
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f35a0c7-9f83-303f-bbb2-532a6ba407cd.roa
File: 7f35a0c7-9f83-303f-bbb2-532a6ba407cd.roa (raw, json)
Hash identifier: UX3iT2omfXFFcusJpnxRedQLbBO6ZLfpngYJHG6eCwo=
Subject key identifier: C6:B7:92:6E:AC:AF:D9:02:F8:1A:D1:C6:BA:AF:A9:26:3D:F6:47:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584AECC25A51D7D816B23F1AC9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f35a0c7-9f83-303f-bbb2-532a6ba407cd.roa
Signing time: Thu 21 Aug 2025 01:00:33 +0000
ROA not before: Thu 21 Aug 2025 01:00:33 +0000
ROA not after: Wed 19 Nov 2025 02:00:33 +0000
asID: 33491
IP address blocks: 73.146.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:ec:c2:5a:51:d7:d8:16:b2:3f:1a:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 21 01:00:33 2025 GMT
Not After : Nov 19 02:00:33 2025 GMT
Subject: CN=876bb213-4acb-466f-bcc2-b7c72d47efeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ec:b0:58:fd:66:f4:28:99:27:ac:18:3d:c4:
d3:24:6e:c4:5c:8d:22:4e:d9:dd:8b:34:43:7c:1b:
a8:30:c5:24:d4:85:1d:61:28:92:1f:80:a5:6f:6b:
83:bd:bb:c6:00:08:91:8d:74:ed:7b:ce:0e:22:45:
c2:28:28:02:a9:78:b6:1e:0a:08:2d:d4:28:c9:76:
e0:54:eb:40:3b:91:bb:d8:bc:a4:7f:75:15:da:c6:
44:3c:4e:57:b8:c3:8f:15:cd:33:8b:31:d9:98:e3:
78:b5:07:6e:58:06:33:d3:87:3e:cf:3b:6f:c6:23:
89:27:20:96:a5:2f:39:e7:3a:2c:84:a8:b1:16:1a:
da:82:d6:5a:12:21:fb:e6:36:f0:54:c4:27:b3:08:
7d:24:d6:a3:4c:bc:78:76:b6:61:10:c7:c8:b1:b8:
2e:b8:fe:7e:ab:11:5d:60:3b:ca:12:e7:45:2d:16:
bd:20:2d:a7:3a:1e:d3:f8:97:be:14:6f:84:44:cd:
74:42:fa:3a:d3:90:17:44:69:25:7a:5c:d6:b6:e7:
84:d1:4a:13:78:d3:fb:ef:f5:3d:28:cf:fa:18:b5:
c6:2d:79:f8:da:38:86:8e:ee:c9:42:0c:20:cc:54:
25:c4:e6:82:8f:5b:62:91:fa:a8:59:76:83:51:e9:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:92:6E:AC:AF:D9:02:F8:1A:D1:C6:BA:AF:A9:26:3D:F6:47:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f35a0c7-9f83-303f-bbb2-532a6ba407cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.146.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:17:e3:21:c4:44:da:46:5e:b5:e8:e8:2f:b2:b7:a5:0f:f3:
2b:a0:52:f0:68:71:c9:6a:6c:85:e2:ae:3b:f8:d3:c6:01:8b:
2d:6d:b2:5b:d0:e0:7c:5c:ec:28:8d:fa:31:a9:ba:1b:b7:0e:
2a:2b:56:0e:65:65:b4:e9:36:59:67:c2:42:17:36:5d:66:81:
e9:c4:d1:29:ca:db:a0:de:ff:80:8f:54:b5:4d:68:df:7b:fc:
79:4a:44:6a:50:3a:d4:cf:0f:ac:ef:99:bb:ac:20:28:dd:f0:
46:f0:78:90:6e:70:46:dd:27:e0:ed:13:b4:78:4f:d6:4b:94:
ea:a5:e6:bf:ae:95:a7:c5:d3:3b:9d:d5:31:89:61:6a:14:9b:
78:3f:15:c8:86:f5:23:73:1b:ea:4d:b5:f6:30:6d:1a:60:8a:
7b:7b:eb:8b:34:ec:d3:25:73:f4:96:01:c6:76:1c:af:46:c7:
ac:b3:c6:2e:61:a4:96:e0:4f:57:2f:77:9b:5f:90:be:8b:69:
e4:82:70:4d:c1:2a:68:b7:e4:a2:9f:79:69:03:59:09:ba:c2:
38:b1:72:2b:ab:19:6c:8f:60:f1:3b:ec:e1:4b:43:80:e0:54:
62:9b:73:12:f7:c2:c7:a4:3c:87:df:44:8c:62:06:b1:42:1e:
f2:c6:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:39:09 2025 by rpki-client