
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa
File: 3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa (raw, json)
Hash identifier: jSaz660330yeDGYH9LqlgRltKp1QuXqVtS7uhZK170E=
Subject key identifier: D7:9C:A0:E2:93:6F:74:34:FC:AA:34:31:CD:65:7C:71:A8:7B:B1:5B
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584BABFD01B498D1B54BE5751A80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 20454
IP address blocks: 104.254.232.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:01:b4:98:d1:b5:4b:e5:75:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=2e4523f5-ceb5-4e0f-9cbe-5af84b4d8f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:18:f4:f3:6f:d9:bd:74:26:38:3a:f6:6b:
13:22:f3:48:f4:ab:f1:7f:02:b7:95:ba:ab:4b:e4:
2e:0d:70:7b:0b:38:8d:d0:bb:99:d8:27:46:1e:b9:
a7:c2:8e:ac:f6:48:06:a6:30:9d:ff:f1:54:c9:6c:
37:ef:10:98:10:5e:7e:46:ee:8e:5b:80:8c:50:ed:
db:26:23:9d:e7:be:19:17:fd:bb:fb:3a:6d:c9:51:
0b:19:3b:50:1a:db:d2:ac:ec:e3:58:25:cc:91:b5:
8c:db:33:9d:07:18:d4:e5:d7:c2:55:db:76:63:c4:
3c:19:79:37:49:7b:72:a3:54:1c:b8:f3:d5:ae:30:
55:8f:84:8e:04:de:6c:0b:95:ad:03:70:c8:b2:f4:
cd:0b:2d:f2:34:4a:f6:bd:a9:a5:24:05:66:c7:43:
a0:86:3c:5c:17:1c:d5:c6:10:a8:ef:0a:33:5e:f5:
d2:ad:76:4b:d1:bc:33:77:97:93:66:2b:a5:18:9d:
73:33:36:14:15:ac:fc:7b:fa:86:97:d7:07:ae:5d:
a1:b1:2b:4b:eb:ff:ee:7b:4a:1c:eb:f6:90:d9:12:
ba:58:03:77:be:9b:24:ad:e8:6a:3d:5c:cd:8d:3f:
aa:db:72:f1:85:87:4b:40:c4:35:8b:92:09:31:11:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:A0:E2:93:6F:74:34:FC:AA:34:31:CD:65:7C:71:A8:7B:B1:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:5d:8e:3a:fd:03:41:15:5f:89:aa:18:31:0c:bd:2e:b1:28:
40:fc:a9:87:35:62:a9:f7:bd:60:39:10:ac:eb:58:5f:21:81:
05:44:8a:7c:68:3e:b2:32:da:30:1f:28:38:27:72:3a:1a:37:
61:11:80:31:7d:8c:30:ee:0c:89:8e:88:ee:52:98:2f:3c:4b:
42:31:e3:77:9c:26:fd:37:79:a4:0b:1f:e0:51:f2:05:10:ff:
99:bc:17:14:9d:d8:d9:07:c2:b5:f5:82:2f:af:aa:48:47:87:
78:e7:05:de:56:85:12:e6:17:8c:46:b5:70:8e:c2:89:cb:72:
cf:5c:31:19:db:7f:de:ed:82:e5:10:f2:b6:1f:dc:97:b4:09:
23:76:1a:81:7e:70:f6:3d:b6:08:6d:76:07:56:a9:2d:a1:25:
0b:2e:d8:ab:a4:e7:32:17:1c:d3:06:7d:42:43:ff:d5:26:75:
a2:d2:75:e2:b9:3d:9f:d8:d2:87:6b:f3:ae:87:97:63:b8:76:
1f:d7:78:ba:51:ca:bd:87:59:2c:fe:0a:7f:17:56:5b:08:20:
cd:1d:58:8e:2d:37:34:37:c1:8a:a2:82:d4:fa:cd:f4:dd:41:
91:d4:a9:a0:16:f8:ea:70:78:d5:51:2d:04:d3:c4:9c:e4:9f:
9f:08:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:45 2025 by rpki-client