
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bd8c907-4d08-3f33-9a33-444c9d934d4b.roa
File: 8bd8c907-4d08-3f33-9a33-444c9d934d4b.roa (raw, json)
Hash identifier: Ny6E7mMfLj78DAK5VCupQdWbH6ikoPrCmDTB0MahWpM=
Subject key identifier: 50:2E:56:1A:BB:9A:B1:CA:5A:6A:12:0E:A3:19:B2:E7:DF:77:64:19
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BB3AE5B632480DE3B5747AC40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bd8c907-4d08-3f33-9a33-444c9d934d4b.roa
Signing time: Fri 31 Oct 2025 07:08:42 +0000
ROA not before: Fri 31 Oct 2025 07:08:42 +0000
ROA not after: Thu 29 Jan 2026 08:08:42 +0000
asID: 55154
IP address blocks: 172.94.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b3:ae:5b:63:24:80:de:3b:57:47:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 31 07:08:42 2025 GMT
Not After : Jan 29 08:08:42 2026 GMT
Subject: CN=17cb9b17-2674-4a00-b96b-bc3b012fc561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:b9:35:38:ab:7b:05:ec:e9:23:42:97:54:
e4:d4:bc:6d:f0:1a:2a:59:2d:1d:e3:df:b3:1e:aa:
ef:b1:aa:66:6f:ea:75:18:31:71:25:97:7a:43:86:
6f:13:09:b2:be:80:b1:be:94:f5:7f:0b:03:6f:c9:
55:49:8e:2e:09:2c:90:9c:1d:4a:de:90:e1:2c:2c:
11:7e:c5:df:1b:87:d0:70:2c:e4:1c:f8:df:a1:8d:
f8:e7:c4:6a:41:f1:c0:72:12:c2:5b:56:7d:41:a2:
94:ec:85:08:5d:21:2b:1f:a6:89:0e:a7:8e:03:db:
46:ca:e7:6c:b9:c4:63:c8:44:fd:56:51:38:a0:70:
e1:b6:12:bc:df:5e:30:ef:09:7f:9a:68:44:dc:b4:
e4:c4:8e:f3:f3:78:0f:92:0f:48:0e:05:bb:07:9a:
cf:62:ea:cb:83:a7:9b:ef:0e:b8:64:e1:56:25:1c:
f1:22:00:1d:5d:a6:68:dc:d7:dd:67:3d:82:da:3f:
c1:1c:39:86:3b:7d:74:7a:d4:d2:ba:c9:93:d0:97:
e7:26:4f:25:9c:87:7d:51:96:cd:75:9f:54:73:ee:
4d:ce:95:11:02:63:24:c2:bc:82:b1:5e:f3:80:1a:
9d:f7:19:42:af:5b:97:56:72:4f:c3:60:72:6a:22:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2E:56:1A:BB:9A:B1:CA:5A:6A:12:0E:A3:19:B2:E7:DF:77:64:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bd8c907-4d08-3f33-9a33-444c9d934d4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:cf:f2:03:e8:4d:ef:25:33:2b:59:08:70:2b:04:de:24:17:
05:9b:ac:90:e8:23:da:3f:3f:8b:c5:93:07:a3:78:82:ed:c3:
3f:f5:1e:2b:79:15:c4:e7:5e:cd:be:25:d4:45:b7:0d:b2:03:
c7:38:71:9f:ea:20:22:7e:5b:d0:75:3f:65:de:c6:a4:5b:08:
86:64:47:0d:e5:9b:4c:19:ee:22:68:4b:4b:6d:80:46:2a:92:
79:a8:ae:fd:e9:b5:b3:8a:ed:68:af:06:eb:9f:f0:b1:28:63:
af:9f:69:43:11:83:e2:de:17:f5:ae:b3:0a:52:8b:b2:eb:3f:
bb:7c:45:9e:13:98:ca:1e:7d:1e:df:56:87:61:da:aa:1e:1d:
2c:aa:e7:99:99:ae:61:4a:42:b1:ca:c8:0d:47:bf:1e:af:5e:
46:af:cb:bc:43:14:c0:ff:f9:4e:7a:e2:40:b6:3f:fc:f4:42:
0b:53:16:30:c3:b0:1c:c6:33:e5:f0:5a:ff:fe:c3:c8:ab:b6:
03:5a:1b:52:09:e0:2c:82:b5:25:48:f4:78:b6:82:12:c4:fb:
23:ed:92:c3:17:34:91:aa:16:e4:2f:cb:bf:af:48:72:cc:86:
69:5f:e7:18:9e:66:0b:7f:93:af:c6:cf:af:c4:76:a4:c0:20:
89:a2:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:03:09 2025 by rpki-client