
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa
File: 6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa (raw, json)
Hash identifier: BQ/2YXcAX5QW79/wAXyaNop6nyCzKfvz4UE0loeQFw4=
Subject key identifier: 2A:68:F0:7A:0F:06:7A:C7:C9:29:83:BC:33:7A:9C:5F:2A:63:F3:98
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584B970CD9A4C17677B2C04EC800
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 14618
IP address blocks: 52.129.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:d9:a4:c1:76:77:b2:c0:4e:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=dfe6da97-8f43-47bd-bada-e545914abb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:0d:8a:cc:5e:a9:10:4a:52:35:5b:2a:81:
4c:40:49:7a:8f:e2:8c:f9:be:1d:0c:85:6f:93:6f:
57:73:78:1a:c5:72:84:b6:59:0d:5c:30:86:cb:a0:
da:e2:73:c6:74:c2:ac:79:96:06:67:ee:28:97:d9:
79:1a:23:41:14:eb:bb:af:79:a8:36:f5:6e:be:51:
4d:63:f8:61:e8:ca:81:23:b3:ed:df:47:0f:64:1a:
81:e4:16:09:d0:c1:6f:e1:6e:18:e6:49:f6:c7:85:
96:34:d9:b5:94:85:3e:c4:6e:0d:5d:c8:af:cd:63:
56:f5:db:88:b7:a7:47:5d:f8:b8:31:ab:71:1f:2d:
14:4c:dc:60:97:76:f0:3e:ae:3c:5e:37:10:a7:9c:
ba:4f:4a:57:97:b3:26:09:1c:c8:51:ca:b7:bc:0f:
bd:d3:1c:e9:da:f4:79:b9:87:07:20:04:a2:fb:1b:
6c:3f:40:b8:9f:72:09:5b:9a:a5:8b:bd:5b:3d:8e:
ea:f6:3b:13:4a:1a:39:4c:3a:bf:44:ab:d0:04:c1:
7a:9b:9b:67:0d:59:27:fa:d7:4e:01:ac:7c:bb:03:
ff:24:9e:e7:2e:2a:88:53:96:3e:09:51:07:99:62:
fa:94:5c:fb:df:25:12:a5:05:89:33:9e:74:5a:b3:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:F0:7A:0F:06:7A:C7:C9:29:83:BC:33:7A:9C:5F:2A:63:F3:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:95:33:87:6b:61:89:37:d0:0d:1a:98:35:5c:0d:12:8b:63:
0b:71:d2:c6:f3:b6:5b:b7:ed:60:69:cd:1d:4f:26:ff:19:5d:
28:f5:a4:70:6b:d7:1b:6c:a0:f7:64:f6:8d:ed:c8:de:b7:4a:
e9:fc:09:61:10:03:0b:e9:ef:f9:49:76:9f:6d:75:f1:ca:58:
d3:83:b1:b0:5c:42:cc:72:b1:86:be:c3:20:0d:7b:9b:c6:40:
db:75:22:35:af:3a:2f:dd:2f:cd:8e:48:97:e9:26:e9:1c:96:
12:f8:76:e7:7f:6a:32:8c:70:e8:f4:2d:50:99:fd:42:f4:8e:
e8:9f:3e:78:cd:76:6b:10:76:d8:b6:62:37:80:0a:4f:2a:e6:
dd:a3:3e:fa:d0:e1:4f:31:f4:5f:1d:fd:90:2a:51:50:80:ce:
0c:a8:63:33:91:58:42:1a:c3:ed:91:76:24:5a:f5:4d:71:fe:
f6:1a:a8:5a:0c:bf:30:95:6d:e7:46:71:d3:18:bb:0c:ae:08:
dd:e0:5b:d0:e8:11:24:ce:e3:2e:62:b6:93:bf:36:19:cf:99:
ab:c3:79:d7:07:8b:ea:31:ba:9b:cc:80:d3:a0:60:16:ba:2c:
b8:62:d9:6f:30:a3:ef:92:a5:53:57:9c:25:c7:33:48:b1:68:
0f:8a:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:37:05 2025 by rpki-client