
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/eb30e2a9-59d6-34de-9bc9-941421be9959.roa
File: eb30e2a9-59d6-34de-9bc9-941421be9959.roa (raw, json)
Hash identifier: mgJn9w6Bpew3KEFBi4noSivyvfpiHQQwEiMXcoqa/eM=
Subject key identifier: C4:DD:90:85:C2:93:34:DE:0E:AF:C6:31:D9:3B:05:72:8A:8A:FF:18
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328584B9E07BF833F1A8B557DF90C80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/eb30e2a9-59d6-34de-9bc9-941421be9959.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 60841
IP address blocks: 104.167.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:bf:83:3f:1a:8b:55:7d:f9:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=93be6e2f-85f9-495c-97e4-9a2dd2075c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:85:06:7a:87:62:88:c3:bd:eb:1d:29:98:
2b:3c:56:f1:77:0e:cc:dc:43:75:50:97:b0:93:3e:
5e:d8:ac:b8:5b:f7:4c:42:19:ba:11:44:a8:0b:ed:
8b:b7:a7:9f:1b:b2:49:a5:8c:58:cc:f5:9e:e3:f8:
bc:a0:64:67:55:19:01:b9:38:c1:48:6b:e1:95:0b:
91:51:3c:36:83:bc:c8:13:ac:75:4a:76:f6:48:91:
84:52:98:65:4d:80:2c:85:a9:c3:74:17:da:be:be:
3a:7c:1e:c8:f4:fa:3c:dd:73:63:9f:54:a1:2f:d6:
cc:96:7b:7a:99:07:d0:46:fa:89:3c:a3:66:54:14:
d7:58:bb:df:f1:6a:ab:4a:ac:b3:1c:f3:88:71:36:
bd:ef:20:3a:9e:5e:4b:c8:2b:f9:31:cf:bf:59:e4:
d3:09:b0:1d:ca:f5:6a:2c:03:d6:5f:80:9c:f7:ca:
e2:c8:6c:7b:94:ee:3c:f1:6b:7a:ef:ea:2f:52:eb:
a5:c7:a3:a7:04:ed:f0:8c:b6:7b:86:d3:19:48:5a:
bd:e2:b5:51:57:7a:cb:77:2d:b6:12:61:84:e7:56:
74:ad:70:a8:09:ec:6f:18:64:f4:0e:70:da:9e:ca:
da:75:85:6f:2d:01:b7:b7:a7:66:9b:c8:6a:2c:77:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:90:85:C2:93:34:DE:0E:AF:C6:31:D9:3B:05:72:8A:8A:FF:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/eb30e2a9-59d6-34de-9bc9-941421be9959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:fc:50:57:73:52:5c:3a:5a:87:ad:28:d3:10:89:6b:8d:2a:
7f:37:49:2b:1a:9a:15:70:4e:b6:4d:98:4b:59:67:97:d1:7c:
b8:91:b1:bf:67:d9:06:95:b4:f8:c6:9b:d6:30:82:56:58:11:
37:0d:cc:8a:d7:cf:2b:dc:d6:02:29:1b:55:9b:40:e7:d2:07:
19:d1:1c:35:82:db:2b:4c:ed:3e:a3:ff:06:b1:00:02:04:47:
23:44:0f:94:ab:d5:fc:1c:b7:64:e6:33:bb:8a:ed:a4:0c:d3:
20:14:9c:28:e6:c4:d9:f3:d2:08:0d:04:d8:9f:3e:7e:be:2b:
4a:65:2c:50:a2:bc:90:6d:e9:41:98:15:55:ca:5b:51:39:90:
41:a2:84:3e:35:53:51:63:91:97:78:75:5f:65:41:0b:dd:46:
19:93:83:2a:56:57:64:fa:ee:17:83:dd:55:85:21:25:3f:bd:
e7:50:f4:30:49:e1:74:24:cb:47:01:a0:a2:00:1a:cb:c9:c9:
1d:81:2f:01:cd:38:e6:6b:af:f5:3c:d6:f2:67:1b:0b:4b:58:
55:78:5e:09:de:d4:72:8c:7a:63:07:04:13:ef:5b:0c:c7:cc:
27:a1:ad:63:bc:38:b2:4e:56:80:0b:44:d3:03:42:91:26:61:
5b:f5:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:16:41 2025 by rpki-client