
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/0831fca7-c103-3db5-927b-de05e0f518ba.roa
File: 0831fca7-c103-3db5-927b-de05e0f518ba.roa (raw, json)
Hash identifier: jsm5xPlmJuMoDIb+RVU5VacBj5tQmnEAuEFAzU8Ktys=
Subject key identifier: AC:41:03:3F:77:EA:52:D0:4A:CE:89:61:D5:FE:85:44:9B:50:93:3B
Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial: 010D0C9F4328584B6D35A8B50418101CBC3A0580
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/0831fca7-c103-3db5-927b-de05e0f518ba.roa
Signing time: Mon 06 Oct 2025 01:18:56 +0000
ROA not before: Mon 06 Oct 2025 01:18:56 +0000
ROA not after: Sun 04 Jan 2026 02:18:56 +0000
asID: 19318
IP address blocks: 104.251.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6d:35:a8:b5:04:18:10:1c:bc:3a:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Validity
Not Before: Oct 6 01:18:56 2025 GMT
Not After : Jan 4 02:18:56 2026 GMT
Subject: CN=27828795-ed8a-4752-87a7-343c22a9afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:52:42:fa:18:05:65:9a:d7:b2:03:d9:16:
30:bc:b3:8e:37:b9:82:40:0a:9c:34:be:9d:6a:49:
d2:92:fe:ff:e0:5d:d1:a1:fe:37:3c:48:e4:10:73:
85:a5:52:c6:da:f9:cc:aa:6f:5d:f0:e5:2e:e4:24:
dd:fb:7e:1c:69:5a:03:7b:3a:5a:8d:93:d0:dd:7f:
0f:cc:48:76:43:c4:7f:4e:ff:c3:d5:aa:53:5c:d2:
9d:6f:83:dd:15:4b:f8:b0:c3:8e:db:ac:80:d1:4c:
e9:60:5e:7d:92:15:c9:0c:28:74:aa:06:8b:92:d6:
22:2f:1a:33:f7:7f:a2:bf:6a:4f:84:42:94:d7:cf:
23:b1:27:b6:25:ba:99:d1:ad:e5:ff:ce:6d:d2:4d:
36:0a:bf:cf:94:56:4d:c6:2d:79:cb:1d:f4:86:09:
ae:d4:ac:30:eb:e0:b9:c4:01:32:6d:2f:b0:57:7d:
b9:c2:d0:da:61:90:b8:32:c1:2b:c2:b2:90:7a:a7:
10:cf:05:36:78:24:0a:0a:6f:9a:62:8a:43:d5:b2:
5a:64:9d:7b:d8:8e:a8:c1:b0:f4:9d:fe:b9:a4:12:
46:6c:2a:ab:66:ab:d7:9e:33:43:3d:6a:a0:24:6b:
81:eb:05:e7:03:6a:d4:a7:fe:3d:d2:3e:ed:3d:94:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:03:3F:77:EA:52:D0:4A:CE:89:61:D5:FE:85:44:9B:50:93:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/0831fca7-c103-3db5-927b-de05e0f518ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
X509v3 Authority Key Identifier:
keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ef:18:95:84:df:f3:41:c1:74:19:c4:05:cd:a9:62:fb:2a:
02:ba:f5:55:b8:b4:2f:7d:d9:7a:be:40:ee:0f:c4:9d:61:ac:
69:7f:09:2a:cb:da:0f:13:15:aa:29:78:23:7f:39:11:3b:6f:
ea:c9:9d:28:dd:51:1b:b9:f2:9d:2d:5d:4c:e8:6d:55:1a:50:
b0:72:bd:c9:8f:ed:c0:ef:cb:9e:37:6e:a6:9f:9f:7f:54:06:
0f:31:29:c9:83:1d:30:eb:93:19:9d:f8:a1:01:95:79:d1:78:
c1:c3:c6:87:3b:fa:92:6d:4c:21:75:43:c4:94:4e:8c:9b:e1:
8a:d4:ee:6c:f7:ed:73:69:88:e9:04:7d:2f:6f:cb:ac:8e:02:
aa:7c:d7:4c:f9:27:e6:1d:8b:69:df:59:9d:14:0d:c0:77:82:
8b:24:b8:bb:bb:7b:71:16:c5:3f:11:48:02:d8:d9:38:d6:54:
47:45:87:e8:6f:09:c2:0c:04:0b:18:14:ba:e4:99:ce:1d:e8:
d7:f9:48:26:f1:22:2a:07:b4:f8:51:e0:25:bc:99:9a:32:03:
86:b4:1f:0c:20:37:1a:19:12:2a:f9:f1:4c:a0:6d:23:54:fe:
d5:2c:02:b2:29:79:31:e9:fe:49:d7:82:20:a3:fd:69:c4:99:
73:3a:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:46 2025 by rpki-client