
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
File: 672a3d03-abc2-3f66-8052-26ed409619a3.roa (raw, json)
Hash identifier: jHtuVMhyZ6PtUTzMCrRNjZt20QNIHHaFEGwdrxtY+Uc=
Subject key identifier: 47:08:BC:69:E3:20:F0:B2:18:C5:56:03:3F:2B:32:06:66:C7:03:B0
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584BBFA59C99F45D334C615B1200
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 13414
IP address blocks: 104.244.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:9c:99:f4:5d:33:4c:61:5b:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=ca31bfcb-18e9-48c2-952e-811151292eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:22:f4:db:90:e1:ae:68:06:3c:62:4d:d3:
11:c8:eb:f6:d0:50:45:08:89:bb:cb:42:ae:39:63:
8c:e3:88:ab:0c:8e:db:ba:74:81:91:62:88:36:10:
ea:8f:4f:eb:b1:5e:f1:be:e3:c2:e3:ed:32:7e:e0:
8e:0d:1e:0c:20:53:02:67:35:e0:3c:e3:4f:6f:ba:
e8:a8:fd:18:3c:d5:bd:df:2c:83:9f:40:fb:7a:07:
a1:06:13:1a:61:7a:e2:1e:94:06:32:f3:c0:67:0f:
f4:86:85:c3:4c:94:b4:0d:3d:9f:db:e6:d0:6e:19:
9c:ac:ec:b7:52:29:ce:98:7b:79:61:69:4f:94:8d:
a2:1f:c0:f3:46:c6:3e:af:9e:84:3d:b6:24:b0:35:
80:a2:3e:d4:5b:81:82:5a:bd:23:db:b6:36:69:f1:
97:0c:28:40:80:7d:22:cd:f7:4a:3c:38:ab:be:98:
0d:71:8d:e2:46:ea:cf:eb:50:e9:0e:b2:68:87:32:
84:4f:2e:f2:c3:11:ab:a2:08:fb:a5:cb:4d:70:31:
b0:27:af:01:86:d1:48:4f:77:a9:af:5d:40:60:b9:
59:44:db:ba:02:f4:ba:c9:8a:1f:af:1b:55:e2:d1:
03:43:9d:c1:b9:50:c7:32:b2:b9:84:b8:db:8c:39:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:BC:69:E3:20:F0:B2:18:C5:56:03:3F:2B:32:06:66:C7:03:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ee:57:fb:45:b4:7b:e8:40:4a:fb:0b:3a:ae:41:bf:61:99:
0e:72:cc:c3:c5:1e:a5:f4:a3:48:46:1d:59:be:3a:ea:3b:6a:
6a:60:43:66:f8:3d:9d:28:ca:2b:38:84:de:46:fe:c3:f0:7a:
a6:b1:02:25:8e:e2:ed:9d:3f:c1:f8:c2:fb:55:c5:21:57:67:
29:97:7a:91:3f:a3:f8:43:5e:89:16:f5:d5:ac:77:e9:be:bb:
f5:f1:68:04:42:2b:ae:30:a4:5f:b4:80:f5:81:41:90:56:1f:
95:1c:71:51:bc:56:1f:f1:92:a6:6a:39:9d:88:cf:86:18:8a:
c3:44:cf:43:70:b0:f2:26:63:09:6e:71:a3:9a:fd:9c:5c:fc:
24:75:3f:35:0a:b3:33:9b:f1:22:f9:38:8b:03:6b:96:6c:df:
dd:f9:44:f4:09:67:39:fe:19:52:ce:23:68:98:c6:f5:28:a7:
e1:27:53:e3:b0:8a:1f:98:92:38:a3:38:f6:59:fd:db:14:e3:
12:9d:07:37:55:f7:7b:6b:c0:f8:ef:2e:0d:4d:a4:1f:aa:c0:
45:d0:42:5b:8e:18:e2:1f:86:95:2c:d8:e0:4f:51:f9:1d:db:
27:db:04:cd:94:ef:6f:e8:99:24:52:9a:00:7a:0c:0a:1e:f4:
1f:b4:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:25 2025 by rpki-client