
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa
File: 24ec6956-edcc-36c7-8c93-631582aff06f.roa (raw, json)
Hash identifier: HWSO0dHXD+bKB/PjDU+aYKhMiAG9IFlNq7vGG2DJINs=
Subject key identifier: E3:32:28:8E:19:C0:23:AE:DB:40:BC:73:71:E2:49:59:21:13:D5:3A
Certificate issuer: /CN=cdc373f2-7aee-4c17-9b33-e9d993543374
Certificate serial: 010D0C9F4328584BB45D1355BBE7C3447440C700
Authority key identifier: 4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 400079
IP address blocks: 204.48.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:13:55:bb:e7:c3:44:74:40:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc373f2-7aee-4c17-9b33-e9d993543374
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=b321302f-7960-4fc6-8ace-a33dbb0b9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:05:34:15:39:20:bf:1d:93:e0:30:7b:64:03:
08:52:c0:c1:7c:14:c9:3f:34:90:15:47:6d:d0:a6:
90:a7:a1:b9:c3:96:2e:20:21:a8:8f:2b:64:ca:00:
07:e9:2f:9b:34:ae:30:cd:c2:f3:a9:cb:3e:f1:11:
52:4f:8f:6f:fe:66:f8:14:ad:a3:9a:c9:24:91:78:
1f:7b:82:2f:15:d2:ef:a5:d6:c1:9c:51:4e:18:03:
d3:42:8b:d6:32:26:54:82:14:19:b8:a4:db:5b:6a:
18:dc:08:1b:10:ec:f2:84:d1:fa:be:90:a5:27:ba:
fc:19:7c:8d:29:63:7e:4c:83:e1:9a:3a:32:b5:6b:
2b:86:74:55:80:b6:ce:f8:cf:23:27:df:fb:08:7d:
23:0c:cf:38:25:86:9b:6f:e3:cc:f6:5f:42:81:1a:
d2:6c:60:c7:d6:eb:b5:28:81:cc:1a:8a:4b:30:53:
5a:3b:94:96:15:cf:13:36:a3:f4:3f:2c:ee:1d:fa:
e1:d6:4a:d8:e5:61:85:0d:32:a1:16:1a:7f:79:49:
27:18:8b:8d:33:7e:67:3b:e2:88:fe:b4:d0:0e:76:
0c:ce:d9:43:c8:f4:20:50:b7:c8:00:85:d3:92:0e:
ff:17:5b:4c:28:aa:f4:2d:30:e7:4f:40:31:bf:2c:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:28:8E:19:C0:23:AE:DB:40:BC:73:71:E2:49:59:21:13:D5:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl
X509v3 Authority Key Identifier:
keyid:4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer
sbgp-ipAddrBlock: critical
IPv4:
204.48.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:bf:00:1c:8d:0f:13:e1:55:5c:8d:a6:ab:fa:0c:6c:3f:b5:
95:e6:9b:c6:02:ef:e9:f8:7b:26:33:e1:e7:9a:2b:ad:2f:25:
51:b1:ff:b6:85:0f:0d:2a:ab:34:5c:1a:d6:4c:d1:31:5f:6e:
c1:22:b2:12:0e:94:f4:85:55:4b:dd:8b:01:1a:30:ff:c1:bc:
40:96:63:cc:15:5c:10:d8:1e:53:b1:06:b9:9c:c2:12:9e:7a:
1e:26:79:a5:e0:8c:a3:d9:17:84:28:47:5b:54:03:d6:c1:da:
96:eb:57:1d:3a:a9:d8:40:c9:b8:2a:f1:3c:f8:40:af:5d:07:
e8:63:66:3b:e7:46:72:1f:62:38:ae:55:c5:87:a1:5d:14:78:
5b:b1:58:61:65:20:72:8f:1f:cf:78:bc:f6:86:56:3e:02:40:
84:14:d0:23:e5:0e:f3:9c:aa:b0:2a:48:45:14:ca:83:d3:a2:
4b:b8:c9:69:32:3c:72:ca:b1:9e:f2:d2:55:3b:0f:aa:7f:89:
95:9b:a3:99:3c:73:1a:ed:57:38:0e:ce:50:dc:d8:40:c6:40:
de:1e:24:87:fc:32:f5:60:e3:83:16:9d:bc:ea:50:85:18:c0:
02:5a:95:9c:b2:84:ea:2c:51:72:46:18:f3:0d:94:3d:74:31:
9b:60:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:51:53 2025 by rpki-client