
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa
File: fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa (raw, json)
Hash identifier: rva+Ej/NqGr1uvTh3KiCreCmQcG+9kAtSL86+tdQgFo=
Subject key identifier: 44:0F:81:14:1A:17:01:00:95:90:B2:91:91:66:59:5D:D9:B1:B9:2D
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584B970CD2F43B74616C92F112C0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 14618
IP address blocks: 52.129.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:d2:f4:3b:74:61:6c:92:f1:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=dbe8be06-836a-46dc-8334-a4d2b30999b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:b1:9a:02:f6:5d:74:dd:6b:bb:73:8d:ce:
36:a2:7f:3d:53:ef:9d:de:90:ec:4c:49:3f:4f:59:
75:51:78:d6:02:ba:0e:75:4e:86:b4:cf:dc:cc:e2:
51:4f:2b:ae:92:fd:93:8c:04:c4:fa:5a:e7:bb:a7:
ad:6f:9e:05:21:29:90:1b:0d:56:87:74:79:14:6b:
07:41:e4:43:09:51:e7:62:9d:15:2c:d8:3b:46:3f:
6b:da:fa:5c:b2:2d:60:20:74:49:ef:46:21:c0:0f:
d9:16:0f:7d:8c:89:de:46:77:f4:3b:53:ed:ae:bd:
95:84:2d:22:d3:50:f8:2d:1f:f9:d8:5d:29:7c:b2:
59:51:fe:bc:a8:b3:89:4d:b1:a0:1b:10:88:5e:44:
74:d9:60:76:bb:23:ef:21:7f:b5:71:61:43:7b:4c:
e1:07:1d:7e:2c:07:4e:97:ad:f6:fa:b1:46:16:4c:
b4:c6:65:cc:1f:1f:90:d7:99:ab:9c:05:1c:84:46:
07:74:40:01:9b:de:67:6c:68:6e:65:3e:d1:f2:d5:
47:8f:46:b6:b9:7a:81:45:52:5b:0e:eb:85:16:54:
ac:cf:55:87:25:a7:a6:a0:3d:7d:b7:69:0c:a5:4a:
3d:71:a2:ef:31:d6:6c:ea:c3:ec:f4:22:a4:c2:1b:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:81:14:1A:17:01:00:95:90:B2:91:91:66:59:5D:D9:B1:B9:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f4:7b:f7:5e:0c:40:15:4b:4b:f3:3b:57:a5:d6:d6:b1:11:
fc:2f:2b:72:fc:a7:f6:37:ff:9c:9e:49:01:e8:be:a5:44:fe:
43:98:bb:59:c3:ef:9f:0b:53:22:a7:90:eb:b3:ad:94:af:94:
65:b5:a2:e1:bc:7e:70:b1:91:46:71:32:ce:b2:74:ee:9c:5e:
3d:de:83:b9:a2:76:47:53:c2:52:7a:ea:d1:d9:8a:cb:1c:e6:
5e:aa:c4:33:27:de:03:0e:3b:37:63:1c:71:cc:6f:00:48:29:
b2:3d:59:9f:fa:e0:9e:56:45:e8:65:a9:1b:e4:9b:f9:eb:ad:
4c:d3:b8:da:e5:62:b5:a6:f8:04:e0:1a:d1:cc:dc:b8:13:ac:
ba:54:4a:1d:6f:84:9e:6b:ae:fc:0b:b6:ad:92:b5:f1:2c:0c:
a1:c7:86:c7:de:bd:3f:88:01:b0:c1:2d:3a:2b:c0:af:e5:44:
21:e1:11:c9:fb:f5:65:85:0d:9b:ed:cd:86:f0:7f:63:58:8c:
9b:06:d5:e5:fa:a8:51:c9:a2:3a:18:4a:6d:f4:62:fb:b2:93:
d8:8b:f2:e9:28:fc:0b:8e:fa:b6:75:42:1c:92:8d:ae:ff:9c:
b6:3e:d1:2e:76:0d:64:ad:27:1d:64:04:ab:a4:87:34:01:87:
f3:b9:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:22 2025 by rpki-client