
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d9468ebb-f904-380b-b244-7419ffebb170.roa
File: d9468ebb-f904-380b-b244-7419ffebb170.roa (raw, json)
Hash identifier: ZQkugoE/u6dgAVjR+K4BRSg6krwszI2hy7AUzwM3Xx8=
Subject key identifier: 92:C3:2D:B4:FD:DB:FC:C0:85:84:A7:11:83:05:48:CC:1E:59:81:09
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F4328584B9E07C51C8F76BCCC83702680
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d9468ebb-f904-380b-b244-7419ffebb170.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 1651
IP address blocks: 24.244.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:c5:1c:8f:76:bc:cc:83:70:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=e6394c42-28aa-4fa9-856d-c37eeab51801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:60:e6:af:e8:e4:32:df:3f:7a:d6:f5:6b:
39:2f:f9:84:fb:4e:76:77:5d:7c:2a:63:29:f8:87:
91:55:c3:fd:76:2d:52:ec:66:07:46:aa:0a:5c:26:
96:17:32:66:30:e6:d6:94:28:71:76:21:6f:b8:5b:
ef:a7:42:99:ac:32:41:cd:dd:9b:25:95:aa:15:c7:
85:08:1a:9c:3c:ab:8b:0c:ed:bd:d2:9b:8d:c9:d5:
78:2e:9a:b1:45:d6:e7:50:c9:bd:4f:f6:f4:1d:12:
2b:f0:b2:72:c4:3f:c7:34:19:4f:56:6b:96:42:96:
f0:ab:ac:c9:83:3c:6f:19:99:24:6e:50:0d:36:81:
3d:8f:a9:83:26:dc:4a:2b:ee:b7:31:df:5a:1d:b2:
08:a1:43:a7:86:a4:0c:35:32:a6:91:36:fb:39:60:
15:16:22:49:5f:58:f9:87:73:f2:8e:d2:6a:92:43:
5c:14:6e:73:fd:7d:ec:d5:df:6b:32:a6:e7:c3:be:
e7:57:fa:72:0b:07:20:66:aa:1a:d5:7c:6e:b3:fe:
08:02:d1:32:ff:cf:98:0f:79:99:df:13:3f:ed:05:
fc:b0:8e:1d:cf:c2:95:9f:5f:1b:f7:9d:99:4f:00:
a6:38:3c:dc:c6:4f:f7:5c:cb:c6:06:08:a2:ac:44:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:2D:B4:FD:DB:FC:C0:85:84:A7:11:83:05:48:CC:1E:59:81:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d9468ebb-f904-380b-b244-7419ffebb170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.244.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:a9:20:10:cb:31:1b:a7:a1:74:c2:9d:21:3e:2f:c9:1e:57:
82:8e:1d:ed:df:f0:7b:98:d8:c8:d7:c3:15:48:db:0b:89:f7:
67:f1:8a:3c:0c:9a:cc:df:b4:f3:a5:6e:90:cc:0e:50:d5:a8:
cf:93:b8:0e:66:04:e7:de:aa:a9:fe:e3:2d:a9:a9:f9:b6:5c:
c1:06:e1:57:85:f3:d7:0a:db:f4:40:ef:67:fa:41:d3:35:85:
04:2c:99:91:a1:cf:f3:0c:42:41:94:36:6b:f0:b6:b4:c3:ba:
59:85:f6:97:09:00:7b:f2:b7:b9:f4:26:9e:0a:3b:08:0b:70:
0f:d9:36:f6:cb:a8:ec:c0:15:bf:25:40:44:63:1e:2b:76:68:
e2:12:4d:09:96:ca:9b:ac:49:25:f2:fc:1a:69:04:cc:63:2c:
d1:40:54:c5:46:01:5a:2d:02:ab:21:06:3f:ea:fe:c3:37:7d:
4c:3b:64:74:d8:74:2a:35:08:1a:96:74:96:61:5f:04:80:20:
ce:8e:00:29:e2:b0:3b:97:f2:9d:95:9a:f3:f9:1b:df:80:bf:
ab:9d:a0:16:9c:d1:60:77:23:d9:c4:c7:73:6e:55:17:8b:65:
47:9d:15:15:4a:44:de:73:0d:2d:d4:10:e3:00:d1:c2:44:09:
44:87:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:17 2025 by rpki-client