
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
File: 8457e11b-32d1-34c0-81ea-624f8e85267e.roa (raw, json)
Hash identifier: YNw8kLc4ZNE39+gno0gt97pVB3j1hHOmAz0kccQu0qE=
Subject key identifier: 0E:64:B7:5C:3E:4A:9D:26:4D:71:B6:65:0E:CA:4C:C9:12:B2:CB:6F
Certificate issuer: /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial: 010D0C9F4328584B9872450EECAD182908888100
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 55254
IP address blocks: 72.46.80.0/22 maxlen: 24
104.37.112.0/22 maxlen: 24
162.211.184.0/22 maxlen: 24
168.100.192.0/19 maxlen: 24
172.96.20.0/22 maxlen: 24
205.201.30.0/23 maxlen: 24
205.220.192.0/20 maxlen: 24
216.10.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:45:0e:ec:ad:18:29:08:88:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=c554115d-6526-4e93-931d-8a832cd2f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:7f:98:f3:40:a7:d0:96:31:67:28:a4:1f:
24:91:79:3f:1c:c7:75:7a:73:67:2e:b8:d5:60:5d:
4e:1e:5f:7e:00:77:bb:c7:05:9c:0c:3d:cf:40:68:
79:94:30:94:d9:f0:fa:ba:35:8f:c7:55:3b:da:4b:
78:fb:bc:0d:fc:fd:ac:8c:22:44:8b:e1:33:da:7f:
bc:de:97:8d:12:03:77:bd:e9:e0:c9:fb:ea:b7:91:
f8:0f:6b:96:f5:a9:d1:c3:45:a4:dd:4a:61:1d:b1:
ab:04:00:70:60:84:e9:ff:f1:b2:94:2b:41:95:29:
22:b8:33:e5:1b:57:a6:28:1d:f7:e5:19:10:be:e5:
bc:99:d8:23:95:14:02:dd:68:21:00:21:0a:c4:0d:
00:e0:db:fb:6a:3c:06:22:64:44:3e:87:84:48:9c:
3c:03:56:fc:8b:3c:10:95:db:18:6b:1d:de:f9:08:
e2:83:75:60:88:bd:39:09:5b:36:36:98:de:ec:b7:
17:77:fd:a8:2f:f2:91:70:6b:64:f7:2a:9c:b4:42:
ba:d0:b8:16:ad:89:60:ee:3e:ba:89:09:c2:00:af:
8c:74:ef:b5:67:af:e0:a8:99:b8:a9:74:86:19:93:
ec:96:da:24:68:e0:24:e3:44:63:05:ca:46:c6:d2:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:B7:5C:3E:4A:9D:26:4D:71:B6:65:0E:CA:4C:C9:12:B2:CB:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
X509v3 Authority Key Identifier:
keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
sbgp-ipAddrBlock: critical
IPv4:
72.46.80.0/22
104.37.112.0/22
162.211.184.0/22
168.100.192.0/19
172.96.20.0/22
205.201.30.0/23
205.220.192.0/20
216.10.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:e7:b6:44:3f:fb:63:22:77:be:7d:50:5d:1c:eb:7b:97:e2:
4b:12:e4:11:af:87:a6:9f:24:eb:93:72:d1:1c:f7:11:ae:56:
0c:3d:9d:3d:d5:91:cd:22:0c:e5:e3:19:79:17:77:0a:34:ba:
6b:93:7b:75:a1:56:bb:19:cd:8c:d2:27:9a:8a:2b:02:c3:c8:
fe:20:38:66:ba:58:95:1e:fe:60:1b:3f:b7:b7:35:8e:21:50:
54:d0:85:b8:c6:a3:bf:03:f8:4e:05:24:d8:c0:a4:65:5b:27:
27:27:d5:e4:b0:76:dc:02:38:b5:09:1a:28:18:a7:65:0b:9f:
a8:75:84:df:06:35:4a:5a:57:58:41:4f:41:09:88:b5:7f:5c:
2d:4f:e5:3d:27:c2:3f:7f:a0:a0:c2:7c:44:e6:d9:21:e0:1d:
f0:ce:4a:b1:a6:7a:b1:8d:bb:49:64:be:38:5a:ae:7a:1c:12:
03:4a:b5:57:b9:4a:a9:15:71:d0:9f:87:84:ca:03:ae:13:42:
88:26:17:44:9f:df:01:cc:9f:19:3e:eb:5d:e0:61:19:38:68:
a8:f2:c6:7e:87:e9:38:78:26:9e:28:28:d0:fa:31:35:23:15:
cf:9f:ac:65:95:24:15:a3:77:ca:33:1f:6e:c5:84:57:4e:89:
de:f3:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:31 2025 by rpki-client