
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa
File: 9ccdb945-7edc-31b8-8022-dda37f616533.roa (raw, json)
Hash identifier: JUtUuyhcg2dMUgmr0/88K4JB0Tw0p/LIj6Is8T0ShkI=
Subject key identifier: 8F:B9:6F:0C:C9:2E:93:DE:D7:C9:71:54:AF:A5:6E:EF:81:DD:DE:A9
Certificate issuer: /CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Certificate serial: 010D0C9F4328584CD485957CC7EF911D941B6904
Authority key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa
Signing time: Mon 15 Dec 2025 02:00:31 +0000
ROA not before: Mon 15 Dec 2025 02:00:31 +0000
ROA not after: Sun 15 Mar 2026 01:00:31 +0000
asID: 27501
IP address blocks: 64.72.96.0/20 maxlen: 24
64.250.224.0/19 maxlen: 24
74.113.216.0/21 maxlen: 24
103.25.144.0/22 maxlen: 24
103.78.160.0/22 maxlen: 24
103.85.232.0/22 maxlen: 24
148.170.64.0/19 maxlen: 24
199.88.32.0/20 maxlen: 24
199.88.48.0/22 maxlen: 24
199.127.116.0/22 maxlen: 24
208.95.108.0/22 maxlen: 24
209.51.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:85:95:7c:c7:ef:91:1d:94:1b:69:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Validity
Not Before: Dec 15 02:00:31 2025 GMT
Not After : Mar 15 01:00:31 2026 GMT
Subject: CN=0b035f06-554f-496c-88f2-7702dc22809f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:9b:e6:e2:c4:7d:b3:17:51:95:a9:27:f7:
79:fe:8b:b9:44:79:34:3e:cb:73:2d:5f:e4:19:aa:
c7:32:60:50:6e:2a:25:f0:52:74:43:c4:b9:26:de:
24:27:36:56:1e:04:b7:ff:ff:9c:ee:48:8d:d8:8f:
25:dd:44:a3:ad:d0:c2:96:4e:25:a7:e6:5b:2d:7b:
35:d2:15:46:aa:cb:49:65:da:93:37:ff:7d:82:12:
f8:2f:5a:cf:ee:b4:b3:b6:2c:94:09:75:67:4d:de:
0a:0f:ec:3c:37:4f:6e:9e:2e:f3:c4:c7:3e:c3:a0:
0f:78:17:ca:fb:cd:8f:b0:19:2f:a3:8f:34:a5:c2:
07:e1:fd:6e:a1:7c:50:4b:4b:26:16:51:4f:05:21:
b9:56:e9:ab:01:6f:a9:95:d1:b6:ea:82:ac:ec:a3:
d2:1d:0b:a0:3e:1a:c3:68:ad:45:7a:0e:38:96:e4:
bd:ad:fe:2c:c3:b6:a6:75:32:1a:2d:49:dc:a9:d3:
6a:d3:80:f7:15:c5:89:6f:9c:3e:3c:77:e9:f7:0b:
b9:7c:e1:d3:7d:89:73:6c:b4:84:f6:a7:5e:1d:c9:
39:46:b9:7e:81:2c:d3:f3:f4:8f:09:80:fd:1b:7e:
6f:34:6b:94:99:dd:c9:da:94:a7:db:0f:45:6a:48:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B9:6F:0C:C9:2E:93:DE:D7:C9:71:54:AF:A5:6E:EF:81:DD:DE:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
X509v3 Authority Key Identifier:
keyid:F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.96.0/20
64.250.224.0/19
74.113.216.0/21
103.25.144.0/22
103.78.160.0/22
103.85.232.0/22
148.170.64.0/19
199.88.32.0-199.88.51.255
199.127.116.0/22
208.95.108.0/22
209.51.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:dd:aa:e0:90:bf:a0:a4:fc:31:b3:ae:4e:2a:7c:60:c2:35:
42:36:20:4f:01:e3:b0:28:86:07:1f:d6:27:59:05:b7:b3:4a:
1f:87:c8:1c:72:b9:81:93:d9:73:1f:d8:df:2c:1d:12:0f:2a:
d0:be:f1:a2:e4:c6:86:e1:27:37:a6:c2:2a:c2:22:82:fb:d5:
9c:cd:01:3a:b5:ab:f4:a4:2b:80:55:bb:a2:cc:39:fb:df:48:
7f:2a:ad:d1:78:73:65:3a:b2:ef:74:a4:49:78:4f:72:aa:c8:
06:c5:0e:4a:5c:d6:bf:8e:75:63:35:ef:71:70:99:0b:7d:b0:
dc:c8:8e:40:63:95:ed:a3:09:9d:09:05:1b:d4:0e:3b:d2:b2:
29:3b:75:21:fa:ab:c6:be:7d:1b:0b:2e:5f:f3:6e:07:af:da:
65:68:b6:ed:b6:99:6c:a8:f0:23:9c:46:0a:20:70:f0:8c:67:
a5:5b:3e:65:2d:c3:e5:8f:a5:69:36:a2:7e:33:ae:85:2b:b7:
24:69:0e:fd:9e:57:83:28:e4:03:00:47:d0:1d:15:7a:e7:96:
02:30:ab:b3:e8:03:6e:32:04:54:e9:89:4d:a8:53:c1:2a:74:
40:3b:ae:94:ca:84:fd:b6:6b:b5:40:70:aa:57:9c:7d:84:d7:
57:6d:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:40 2026 by rpki-client