
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa
File: 5d236ec1-c105-3b95-a3ae-807c84595cf2.roa (raw, json)
Hash identifier: NsMe3zrZvY+PjwcSHdKKXXxjimCgadSFyDNX1ii7jKI=
Subject key identifier: CA:70:05:55:87:AF:02:1F:F7:6D:F5:98:5B:37:64:0D:6A:36:E3:63
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584B758CA6B7AF1AEEE208B7C8E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa
Signing time: Thu 09 Oct 2025 01:00:28 +0000
ROA not before: Thu 09 Oct 2025 01:00:28 +0000
ROA not after: Wed 07 Jan 2026 02:00:28 +0000
asID: 400402
IP address blocks: 104.253.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:75:8c:a6:b7:af:1a:ee:e2:08:b7:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Oct 9 01:00:28 2025 GMT
Not After : Jan 7 02:00:28 2026 GMT
Subject: CN=a1aa5b5e-1d4a-49d3-bcef-05a89f4447a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:85:7b:eb:d2:33:73:f5:6e:1d:cd:a5:f6:
ff:d8:75:c3:ce:c6:63:31:b6:f2:21:cb:1e:0a:4e:
44:9f:c8:e2:ed:ac:e8:ea:c0:f0:18:96:d6:ce:29:
36:18:df:8b:36:2c:44:52:63:3d:cd:4b:4b:66:84:
b0:63:14:61:f0:c2:fd:96:c1:b6:f5:21:d1:d0:a0:
d1:9c:95:cc:60:fc:11:c8:10:65:20:6e:95:95:85:
da:45:42:17:b1:66:7f:72:fb:da:8a:68:8b:a8:72:
91:76:76:87:5d:19:68:69:1f:66:a0:01:6d:08:50:
71:64:9b:84:da:aa:35:86:2c:98:8f:de:0f:d0:e2:
c0:fa:02:42:22:07:bc:29:84:6b:96:99:30:f1:40:
c7:c9:d4:2e:0b:8d:32:2e:b3:2a:1c:61:49:27:39:
91:14:dd:15:c6:39:5a:e5:64:75:18:e3:17:3c:9f:
d2:e1:fd:fd:d1:04:48:0c:7b:31:b0:55:22:1d:01:
56:ec:3d:83:fb:e2:17:05:f0:1b:88:67:c1:84:90:
14:f1:bb:4f:5f:88:a6:14:35:ab:e2:4d:bd:53:85:
ae:5a:96:62:bc:d7:11:45:76:21:4c:d4:07:d7:33:
92:99:e1:39:bf:48:3f:5d:b9:83:33:e3:4f:6a:d1:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:05:55:87:AF:02:1F:F7:6D:F5:98:5B:37:64:0D:6A:36:E3:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3a:14:0f:9e:41:db:1d:15:f9:33:e2:b6:10:c9:65:ca:de:
3b:c6:e8:ea:e4:6e:51:0e:d2:8e:b8:27:1b:0f:f6:8d:1a:c9:
af:48:4e:5f:53:dc:a2:0e:12:60:6b:0b:ce:26:78:08:71:d3:
05:a9:8c:75:be:4d:95:be:8f:11:54:a2:bb:a3:f0:09:a7:e8:
88:28:65:ef:14:c3:61:69:6f:e5:4b:fb:b6:1a:0d:1a:53:92:
9b:84:b3:ca:dc:4b:05:44:84:78:e4:a1:50:10:18:f7:67:6e:
cb:bf:15:cc:1f:98:1e:2d:4b:56:46:13:7f:10:7e:fd:6d:e5:
24:07:0b:3a:1d:0b:66:a4:c0:23:63:f4:81:31:3b:ad:b3:74:
04:fa:f6:6a:3e:e5:e7:92:b8:e0:05:8e:95:f3:54:f9:7f:f0:
5a:d8:35:01:12:48:60:a2:a5:95:cc:06:bb:de:ac:cb:ba:43:
86:cb:8c:6e:2e:a4:f9:1d:61:eb:db:d1:bf:65:fd:24:b4:f6:
37:df:90:5a:96:33:40:eb:c9:18:40:79:b3:d1:61:55:cc:03:
48:0e:ae:4f:49:6a:b9:df:8a:20:2a:4c:65:8d:76:c0:84:0e:
a7:74:bf:b7:52:90:3e:4f:f1:37:18:36:d1:f1:3f:24:c0:d0:
e6:9d:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:19:12 2025 by rpki-client