
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa
File: 6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa (raw, json)
Hash identifier: Qo1o8tEJTMkFdhAQNVDijEdKOVGlRP959UU5TIrdFEU=
Subject key identifier: 44:0C:26:A2:BA:3C:90:F2:1B:22:CE:33:A9:86:9D:0B:06:71:93:CE
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F4328584B72C1ED9A9BA7D608A3997180
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa
Signing time: Wed 08 Oct 2025 01:00:29 +0000
ROA not before: Wed 08 Oct 2025 01:00:29 +0000
ROA not after: Tue 06 Jan 2026 02:00:29 +0000
asID: 9886
IP address blocks: 104.251.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:72:c1:ed:9a:9b:a7:d6:08:a3:99:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Oct 8 01:00:29 2025 GMT
Not After : Jan 6 02:00:29 2026 GMT
Subject: CN=0cba93cf-30ba-44a1-9fb9-f5039165ebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:37:1f:7b:f4:aa:79:9e:b9:ba:b3:80:a9:
ae:e9:b7:05:2a:64:c8:3d:b6:71:cc:75:a7:ea:2b:
65:0a:72:b1:5a:c3:ff:43:14:88:70:c1:9a:fb:01:
14:ee:23:f6:12:41:fc:2e:e0:28:65:01:10:bd:e9:
71:c1:99:06:09:b4:aa:86:93:08:9c:cf:76:cd:08:
43:68:a0:b7:33:45:25:9e:15:a2:ba:3b:ad:f0:51:
38:fd:3b:6b:a1:93:19:62:4d:d0:75:10:b5:0c:d8:
2a:60:bb:fc:94:2b:95:22:4d:b7:72:db:2f:40:41:
a8:60:8c:3f:cb:96:d0:8b:5a:b6:44:f1:59:4e:f1:
2a:45:7a:d7:73:1e:19:90:83:90:2a:06:72:10:96:
c6:b3:60:42:ba:3a:39:d3:ae:1d:33:a1:7c:1c:a9:
72:c9:17:16:5e:42:e2:38:ad:33:f8:17:e2:58:59:
4c:14:3b:ec:9e:f6:1e:00:6f:07:39:19:4c:bb:c8:
05:02:c0:04:74:45:20:d5:c9:30:09:9a:b9:e4:a3:
fc:49:f8:61:21:37:f2:a2:2b:3a:bb:e6:1c:f8:56:
95:67:a4:9c:a7:f2:fe:6a:b4:72:a0:9d:77:ee:da:
ac:44:79:23:6f:46:43:f8:08:53:67:3d:38:0f:32:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0C:26:A2:BA:3C:90:F2:1B:22:CE:33:A9:86:9D:0B:06:71:93:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:94:36:48:bf:39:20:f2:40:08:12:8e:24:88:a8:1b:75:19:
47:f4:11:73:a6:4e:dc:cf:c4:53:e3:cc:3b:e1:41:67:99:09:
8d:d7:f5:8b:e3:f3:12:67:b1:89:46:e5:85:73:6a:72:6c:b8:
4c:fc:95:81:ba:a0:36:8a:b0:d4:4d:2d:70:f9:17:24:91:f7:
65:0a:b2:4d:04:27:cb:77:c3:71:89:06:88:de:50:27:b3:bf:
e0:f3:24:e0:d6:f1:d2:f9:30:bd:b9:90:32:7a:bf:23:78:63:
f1:aa:3e:b9:90:e2:0f:d9:5a:15:67:12:e1:57:c8:a8:6c:f5:
e8:ff:0a:e4:db:7e:9e:61:4c:53:87:0f:38:aa:e0:b1:12:ed:
cf:98:5e:03:26:2b:2d:e5:51:d6:35:84:d9:12:ae:33:fb:83:
00:6b:75:ac:70:d9:5c:51:3b:3f:66:56:81:18:30:13:dd:d7:
28:32:67:db:fd:4e:7a:76:f3:07:cf:a7:a3:d9:92:ba:ef:a5:
73:4d:6f:d6:0e:f1:2b:cf:42:ed:54:1f:75:85:30:e9:13:e2:
a4:c0:58:c9:7c:af:22:d9:47:08:06:aa:b0:41:81:8c:72:ac:
c4:d8:57:79:8b:b1:28:3e:d8:1a:16:9c:76:62:2b:bd:08:c2:
86:ba:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:03 2025 by rpki-client