
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7e84690e-a89e-3dae-8365-29cde4251cc5.roa
File: 7e84690e-a89e-3dae-8365-29cde4251cc5.roa (raw, json)
Hash identifier: VnujvFaPQ97/omgqAT5uwO6ZriXJoMrtQE8ep0txWjc=
Subject key identifier: B9:03:4F:5E:57:B4:AD:68:CF:F6:6F:A3:BF:6D:30:0D:ED:1A:5D:7E
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584B13D6C01D3A543CB668DDA000
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7e84690e-a89e-3dae-8365-29cde4251cc5.roa
Signing time: Thu 04 Sep 2025 01:00:33 +0000
ROA not before: Thu 04 Sep 2025 01:00:33 +0000
ROA not after: Wed 03 Dec 2025 02:00:33 +0000
asID: 399091
IP address blocks: 52.128.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:13:d6:c0:1d:3a:54:3c:b6:68:dd:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Sep 4 01:00:33 2025 GMT
Not After : Dec 3 02:00:33 2025 GMT
Subject: CN=f2c1e824-1ef6-4bfd-9318-fdad0c59498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:6e:f5:07:ae:a0:4a:ff:d8:74:37:c1:ca:
98:c6:cc:79:e3:d3:63:fa:c6:0a:00:61:53:24:86:
40:9c:aa:29:ad:c7:9c:27:5b:35:42:ae:83:7a:9e:
6c:f6:58:fd:1a:a4:c9:e0:f5:e8:53:7c:c7:1c:e4:
96:59:78:b6:ec:17:d0:49:51:10:1b:ca:81:21:82:
41:9c:e6:c7:c1:50:52:31:68:e9:1d:33:15:31:91:
fc:8b:4c:01:07:eb:7e:8a:b0:5c:5e:02:6b:c7:ac:
de:67:50:4c:82:1a:a1:32:d5:e1:9e:0a:c1:71:38:
da:f0:4b:e0:4d:75:c8:15:12:b9:54:51:6f:d2:bb:
f7:7a:45:47:0d:b2:01:bb:03:ec:ca:19:5d:ab:a1:
d6:e9:ac:3d:f8:e7:70:e8:ff:a9:95:65:76:92:f4:
52:7c:03:95:df:aa:b9:cf:37:97:d1:dd:f7:51:e2:
ca:3a:ec:e3:f3:db:6a:30:b6:76:84:f0:ef:b1:21:
9a:ea:ac:bb:36:d5:11:75:8b:50:53:3d:49:1b:00:
d3:f5:47:78:6b:04:67:fe:8b:c5:a4:ca:c3:20:57:
db:51:4b:cf:31:b9:7e:09:c4:00:d9:09:ac:a9:e5:
0d:e4:17:1a:08:27:83:cb:b6:b7:47:da:0e:e2:4a:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:03:4F:5E:57:B4:AD:68:CF:F6:6F:A3:BF:6D:30:0D:ED:1A:5D:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7e84690e-a89e-3dae-8365-29cde4251cc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:c9:cb:79:a6:01:f7:72:69:48:9b:a5:0c:89:f7:12:c7:bd:
4d:ac:79:b6:68:a7:3c:49:71:16:b1:ab:d6:61:81:61:d9:d9:
81:32:6d:e4:a7:76:3e:e5:26:6e:f3:88:e7:9c:d1:e8:06:d0:
d3:b6:cf:3d:de:01:88:1b:4d:72:ba:33:41:d9:75:35:5c:65:
2b:7b:a4:4d:7a:7f:a7:fa:a5:ed:ec:a0:8b:fb:64:be:36:5f:
8c:0b:7e:87:68:ae:fe:c3:d4:06:66:0f:e4:d3:1e:d3:e3:8c:
82:e6:0f:65:7f:54:b7:3c:72:9f:79:97:dd:c5:9c:9f:9c:fc:
c5:b8:6a:a5:b6:5f:bd:a2:5a:0b:02:90:07:3a:a7:02:55:19:
3e:a6:23:31:6e:58:0b:15:d8:05:72:8a:d4:75:47:4d:f0:22:
20:a4:52:23:84:d1:56:89:ee:3d:a6:8f:96:b5:2c:40:ef:68:
3d:1a:fd:e6:5a:d6:9d:f1:61:43:78:0e:83:8a:5f:ba:39:ba:
e9:dc:10:38:9a:42:da:5c:1e:af:7e:72:15:fe:9c:d3:05:56:
14:3f:d0:3e:88:62:f6:ba:ca:79:74:ab:d9:70:2c:1c:83:fe:
83:43:65:36:53:e5:92:a1:da:21:b9:34:61:2e:84:87:84:35:
cc:9d:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:11 2025 by rpki-client