
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa
File: 39dd6475-e512-3d33-a668-8df455daedf3.roa (raw, json)
Hash identifier: 6K+H5pidIZ2wPbYRvS2nz9mIvAMKtaeiz5YV3UH7frU=
Subject key identifier: 76:A8:AF:AB:3F:1F:C5:45:5B:2A:71:11:24:29:69:10:BA:99:63:70
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F4328584B2A2C2D44DFAA179B9EAF4D00
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa
Signing time: Fri 12 Sep 2025 01:00:32 +0000
ROA not before: Fri 12 Sep 2025 01:00:32 +0000
ROA not after: Thu 11 Dec 2025 02:00:32 +0000
asID: 46841
IP address blocks: 104.153.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2a:2c:2d:44:df:aa:17:9b:9e:af:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Sep 12 01:00:32 2025 GMT
Not After : Dec 11 02:00:32 2025 GMT
Subject: CN=bd120f40-3d88-4457-b4e9-13eb46744c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:f3:fd:72:9b:db:d8:02:71:74:5f:39:18:
23:be:4a:86:2b:50:63:17:64:b0:b6:30:f8:c0:cf:
8f:cb:97:dc:30:d8:d2:64:18:b4:6c:6c:ca:9d:a3:
b9:47:54:d7:0a:a4:ea:c3:40:a1:be:28:aa:f6:02:
00:c8:9c:28:9e:5d:15:fb:bf:41:7b:77:85:87:ec:
54:93:de:65:a6:60:dc:4c:05:ea:d7:28:25:1a:b6:
29:ce:a7:80:ab:ef:f7:64:1d:0f:33:b7:35:7f:e1:
cf:38:c3:0b:cb:db:e9:c4:91:2b:d6:e0:1d:1a:b0:
8d:84:8b:fa:a7:bf:de:63:50:cf:4a:3d:5f:f1:b1:
1f:37:44:1c:d8:70:f6:f8:37:15:41:b1:32:f8:7a:
95:a6:74:ae:57:7d:db:58:e7:b5:89:54:53:1f:5c:
13:6c:91:0a:15:13:8d:44:9f:c6:1f:d7:06:83:74:
e4:f2:4a:2a:9d:25:6d:55:1f:99:96:34:06:9f:c0:
56:f4:8b:38:db:a1:97:49:7c:6f:43:65:54:a3:19:
54:e5:80:16:7c:94:59:71:0e:e2:67:8c:f4:f2:c7:
4c:97:a3:0b:e3:88:ea:f0:2b:ac:5e:a1:9e:99:db:
58:2c:8b:21:ac:ff:d4:dd:fb:96:4f:42:87:1f:0e:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A8:AF:AB:3F:1F:C5:45:5B:2A:71:11:24:29:69:10:BA:99:63:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:0a:da:0f:c4:c9:fd:27:9b:e9:2f:aa:15:86:64:95:45:e4:
70:81:80:30:ed:bf:fb:61:ca:9a:37:80:25:65:ec:6d:7a:32:
dc:41:3b:2f:62:58:cc:5b:2b:05:b3:96:e4:df:10:fd:00:4e:
77:a6:b1:d9:6a:9a:36:c6:2d:7b:a1:75:5b:3d:af:b7:e6:a1:
45:eb:3a:7d:bf:e2:78:f0:68:1d:79:7a:34:b3:b4:53:40:49:
c9:25:96:39:1c:ae:a3:5b:92:d0:77:dd:31:fa:54:d6:b7:70:
59:16:85:9f:9b:a8:a0:3d:02:92:a3:a1:8c:f3:c2:38:59:6d:
a8:04:e6:34:8b:33:68:8d:7c:3b:00:22:91:52:67:94:b2:b2:
b4:32:34:eb:0e:76:1f:de:45:9a:3a:d5:a8:73:4e:da:07:a8:
60:42:77:7e:4f:a4:32:28:1a:44:5d:fb:49:b7:fc:0c:3a:ac:
4e:e8:b8:3e:5b:45:d2:c8:7b:4a:96:dd:e1:c8:81:20:f9:a8:
08:88:f3:4d:6d:18:f9:23:d6:0b:4d:99:e8:d4:49:13:84:b2:
19:ad:b5:34:a1:e2:8e:0d:cb:3a:38:84:fa:98:9c:1c:41:d3:
71:48:fd:34:78:a0:ec:85:40:18:cb:6a:1c:cb:6a:85:48:ee:
6e:67:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:17:11 2025 by rpki-client