
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
File: dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa (raw, json)
Hash identifier: 5d41e+KONQQKHxEQtEtu4lplxNFVEoUgKaIfNlWujq0=
Subject key identifier: AF:E0:BC:57:25:89:BF:46:28:60:A9:C8:91:40:26:F7:E8:58:CD:35
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F4328584BB2F7CFCE87788B3127E943C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 23470
IP address blocks: 104.156.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:cf:ce:87:78:8b:31:27:e9:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=e3ae4ba1-4766-494c-adc2-edb8df19a907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:67:35:83:a9:2c:ad:6a:8d:6e:88:66:8e:
24:28:c5:f2:14:7e:70:3b:e5:52:6a:1f:c8:6e:f5:
3b:c5:29:6c:13:92:f8:24:9a:fa:33:e0:79:92:d2:
e3:dc:ba:a5:bb:7a:d1:d0:37:78:ca:d4:22:ed:d1:
51:8e:81:e6:3c:c0:8e:4e:98:63:f5:65:10:5a:da:
db:05:94:12:c9:bd:47:a1:17:01:97:de:ad:e2:96:
27:0e:ce:f6:17:b8:b8:86:98:06:17:ab:4b:22:4d:
24:82:88:e3:5c:8a:91:52:b3:38:77:b3:67:12:b5:
52:0f:f0:d5:ce:04:bf:79:4c:54:ec:f2:33:06:a0:
48:76:14:cc:17:ec:ee:06:24:cb:0e:8e:04:02:29:
3a:f3:71:17:c9:d4:c3:98:f2:d0:24:7e:e7:98:d8:
9c:00:64:a7:5d:c2:f5:6f:b2:62:d5:c0:d8:f3:38:
29:b4:7f:8c:0c:14:98:b1:f8:6c:22:62:d7:3f:ec:
18:f2:81:59:72:22:1b:53:f8:b5:a5:29:07:c9:14:
1f:c6:55:2d:12:e8:7b:fd:b5:e9:5f:3f:47:ea:59:
80:19:00:92:a3:cb:b4:7b:1c:aa:dc:33:d1:d4:55:
b0:fc:5a:90:fd:13:d6:ce:70:a6:cf:5c:fb:d2:5c:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:BC:57:25:89:BF:46:28:60:A9:C8:91:40:26:F7:E8:58:CD:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:de:53:0c:68:97:e3:5a:25:93:2e:77:e2:46:84:70:66:81:
33:58:eb:00:c3:b6:10:88:9f:db:a8:a1:c7:14:c6:34:20:ed:
6e:49:b1:13:10:61:44:76:89:c6:5f:6e:f7:71:ed:68:b2:c3:
28:c0:c7:63:5d:16:2d:62:08:b5:7f:a8:83:30:b8:d8:cf:f5:
c2:a9:23:62:c6:a4:33:a1:b0:17:85:be:6c:8b:3f:6d:ba:1e:
e1:99:cd:83:ed:c0:12:2e:9e:42:73:c4:c4:a5:d0:2f:a2:23:
f6:96:ce:93:4c:b7:df:4f:9e:08:12:ad:c7:be:31:3d:2a:cf:
ac:5d:37:74:8c:a1:e5:44:d9:19:9b:38:e6:18:8d:b8:c5:e9:
d7:f2:a7:ae:28:0b:b2:37:4f:21:fd:30:29:1a:c0:ba:69:79:
d3:25:cf:6e:5b:a7:6d:44:f0:9b:d3:2e:a3:79:2e:d1:3d:10:
a9:6d:dc:6e:51:5e:3f:12:f5:59:6e:57:bd:39:43:f2:cb:0c:
3a:b0:7c:95:bb:97:16:81:70:13:03:5b:eb:24:89:37:be:11:
3b:ad:d4:ed:cc:70:78:9e:10:ed:94:65:42:44:6f:e1:63:3e:
32:52:05:6e:80:4b:4b:c8:39:b6:7c:2f:8c:72:27:29:00:d7:
cb:50:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:44 2025 by rpki-client