
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
File: 0400b87c-f24c-326c-a2a2-44c7961b7277.roa (raw, json)
Hash identifier: AqsDJDrlci/iZ/wVs3zhfxX2UMhQYyn8ZPzeRn0S28g=
Subject key identifier: 83:7B:1B:92:12:5B:FD:B0:5C:D3:B7:A6:EF:07:85:C9:A1:47:CB:22
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584BBFA59A0526FB075DCC877500
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 399150
IP address blocks: 52.128.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:9a:05:26:fb:07:5d:cc:87:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=51f5c42b-43b5-4608-b7e4-48f101efc7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:6b:01:ce:21:f6:4e:37:ce:1f:68:2e:97:
17:2c:65:28:9e:24:8c:b5:f3:01:70:4d:bc:33:c6:
f5:f3:48:5a:e4:9a:63:22:3f:3c:3c:48:a7:7e:d6:
45:2b:cb:4e:3a:7a:15:74:bf:67:32:17:28:12:fc:
17:52:46:fb:71:d1:dc:51:2b:fe:41:27:40:61:77:
af:51:84:f1:e5:72:b4:7d:b5:4e:98:84:d1:b7:10:
7a:d9:26:0a:13:ac:e2:f2:a0:bd:33:8c:3a:6a:9a:
f1:e5:bc:bb:ed:f8:b6:14:ed:c2:03:cd:da:16:5f:
f2:f6:1c:88:d1:e0:c3:a3:72:d8:32:c6:c5:2b:5f:
de:56:72:db:5d:fd:ff:09:61:56:a4:1e:a1:e1:d8:
64:07:af:19:e4:11:a9:cb:d4:f2:5b:14:9c:68:ca:
ff:41:8c:57:fa:5c:2b:07:98:a1:6a:a0:8e:20:3b:
5e:69:44:b2:31:f3:1d:37:d0:04:8d:8d:10:0a:58:
bd:ce:cd:31:eb:b1:df:5b:12:ca:0c:43:49:bf:e8:
9a:cc:6e:bf:8d:70:53:29:0c:05:4e:84:7f:8e:3d:
a9:7c:2c:63:2a:14:a8:5e:19:17:1a:f1:32:9c:72:
aa:86:9f:9a:d3:db:3a:79:d6:0c:7a:dd:c8:f1:90:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:1B:92:12:5B:FD:B0:5C:D3:B7:A6:EF:07:85:C9:A1:47:CB:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:cd:10:f6:13:3d:c0:e5:df:3e:ab:6f:70:c7:9d:2f:b5:49:
79:dc:19:99:88:86:f7:61:81:ad:f7:dc:55:ba:2f:a9:de:19:
e5:df:3f:f4:f0:5c:6c:43:d9:01:d4:96:e4:a7:58:72:ec:91:
80:05:fa:9d:64:f0:28:96:1a:80:2d:9e:b8:6a:2c:c7:ee:fd:
ae:76:58:6d:0b:90:91:01:4e:16:14:4e:a9:1f:e6:c3:6a:05:
9f:e6:3f:11:12:9b:08:c7:f8:30:88:d7:b8:15:cf:75:77:77:
41:56:74:77:f4:2a:af:30:f8:5a:b2:90:2b:a7:0d:d8:c9:2e:
4b:67:77:32:e4:c6:f6:ab:b7:cc:08:f9:6d:da:e5:76:c4:19:
db:59:9d:c0:4a:15:69:23:cc:3e:1f:dc:42:73:f6:16:31:6a:
9e:0a:42:bb:c6:9d:52:04:27:f6:ea:f0:14:8d:7e:74:26:05:
48:19:2d:3c:da:f0:20:d1:35:32:d9:10:dd:46:be:7d:fb:6b:
0d:54:af:56:8c:c7:bb:da:75:0e:12:96:ed:88:2d:5e:43:51:
ed:eb:b8:f2:7b:1b:9f:5c:ce:c0:0f:05:88:de:d0:56:72:fd:
73:2a:d8:4f:b1:db:d8:ea:a7:82:b3:06:99:5f:61:1e:25:8f:
c4:7b:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:51:36 2025 by rpki-client