
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa
File: 0daa2172-5778-357c-a7ca-297148d01e2f.roa (raw, json)
Hash identifier: ToHoRmX3baVcIop9HzVzlrghWtBimAJqF7Wk3pS/rJk=
Subject key identifier: 30:49:D0:64:FB:F0:6C:30:D7:71:BC:CF:46:F9:5A:5E:E4:CA:1A:0E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584BBE403AD84A51FBF497F30F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 3356
IP address blocks: 45.39.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:3a:d8:4a:51:fb:f4:97:f3:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=8bb7dd39-858e-408c-bc0a-078a84f2d182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:49:3c:3c:d2:27:01:a3:77:c6:0c:5c:56:
22:ab:34:e5:79:3f:c6:7f:de:7d:3c:4d:37:c0:be:
fa:68:84:1a:84:73:67:83:f9:ce:39:75:07:54:2e:
2f:51:45:71:89:d2:e7:30:33:01:a6:2c:93:9f:f5:
b1:cf:f8:81:9f:ae:c6:fe:30:cd:ef:6a:5f:c2:38:
be:fd:c0:4e:74:ed:ca:7b:66:e0:cc:4b:bf:0c:fd:
c5:7e:21:9b:90:0f:2f:97:0a:8a:39:70:63:e3:9d:
e7:c6:a3:29:c8:73:bf:90:b4:17:8a:51:98:96:96:
2c:ff:92:f4:aa:68:55:4a:75:49:48:9a:f7:b2:4d:
c3:f1:43:78:0a:6a:46:c4:06:a3:b6:f6:14:cd:18:
41:99:d6:ca:07:11:59:e9:50:a3:41:b4:d1:13:cc:
74:2b:cd:8e:a1:55:16:2a:d7:00:12:e9:27:08:89:
1c:66:0d:58:46:11:5b:92:54:8f:03:44:6e:ef:87:
11:99:ec:3d:f7:7a:66:d5:c0:15:30:9f:2d:83:5e:
e7:7b:c5:11:a4:1a:63:94:d7:39:34:5e:92:ea:3e:
7f:b7:2a:4c:3f:f5:1e:08:b6:27:89:eb:8f:c5:ff:
5a:cc:31:7a:b2:58:d7:d9:e7:10:55:19:35:20:73:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:D0:64:FB:F0:6C:30:D7:71:BC:CF:46:F9:5A:5E:E4:CA:1A:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.39.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c8:db:01:d4:71:08:3b:a7:47:03:de:7a:15:c2:e0:a0:50:
9d:c8:a4:41:22:5f:df:1d:4c:13:d3:35:de:0f:cc:e5:03:33:
57:0b:4b:a4:03:10:ba:90:0f:51:dc:df:5d:1a:ae:c5:90:f4:
e4:2e:d6:0b:60:6c:ef:20:79:e5:8b:97:fe:95:16:7c:b1:1d:
91:ed:15:2a:33:27:c0:b9:df:01:74:22:69:9f:ae:1b:f7:2f:
f4:85:f3:36:b1:cf:8e:40:de:0d:c2:8d:1b:3a:d3:15:45:13:
1c:04:bb:0e:25:1f:6d:56:61:0f:bd:c9:35:22:24:4c:c5:1b:
29:1c:50:f8:70:85:6d:97:b2:bb:92:6a:c9:47:34:62:dd:04:
b1:78:48:c3:ed:26:9c:08:3c:01:c4:10:9a:28:d1:b4:be:bc:
00:ed:45:7d:c7:7c:97:a0:1d:86:7e:8f:70:90:e1:52:eb:6b:
c6:1b:b4:3b:49:66:37:66:11:76:71:e8:54:9d:e3:d8:3f:71:
48:15:a4:c7:b4:d3:f9:88:08:48:92:4a:69:40:8a:c4:c8:b0:
6b:6b:bb:b5:02:6e:ca:0a:eb:e9:11:de:52:f7:c2:9f:c8:77:
7c:ed:f6:c1:d7:93:27:5f:98:9f:a5:0f:1c:bd:ea:3b:7a:5f:
b2:af:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:57 2025 by rpki-client