
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/04dd92be-4771-31c5-9332-7c1b76450796.roa
File: 04dd92be-4771-31c5-9332-7c1b76450796.roa (raw, json)
Hash identifier: Q+vGzpmD3lg+hBTsD9pMWB+DNMiXO9Tlln2lfV3HdEs=
Subject key identifier: F2:43:70:A1:EB:0F:A7:DB:84:AD:6A:FF:68:0A:85:44:FF:8C:75:E8
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584BBA1042F8C6B7B48FED451DC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/04dd92be-4771-31c5-9332-7c1b76450796.roa
Signing time: Sun 02 Nov 2025 14:00:38 +0000
ROA not before: Sun 02 Nov 2025 14:00:38 +0000
ROA not after: Sat 31 Jan 2026 14:00:38 +0000
asID: 20940
IP address blocks: 204.2.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ba:10:42:f8:c6:b7:b4:8f:ed:45:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Nov 2 14:00:38 2025 GMT
Not After : Jan 31 14:00:38 2026 GMT
Subject: CN=6dc6fcaa-1272-401b-bde3-4c7aa016f8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:03:72:d3:91:1c:37:60:88:14:a7:08:72:
32:8e:a0:ae:b2:78:a4:47:03:66:24:3f:87:60:e1:
c3:92:69:c8:17:5e:f3:2b:11:ed:85:6e:56:53:d2:
45:82:dd:4e:1c:1b:57:54:60:03:af:ab:d7:c4:53:
49:87:de:db:55:90:8c:c7:bf:b1:79:f2:f3:c9:4c:
2f:fd:5e:a2:15:02:61:2b:27:05:9e:d9:9d:4d:d5:
37:4e:a4:f9:67:b8:3b:36:a5:76:7d:4c:9a:68:56:
53:1d:9a:88:b8:e1:a1:fb:8c:ed:7a:c0:62:e3:88:
b5:7e:82:2e:65:ba:9d:99:1c:35:94:ff:ea:d9:14:
8f:30:1f:1c:8e:94:d7:38:e9:11:e9:d4:ac:02:b7:
1d:4c:7b:ac:53:94:2e:19:a8:f9:ac:2f:d5:2d:a5:
04:31:d3:5e:9b:de:e2:a4:51:68:fb:18:2c:64:0a:
50:37:ff:68:9c:5e:e2:52:67:6b:bf:b9:67:15:2c:
4b:29:7a:65:90:1e:18:f3:18:34:3e:b3:fd:dd:18:
85:47:7e:f9:db:c1:24:cf:a4:18:a4:4d:3b:84:54:
b2:77:b9:15:1e:16:c7:6e:da:16:19:18:fa:47:36:
1f:02:cf:58:e9:e3:fe:b0:98:bd:f5:20:76:b8:0b:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:43:70:A1:EB:0F:A7:DB:84:AD:6A:FF:68:0A:85:44:FF:8C:75:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/04dd92be-4771-31c5-9332-7c1b76450796.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:03:69:f0:a3:88:a8:bd:79:bb:d8:a6:f6:7d:2a:f9:b4:5c:
9f:be:2d:17:9e:5f:32:b4:d7:dc:f4:12:98:8d:c3:a4:e0:b1:
5f:97:33:27:65:a5:48:e5:4d:ae:c7:9d:5b:ea:07:e7:30:82:
db:c4:13:3d:53:21:33:94:64:c3:fe:eb:79:ec:51:af:10:3c:
b8:87:78:c9:b3:2e:6a:c7:7d:bb:58:56:19:e0:6d:9c:bc:1c:
75:45:d7:d8:83:2a:3b:bd:78:13:d0:4d:3c:f2:8b:6a:d7:99:
fb:f6:7d:e9:9f:f0:77:ba:66:85:68:3c:ed:36:df:5c:30:a9:
7f:82:33:00:96:61:cf:8e:6a:1e:44:d0:57:56:b0:b6:d2:aa:
66:17:76:e8:67:df:66:c5:b3:ad:1a:19:12:2c:06:3c:dc:1d:
a4:47:b0:03:3a:ad:40:4d:72:ab:c0:40:56:b4:d4:7f:01:cd:
0f:91:ce:1c:fd:d6:27:ac:25:d5:56:00:98:61:aa:64:5a:ad:
20:b4:6c:66:34:5c:b1:87:17:6b:7f:bc:71:be:22:21:e8:5a:
24:53:3b:6c:e4:0a:84:16:f5:69:7c:1f:86:72:ca:85:f2:4d:
87:83:56:62:44:e7:8f:c9:94:e5:0c:b2:87:eb:0b:91:c1:1a:
65:ce:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:38 2025 by rpki-client