
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa
File: 89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa (raw, json)
Hash identifier: g4nJvEwncmy7uUYzoCNyHLXWccQVpHGcnLFaMKUH7Vs=
Subject key identifier: 3A:B5:FE:72:A5:DB:8F:B9:13:C1:B0:FF:AB:97:98:52:F3:84:6E:A5
Certificate issuer: /CN=6c5be2bd-61a2-464a-be54-34e87a4a9584
Certificate serial: 010D0C9F4328584BBFA595A38521E4C3E8CDDF40
Authority key identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 31851
IP address blocks: 104.219.188.0/22 maxlen: 24
167.88.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:95:a3:85:21:e4:c3:e8:cd:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5be2bd-61a2-464a-be54-34e87a4a9584
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=811e7434-2ecb-4a48-ab53-339631927098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:9f:69:df:df:28:e7:55:19:c9:70:8f:f2:
a8:e7:f4:3f:c3:e8:fb:b2:c1:06:f4:f5:35:f5:85:
58:67:6c:94:a3:df:f8:e8:1a:f7:5e:6d:d0:89:18:
b9:d4:90:6a:1f:89:46:22:1f:9e:e0:0c:17:58:11:
3c:cf:9f:0f:26:9b:30:99:6b:e8:8c:be:4f:74:6c:
e0:a7:50:ff:ef:67:d2:d3:ff:df:52:de:00:91:03:
9b:88:6f:b8:30:df:d8:ba:6b:e0:b3:24:74:1b:51:
6d:9a:90:6f:94:44:da:5a:79:6e:c7:c2:f4:bf:e7:
e6:8b:36:26:df:2b:d5:77:71:e4:3f:f2:ca:d8:fb:
b6:96:61:95:f4:e2:8d:61:41:4d:57:1c:dc:a6:1f:
ef:8a:94:e5:ab:8a:9a:db:d3:16:3d:e0:a0:dd:c4:
19:8b:e4:76:df:cc:0a:4f:96:ff:b3:ed:4e:5a:f4:
17:d1:d3:7d:a5:ea:c3:08:c5:68:8f:95:6b:e9:1e:
95:58:00:fe:61:33:d2:a6:29:4e:00:02:5e:ba:54:
94:23:f2:4a:82:06:59:03:2f:47:04:51:5f:a7:4a:
4c:86:83:cf:0c:0f:b2:a9:72:ef:a9:86:e0:0d:69:
79:d7:46:f8:b2:6d:d0:a8:8b:ce:d1:5e:9f:36:65:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:FE:72:A5:DB:8F:B9:13:C1:B0:FF:AB:97:98:52:F3:84:6E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl
X509v3 Authority Key Identifier:
keyid:8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.188.0/22
167.88.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:68:32:a1:e8:56:d9:3f:41:7b:f5:56:55:ab:6f:c3:85:29:
cd:d5:d3:8f:60:a6:53:53:b3:35:81:10:6f:2a:72:db:52:8a:
fe:0b:9d:ce:8d:22:74:b5:5c:97:ff:28:e6:8c:de:e0:11:1f:
fc:5a:1e:0f:df:f5:00:78:f1:cb:5d:03:32:50:ca:23:ec:e2:
f7:cd:7a:53:0e:98:7c:fa:46:c2:d2:f0:11:be:b0:01:46:ab:
b9:9d:1f:00:6a:58:b2:8c:73:ef:d5:af:65:32:b7:cb:ee:22:
b6:dc:a1:ce:75:8b:d8:c0:13:5e:9b:b4:2f:37:29:d0:fd:34:
be:d1:ec:ad:b4:14:44:cd:7b:f6:3b:75:4d:0e:d3:4b:5e:41:
3e:a5:f8:e0:fc:a9:55:09:e7:31:c6:c9:60:31:c9:f6:b1:ad:
28:7c:76:c2:74:2a:42:7b:ab:13:7e:59:a9:ae:32:71:80:68:
75:80:20:d5:96:61:a9:3d:6b:17:5b:f3:c6:fd:16:c2:07:46:
b0:cc:fd:42:51:0e:6e:c4:36:90:94:29:e9:d3:5a:30:1a:c3:
20:bb:4d:d8:6d:94:f1:b5:a1:57:b5:5c:53:e6:a9:de:c0:1a:
0b:d2:ae:0a:2b:9c:2f:ca:bc:9a:b6:7c:a5:a5:f6:44:07:1b:
8e:12:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:14 2025 by rpki-client