
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd920eb0-8076-354f-b11b-a070d779957b.roa
File: cd920eb0-8076-354f-b11b-a070d779957b.roa (raw, json)
Hash identifier: yxW6xgJU4EumLr7YaZA1pSgCXOfphZ2RLpI6yrJeKbg=
Subject key identifier: 47:D3:70:1E:E3:AF:B9:20:F3:C8:B0:CD:5A:BC:89:D5:04:34:83:15
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584B5141D5ECC278251F24F80D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd920eb0-8076-354f-b11b-a070d779957b.roa
Signing time: Fri 26 Sep 2025 01:00:33 +0000
ROA not before: Fri 26 Sep 2025 01:00:33 +0000
ROA not after: Thu 25 Dec 2025 02:00:33 +0000
asID: 41264
IP address blocks: 104.132.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:51:41:d5:ec:c2:78:25:1f:24:f8:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 26 01:00:33 2025 GMT
Not After : Dec 25 02:00:33 2025 GMT
Subject: CN=1d8404ee-270d-43fc-b9b7-a70be372bd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:4d:13:4d:a1:ac:8e:f7:55:99:08:21:f6:
8c:be:2f:39:e3:c9:b6:b6:10:4b:fb:77:81:7f:3e:
98:6c:18:15:17:dc:c9:07:0b:e9:f7:6f:84:c8:6c:
51:f1:8b:58:28:ac:5c:11:5d:e5:5b:45:19:28:32:
14:2d:2f:a9:0b:c8:4a:a1:7a:32:96:fb:6d:4e:9f:
6a:d1:01:d3:24:6f:71:9d:93:ad:3f:3b:fc:e3:4c:
7f:69:09:18:36:7c:b4:f4:88:cf:ea:14:d2:de:5a:
b2:6f:f5:a1:5a:26:37:a7:ec:dc:16:5c:5c:3c:33:
88:c7:2b:94:93:5d:c0:a5:10:96:50:5b:ab:55:e9:
f6:4d:09:58:43:b6:f3:9c:df:14:83:01:7c:35:af:
35:81:bf:d6:9f:c5:56:ec:7f:23:44:d3:7a:a8:93:
e3:2b:7f:24:a0:80:85:ad:bd:f9:5d:f7:de:ae:d8:
28:e4:e4:63:03:92:87:b0:a8:c0:7e:aa:91:8a:57:
56:8d:c3:86:87:ff:39:b6:07:e1:59:cd:b0:10:a7:
05:4f:12:47:bd:6e:a8:39:dd:13:ef:62:0c:7f:e0:
0e:f0:98:b5:cf:17:42:1c:6f:f8:8e:b3:45:a8:36:
36:84:d2:fd:5d:02:e9:4c:fc:74:e6:3a:6c:4b:20:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:70:1E:E3:AF:B9:20:F3:C8:B0:CD:5A:BC:89:D5:04:34:83:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd920eb0-8076-354f-b11b-a070d779957b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:d1:60:96:14:19:ff:16:9f:3e:3c:69:69:c7:e8:b9:ff:ee:
2c:ef:fc:06:82:13:3e:38:b3:76:46:81:3a:ab:e0:61:67:e8:
0b:96:d1:57:2d:48:00:f2:0d:66:3d:3e:be:fa:34:14:e7:0b:
74:bb:da:26:e1:97:6b:b0:1d:3c:ce:9e:93:a8:92:8f:12:55:
78:81:6f:ee:45:3b:f8:23:27:1b:04:cd:77:52:ce:88:99:eb:
9c:44:15:19:72:5c:cd:66:e0:3d:ad:4e:77:d8:d4:21:cb:ad:
93:db:e1:86:8b:ee:44:1f:06:1e:ce:10:22:cc:cc:8e:c8:6c:
ac:4f:b2:9d:e7:1b:93:c7:da:f7:8d:3e:ab:f0:29:59:8a:3d:
37:c4:d9:b0:17:3f:3c:33:95:92:5d:52:09:c9:09:7b:84:67:
4b:82:e6:79:44:be:1f:71:ff:4f:4d:13:06:b4:79:98:01:e9:
43:16:d7:b9:d0:c5:41:f4:ab:a8:47:0c:5e:47:90:09:4a:5c:
a3:9c:49:c7:94:9d:35:02:82:aa:98:2b:94:f0:fb:bb:0a:f5:
4b:55:23:c5:85:3a:6b:d7:7a:06:09:52:5f:8f:f1:f9:99:27:
7a:e3:08:62:b5:ef:14:52:04:5e:58:95:e1:63:8a:3c:93:3a:
7e:14:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:42:31 2025 by rpki-client