
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7fd3d387-a498-35bf-9104-fe1ee5c69cef.roa
File: 7fd3d387-a498-35bf-9104-fe1ee5c69cef.roa (raw, json)
Hash identifier: ZKMXD7JcTSkfTj/0CyhscJh8K+km9nC8DgLPZD5xxAw=
Subject key identifier: 3E:10:99:F6:95:D9:2B:8F:34:DB:F6:D3:28:52:85:40:CD:05:70:B5
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584BBFA599DB62A8B178F6E2A840
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7fd3d387-a498-35bf-9104-fe1ee5c69cef.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 399150
IP address blocks: 52.128.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:99:db:62:a8:b1:78:f6:e2:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=525f3dfc-0f88-497a-866f-437a1239a496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:a3:7b:f2:c7:3a:5d:1e:57:10:f0:69:18:
3c:bf:88:03:da:0e:06:8d:3a:14:0d:36:69:9f:7c:
7e:29:1e:03:67:72:c8:d7:44:87:ca:de:7b:c6:74:
0d:e2:1e:c0:8e:09:03:2c:5e:43:2c:90:ad:d5:3e:
5c:fb:7b:a7:d7:ae:7b:35:e7:56:04:1d:eb:46:18:
1f:93:0d:69:65:50:6f:21:09:09:66:52:48:d9:b4:
91:19:98:e7:d1:2b:59:c4:8e:06:a2:ff:ae:59:70:
13:1e:c0:18:76:2d:cc:44:10:d0:93:95:ea:6e:8a:
7d:2f:6b:79:f2:6f:8a:82:5e:5a:54:d6:73:52:6d:
81:3f:91:83:00:e7:d9:69:c6:3c:d6:b2:ca:6a:79:
f2:a6:36:92:49:ad:e2:ba:32:a8:c8:e3:e0:ed:88:
cd:92:96:ce:e1:98:c2:59:51:84:87:d2:f9:bc:93:
b1:2b:5d:9a:18:6d:6f:79:19:2c:c9:de:5b:5f:8b:
d2:b5:ee:68:a4:7e:56:2c:3f:31:5d:54:90:91:aa:
72:35:50:28:5b:85:9f:f5:e0:02:60:84:50:30:61:
50:62:45:6b:9b:6e:37:c7:a3:49:3d:9c:05:02:81:
39:56:d6:4b:91:99:93:00:84:70:56:f2:79:5e:bc:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:99:F6:95:D9:2B:8F:34:DB:F6:D3:28:52:85:40:CD:05:70:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7fd3d387-a498-35bf-9104-fe1ee5c69cef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:60:fb:94:b6:89:23:c5:81:76:04:57:27:5b:6a:a0:86:56:
ae:6c:d8:98:9b:21:ae:a4:c4:f7:b0:61:04:2f:93:1e:d4:d5:
d3:d0:7c:89:90:a5:5c:6f:67:4a:b3:0f:24:4f:e3:94:4a:f4:
98:60:bb:33:bf:bf:b2:3b:c0:67:01:12:95:1f:d7:23:b9:54:
20:d3:b3:e1:c3:85:a4:4a:95:87:24:0f:d7:32:91:30:e6:de:
20:4e:ed:83:b8:4a:9b:ba:7b:8d:e9:5d:95:a2:2b:ae:8d:a3:
b1:4f:1f:89:c4:87:58:aa:88:40:a5:8c:9b:a3:fe:b1:c8:2c:
a1:c6:2b:d9:1b:fb:82:71:46:7c:3f:35:95:be:c9:6a:ed:a0:
8a:09:c6:75:e6:de:32:c6:1a:44:9a:ad:db:59:8b:d5:ce:b7:
ea:40:33:a6:30:5c:e6:48:c4:3f:09:9c:af:7d:5b:ae:6e:96:
dd:56:40:17:68:17:52:1e:22:b8:61:0d:86:99:42:ab:d8:f5:
8f:2e:b2:c7:04:c4:6a:f4:e9:e0:9d:38:33:b6:86:b4:7c:2d:
cb:7f:1b:56:4f:dd:45:63:11:2c:cd:53:f3:64:ae:c3:cc:42:
0e:4d:6c:3b:bf:69:38:47:f9:99:2d:8a:da:76:86:6e:c6:03:
76:68:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:22:17 2025 by rpki-client