
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6b840c2e-0d48-3995-9b59-e0407c985374.roa
File: 6b840c2e-0d48-3995-9b59-e0407c985374.roa (raw, json)
Hash identifier: 0U3Ac5SqHGNnigWUhm3bivoaCKkXDgki2CL7tCWxin8=
Subject key identifier: 7B:D3:E8:D2:74:42:68:1B:17:F2:23:B8:C0:B6:34:BD:30:C7:A3:45
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584B5F3774560D01331963001A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6b840c2e-0d48-3995-9b59-e0407c985374.roa
Signing time: Wed 01 Oct 2025 01:00:32 +0000
ROA not before: Wed 01 Oct 2025 01:00:32 +0000
ROA not after: Tue 30 Dec 2025 02:00:32 +0000
asID: 36411
IP address blocks: 104.134.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:5f:37:74:56:0d:01:33:19:63:00:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Oct 1 01:00:32 2025 GMT
Not After : Dec 30 02:00:32 2025 GMT
Subject: CN=6ff4a6c9-bd91-436c-aa98-818eee9b4126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:2e:d3:42:cf:a3:19:1e:c5:1c:da:64:29:
d0:a3:0e:4e:73:c6:8e:8f:fd:fe:2a:74:83:0d:e7:
78:fd:6d:d3:09:7f:58:4d:47:ba:31:92:79:2f:7f:
a7:e3:87:19:2f:15:ad:12:81:75:a2:08:88:02:c8:
62:30:aa:69:f6:19:45:c0:f8:ed:31:4d:8e:e7:c9:
c0:24:bf:49:9a:13:52:a1:f8:31:e4:32:80:4a:3f:
f2:fb:9e:02:1e:b8:38:7f:4f:96:0a:1b:c9:47:be:
5a:07:5b:e7:a3:ef:ad:63:5b:0f:52:02:6c:c2:b4:
0c:9d:70:67:cd:d2:a8:9c:65:20:af:aa:4b:83:75:
ed:5a:41:99:61:a1:06:a2:e1:c4:ef:a5:de:6d:e8:
01:74:50:51:de:48:86:aa:1e:af:52:20:fc:aa:4a:
2e:fa:ec:ff:66:28:48:20:d9:e2:75:12:74:1e:e2:
64:d6:eb:4f:71:6d:ec:f8:bf:e9:7d:ce:94:7a:c5:
d1:b2:26:94:b0:73:ef:c1:cc:d9:33:a6:74:4e:88:
e2:d4:27:2d:48:b7:de:be:2d:44:98:57:ab:8c:fb:
c0:1b:41:9a:f9:e1:70:f7:53:5c:5b:d3:d3:a8:61:
40:77:57:18:5b:04:34:c1:23:81:59:4c:03:a0:f2:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:E8:D2:74:42:68:1B:17:F2:23:B8:C0:B6:34:BD:30:C7:A3:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6b840c2e-0d48-3995-9b59-e0407c985374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:aa:83:24:ed:31:ab:67:c8:dd:93:21:f3:db:05:c1:7c:47:
39:28:0e:a6:80:16:0f:a6:28:8e:24:48:03:0b:57:3a:5d:39:
9b:c9:f4:9e:be:e8:b4:67:2e:66:c1:51:95:4e:de:82:30:b6:
e3:89:f6:eb:af:be:a7:01:d4:ad:6d:d7:75:a9:a8:88:17:c4:
16:00:29:73:08:9f:be:56:f3:55:5c:ca:a5:e1:ee:d1:18:3d:
65:c9:5c:44:c2:31:48:8d:aa:28:a1:dc:a0:35:32:37:9a:00:
fc:0f:51:84:76:6f:86:45:bb:24:ca:b1:15:ea:f4:e8:69:d8:
0f:1d:34:ca:1e:63:a6:f7:59:10:3c:15:a8:e3:7d:7e:ef:ea:
30:d2:c6:39:7f:cc:ce:d4:d4:39:4a:de:5f:b3:16:19:85:e7:
5f:9f:e9:f7:27:9b:5b:fe:d6:9c:fe:c4:3e:e7:fb:80:23:9d:
5c:a9:03:9e:87:9b:2b:62:8b:51:d6:02:d4:a1:92:3e:af:86:
f0:4e:3e:2e:fc:bf:49:f0:7f:04:78:95:f4:5b:e3:4b:01:98:
01:65:93:0e:72:ab:d1:35:9a:f3:e0:24:47:3b:9a:38:28:ad:
4e:3d:2e:52:35:2e:1a:62:64:ff:9a:8e:eb:9b:7a:1c:6e:91:
f3:b6:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:19:04 2025 by rpki-client