:3f:9a:1f:47:82:a0:67:6f:87:42:
6d:c0:12:54:16:fa:62:3e:a3:f8:0e:8a:3a:99:45:
d6:de:80:6a:ca:1f:09:da:9f:57:cb:1e:f5:de:8f:
cc:5f:db:79:56:d6:cb:0a:66:b5:24:0c:38:f9:4b:
85:f0:c9:0c:17:e4:b0:b3:bc:27:fe:84:f8:22:c4:
7d:56:ec:af:90:03:c0:a2:bb:fc:e1:1f:df:ad:e8:
ce:99:92:c7:92:dd:c6:cb:cc:76:71:bf:5f:82:b0:
4a:36:0e:ae:cf:9b:f3:4b:4f:e0:a4:a2:13:d2:85:
5c:ad:58:ec:34:f5:ea:5e:82:6f:61:63:95:73:57:
ad:ec:cd:a1:70:46:52:7d:93:33:7c:f4:4a:ec:2c:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:CC:7A:20:14:BA:17:1D:3A:F4:06:54:41:38:08:52:BA:07:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl
X509v3 Authority Key Identifier:
keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
24.55.128.0/19
24.102.128.0/17
24.115.0.0/16
24.152.192.0/18
24.229.0.0/16
24.238.32.0-24.238.95.255
24.246.224.0/19
50.29.128.0/17
64.67.0.0/16
69.12.12.0/22
70.15.0.0/16
70.44.0.0/16
75.97.0.0/16
104.36.124.0/22
216.49.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:15:55:86:ee:a8:69:e4:ab:ab:df:2c:d6:f1:8f:cc:a5:11:
a9:7b:b9:06:db:33:54:8d:b0:11:61:30:e6:ba:27:99:ca:27:
7d:55:89:56:7b:e6:1d:d8:77:83:8c:43:7a:c8:4e:0c:a8:55:
12:06:8c:74:b8:3d:fd:3f:66:82:18:e6:43:dc:4d:0d:d2:2a:
ee:35:ac:68:24:6d:03:6a:fd:71:8f:4e:c0:18:42:4e:4d:31:
1c:ec:28:13:45:7a:58:8e:9d:77:73:38:84:25:b8:c6:c7:18:
5d:0b:a0:42:cf:14:70:14:35:f8:96:ec:47:e2:84:97:4f:22:
3c:ca:9f:26:48:83:f8:0f:57:db:20:bc:19:e2:b2:77:00:6a:
83:76:a9:78:ae:3a:96:8f:0b:9f:9b:49:61:96:07:a3:70:37:
32:d5:0a:8b:f1:a3:43:78:d5:93:1c:9d:94:34:75:89:56:79:
8d:28:f4:50:1c:66:63:09:48:c4:e5:13:37:ba:5b:bc:22:c9:
83:25:d7:0b:7e:a8:3f:26:c2:df:5c:77:0d:93:53:e1:9d:56:
20:aa:5a:fe:a2:a3:49:c8:96:85:5f:e9:6f:01:d2:ab:20:4d:
41:f0:ae:93:f3:db:f5:a5:94:12:ff:5b:ed:e2:9b:06:3d:97:
11:df:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:10:26 2025 by rpki-client