
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
File: 17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa (raw, json)
Hash identifier: Xfh9Tq2l+rlaegwUoFLVcavkAIU0NlpthbRNPSpag/E=
Subject key identifier: E5:65:20:A5:E4:A5:F2:89:E9:36:36:60:EA:16:5A:21:F2:FF:71:E2
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F4328584B9D784F4B39F1E97C10E98300
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
Signing time: Thu 21 Aug 2025 01:00:33 +0000
ROA not before: Thu 21 Aug 2025 01:00:33 +0000
ROA not after: Wed 19 Nov 2025 02:00:33 +0000
asID: 8796
IP address blocks: 104.143.32.0/20 maxlen: 24
172.81.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9d:78:4f:4b:39:f1:e9:7c:10:e9:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Aug 21 01:00:33 2025 GMT
Not After : Nov 19 02:00:33 2025 GMT
Subject: CN=bcd7e589-c133-46c8-b9a9-1dfab7994e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:12:69:61:0d:64:5b:46:5d:4d:97:7d:69:
17:76:76:08:2c:c7:b4:31:58:81:b6:1c:2f:96:35:
ef:e0:ca:c4:3f:8d:1c:7c:09:59:7a:f8:18:79:7c:
1b:47:e2:11:9f:98:1d:f8:8a:04:4b:13:c5:be:e1:
76:54:6c:e5:71:6f:57:fb:51:b8:30:31:62:28:bb:
0c:66:d4:15:ec:46:84:b9:d2:bf:43:c5:21:c6:07:
fb:d6:6d:7a:82:9f:0e:18:89:6a:aa:73:04:e0:5f:
38:7a:06:2a:64:ee:62:01:35:7e:0d:60:ec:4b:eb:
2f:17:a7:66:3c:a8:f8:73:f3:26:82:84:86:3e:ec:
3a:ab:c1:63:82:44:00:5a:7e:ee:f0:f9:41:db:94:
43:1b:79:d1:0d:44:43:a2:a7:5e:54:bb:9c:4c:b8:
a7:f6:09:9e:a0:db:60:55:55:ad:b6:99:a0:7f:85:
10:6b:2a:71:c4:fa:38:4d:6e:a0:60:a9:cf:5f:fc:
e9:30:f3:b9:50:76:3b:74:7a:34:5a:3b:89:a5:98:
34:92:0c:b1:14:9f:d7:25:e4:57:c2:e2:88:03:54:
c6:75:43:a7:65:03:61:64:76:c3:93:d5:b5:b2:da:
3f:1d:f2:7e:c5:dd:26:15:8c:0b:a8:55:96:f4:48:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:20:A5:E4:A5:F2:89:E9:36:36:60:EA:16:5A:21:F2:FF:71:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.32.0/20
172.81.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:04:0f:3c:dd:9d:66:65:29:e9:08:0b:23:b3:24:81:f9:8e:
60:c3:28:6d:d4:9d:a0:df:34:a8:78:fe:fb:a1:73:83:06:ce:
6b:3a:be:1a:71:e4:48:b0:cc:ab:82:51:26:bc:9a:d9:da:bd:
4c:c2:bf:6a:25:ca:a1:42:37:39:32:4b:ff:67:b5:7b:d0:36:
18:52:57:e6:22:aa:d2:d4:94:48:84:0e:cb:c0:c7:5d:50:2f:
bd:ac:ec:d2:a1:14:66:d0:20:2b:86:b2:6a:81:80:1d:35:96:
69:05:01:fc:c1:83:9f:7a:f9:5d:c2:5e:2b:df:0a:9a:a6:47:
cf:a3:5b:38:51:26:fe:75:5a:9c:63:24:ee:08:4a:f9:3a:b8:
b5:03:9d:c1:4c:d7:23:59:a1:c7:82:1a:44:9f:b1:c3:d9:92:
4c:23:c8:a5:1c:22:c0:20:7b:9f:c5:87:14:a6:29:5f:4b:6f:
72:c4:81:dc:ef:7f:40:d1:02:f3:52:1e:fa:d9:ee:74:e4:34:
5c:06:a9:3b:96:dc:68:5b:61:3e:10:3f:d2:27:05:78:36:03:
52:e7:ed:af:b0:dc:dc:7d:95:e4:72:a8:2d:39:a2:e0:f5:e3:
96:7f:e9:9a:7a:62:1c:dd:ca:42:b8:c1:bf:77:ec:0f:03:7c:
f6:75:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:26:26 2025 by rpki-client