
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/de19568f-c623-3b7a-afca-b69e3bfa8609.roa
File: de19568f-c623-3b7a-afca-b69e3bfa8609.roa (raw, json)
Hash identifier: gxhUq7+C5BeOoJjgvBxAKBfDpPpCCskJbQDvernW5kY=
Subject key identifier: D0:AA:1E:3E:F2:04:FE:5B:95:D2:0C:F7:7A:40:86:8F:E3:46:CB:9E
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584BBFA595368C5CA94E7A97B8E0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/de19568f-c623-3b7a-afca-b69e3bfa8609.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 13414
IP address blocks: 104.244.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:95:36:8c:5c:a9:4e:7a:97:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=cf18c25b-743a-4a23-8609-354650c1805f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:c1:00:fd:5e:a4:c8:88:77:43:d5:27:0e:
48:7a:51:b5:34:4c:14:d1:91:cd:63:39:e3:24:0c:
01:cd:fa:c8:69:45:c6:c7:70:58:c5:bf:77:d4:15:
7b:8e:2e:94:1f:30:0c:bf:f7:8a:e9:75:4e:55:4f:
e8:86:95:d3:14:aa:6a:df:a4:31:fb:38:cc:3d:ca:
e2:d1:fd:6c:66:0a:07:01:a8:bf:8b:d8:a0:9f:e7:
cc:69:62:b5:57:db:8e:e3:5f:0d:ab:78:93:dd:83:
fb:32:15:64:91:c5:c3:cd:91:be:c0:d8:87:86:f4:
7d:75:bc:58:e2:bd:38:13:3b:92:d6:bc:91:c7:d4:
fe:6f:cf:5d:78:ca:eb:b6:f6:c4:cc:33:dc:b8:d9:
2e:08:15:d1:4f:de:c3:7f:a3:32:88:ba:ca:57:bb:
dc:3e:19:de:ef:78:7c:6b:bf:09:69:63:df:23:10:
1f:65:7c:46:09:25:46:2f:4c:a5:ab:c0:cc:a2:3f:
17:a0:da:76:c8:94:77:52:62:09:c9:26:52:e8:45:
9c:21:db:a4:a4:89:0c:6d:d6:50:dc:a1:14:90:7c:
f4:2d:b6:ee:01:86:10:4a:86:46:64:ba:66:81:76:
76:2c:6a:5a:0c:9f:cb:76:33:93:2f:cb:da:2d:e5:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:1E:3E:F2:04:FE:5B:95:D2:0C:F7:7A:40:86:8F:E3:46:CB:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/de19568f-c623-3b7a-afca-b69e3bfa8609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:aa:4c:8a:ab:21:c6:84:ca:73:d7:61:8c:90:50:0a:ee:cf:
7b:1e:e9:00:ea:a2:d5:a3:4d:1d:c0:94:68:e7:9a:9e:2e:49:
13:81:a3:d0:a5:22:ce:a1:e7:a0:2c:3e:58:2a:c3:1c:6b:78:
c0:1d:06:fa:ee:df:9d:ae:fa:67:94:c1:fb:36:fe:fc:0f:8f:
9a:57:f2:85:36:06:81:a8:78:09:bc:c8:a8:2d:8f:ee:24:8e:
ed:cb:0d:5b:f1:b4:6b:47:9c:a4:55:f8:af:6e:0d:2c:09:fc:
93:53:44:6e:8c:49:02:44:25:61:33:3f:da:34:eb:01:3c:85:
9b:b6:ff:30:fb:44:74:04:9e:3a:3d:9f:f3:5a:54:b6:36:53:
f7:00:0b:d2:5f:71:52:a9:eb:2a:d5:94:7b:b1:3b:4a:2c:7a:
66:26:ec:53:1e:fb:83:ec:5d:59:38:81:51:d4:5f:2c:69:72:
23:6b:36:79:94:c6:73:bb:10:b7:90:94:e7:17:f6:e8:99:37:
c1:ce:d3:e6:d9:1a:44:a8:f5:cc:a2:6f:1d:dc:f2:f5:77:b9:
56:cd:33:2d:ff:a5:69:8d:fe:a7:e7:3d:51:32:c2:f1:fa:b6:
85:4b:9b:c7:64:e0:9e:bd:ff:d2:d2:ff:69:df:38:a9:a5:3a:
27:48:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:39 2025 by rpki-client