
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de99c600-bd39-3474-867e-c5f7d78d0707.roa
File: de99c600-bd39-3474-867e-c5f7d78d0707.roa (raw, json)
Hash identifier: 0vEa+W/2j2rOxuXa6ocJsacKs26CDzLyGlcJPu4wQBY=
Subject key identifier: 21:9A:92:7B:70:92:88:C9:FD:F7:4E:0A:04:D7:3C:B7:EF:0C:52:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BC10BC0D1DFD52547D929D900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de99c600-bd39-3474-867e-c5f7d78d0707.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 33287
IP address blocks: 69.249.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:c0:d1:df:d5:25:47:d9:29:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=a39a1d7d-4a90-4c38-9860-a3500723f7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:4c:8f:99:fc:f0:4c:73:6f:7a:2f:68:c4:
92:57:1b:f7:18:9b:36:45:33:70:68:82:fd:ba:42:
83:66:a1:e4:21:4c:47:82:71:3d:a2:ad:fe:f8:99:
5e:2e:f1:83:44:06:5f:a2:06:1b:9e:3b:67:60:af:
6a:f8:56:7d:fa:5f:bb:ca:24:f9:d2:78:cf:a9:a3:
fc:25:9c:1a:b0:b9:6a:bb:6c:80:03:5a:62:9b:e0:
7a:69:f2:41:4a:b0:10:49:d6:e5:77:4b:71:91:9c:
fa:04:96:08:5a:87:80:c7:61:69:37:32:ca:39:24:
81:6b:c2:97:de:ad:6a:13:60:23:41:58:50:4b:26:
f9:c4:bc:8c:07:28:11:90:e1:c4:f5:a2:35:6b:ef:
54:19:a6:b0:91:b3:19:50:bd:c6:38:a7:1d:3f:72:
41:73:7d:4d:88:b5:59:83:5f:c3:7c:77:ff:ce:97:
f3:6b:57:50:de:67:5e:ad:f5:ea:3f:8f:21:4d:17:
e5:3d:7a:2d:bc:a3:b4:da:f9:01:e0:c7:65:b9:aa:
8d:c8:1c:cf:2b:a2:bb:97:1b:91:fe:e0:96:5b:d8:
e9:a8:ea:19:38:73:c4:b5:fb:4f:6b:86:ce:ff:49:
8f:2a:ef:b7:ed:21:fe:7f:5e:17:e4:f4:91:6b:9b:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:92:7B:70:92:88:C9:FD:F7:4E:0A:04:D7:3C:B7:EF:0C:52:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de99c600-bd39-3474-867e-c5f7d78d0707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.249.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:29:d8:85:e6:66:7b:d1:cf:d7:b6:84:af:0c:17:31:84:2a:
47:83:37:e8:47:e2:03:f2:4d:ce:e5:a8:03:d1:a0:10:b9:b8:
fa:f8:b7:82:a1:e8:3b:5c:05:9f:cf:f1:21:e1:f9:5d:b1:ce:
6c:19:86:61:c9:70:e6:9b:41:bb:cb:cb:2c:d7:e2:98:79:c9:
4b:ae:cd:8d:46:8c:e2:2f:76:c8:00:26:95:26:32:db:fd:7f:
23:a2:be:40:a3:74:07:6f:e9:a7:59:2a:15:8f:a4:b3:15:33:
74:3c:28:10:c6:c6:ac:bc:4b:d2:e7:a3:48:ff:af:53:d6:58:
1f:cb:3a:af:7f:93:0e:a1:a0:1e:04:13:ac:f6:17:15:c4:19:
5e:6d:63:70:22:73:50:1c:42:19:cc:0a:d8:fb:43:d3:9f:2f:
c1:a4:d7:60:fc:ed:47:c8:66:9c:fe:23:16:41:4e:9b:11:c4:
6d:2c:7b:0b:a3:85:cf:17:0d:85:31:00:b1:bf:86:c2:d4:a8:
82:b9:de:e8:ee:6e:87:ac:e4:14:a3:11:32:6d:98:ef:ab:a6:
7b:40:45:af:a5:9e:28:04:58:3d:1b:8c:d8:99:be:2b:99:91:
79:25:a5:b8:56:b7:a9:2d:70:24:59:a3:f0:0a:46:80:1c:24:
f4:c5:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:25 2025 by rpki-client