
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa
File: 9d2999d7-a1bb-3446-acf4-a09d095fef48.roa (raw, json)
Hash identifier: Q/lKfMa+zJ6OYRrF4tOaVLd2XgCDVDtItWvgGsBLfVQ=
Subject key identifier: C1:D0:CD:B9:E5:76:74:8E:77:C2:87:1C:75:75:76:85:F7:2B:B7:BE
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584BABFD05542397873DE8FBD480
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 19437
IP address blocks: 104.254.238.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:05:54:23:97:87:3d:e8:fb:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=d85a339f-e898-4d91-af39-9b6433c69dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:8b:bd:cc:dc:5e:a4:3e:be:f3:db:06:69:
49:b5:bb:dd:e9:95:68:20:25:20:31:8c:f0:5e:1e:
4e:aa:77:6b:33:48:b4:4a:80:2d:2a:67:28:26:4d:
1e:40:b6:85:45:5b:04:46:38:8b:95:6d:30:15:f6:
fa:94:e7:09:f3:84:f0:47:3a:b6:b5:c6:5e:a9:d0:
1e:03:e3:ca:c3:63:86:7c:07:f7:c0:ae:ee:c1:47:
ef:46:fe:e3:cf:4a:08:a3:30:a3:45:9f:4e:c8:ef:
b6:56:4b:69:cd:10:e4:bf:35:ab:b0:16:50:0d:8a:
52:45:4c:f0:a9:e8:64:0f:36:96:95:52:6c:25:2d:
fb:b7:8b:7b:5c:91:75:c7:c1:2b:26:70:8a:4b:eb:
f5:2e:f6:cb:b0:10:f1:7e:40:0f:45:fd:b7:62:b0:
d1:2c:9c:a9:a6:66:d9:ca:47:2f:0f:40:02:da:f1:
77:e7:2e:3c:aa:dc:9f:ff:87:da:b0:44:42:48:ea:
f5:9c:73:20:ce:13:e3:a1:e1:3f:65:66:02:de:98:
fd:18:f8:b5:71:6b:45:65:6c:81:ad:5b:5c:c9:ee:
ea:8c:e8:92:7e:7b:16:3b:a9:1b:1a:52:b0:85:d5:
6a:1a:08:6e:2d:fc:20:8b:0a:1d:00:03:66:3f:89:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D0:CD:B9:E5:76:74:8E:77:C2:87:1C:75:75:76:85:F7:2B:B7:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:fe:a1:c4:f1:57:cc:49:11:fd:db:5d:0f:0f:f8:2a:f8:01:
19:f9:a6:25:1d:a9:2a:26:97:21:f2:94:4e:d8:a9:28:fb:e8:
fe:6b:41:f4:27:9e:5a:9d:4a:19:e8:a3:cc:f9:c3:72:bf:f9:
26:ca:cc:ca:11:0e:88:3c:04:3a:26:bb:6c:6f:13:9d:16:51:
39:9f:c0:8f:b8:e2:b0:92:6b:ff:60:d3:e1:fa:fc:d0:4e:63:
e6:07:44:47:b1:6a:95:22:c1:78:a6:2b:44:ec:d6:1a:ba:e8:
41:e7:7a:fe:23:d8:b9:f9:87:69:b5:0d:9a:24:25:49:71:80:
7f:40:20:a1:c8:9b:6d:e0:1d:3f:8b:8b:61:f6:44:e1:4d:d2:
28:9f:98:62:c0:71:6c:ce:79:13:da:25:21:c6:01:38:a8:66:
b8:ea:a4:2d:22:ef:e7:63:ea:74:2e:d3:62:70:c7:3d:7e:9a:
fd:83:07:cd:9b:5e:4f:09:da:5d:bb:a5:eb:d3:6f:96:ec:c2:
45:f2:d5:96:22:87:5b:3c:c1:36:9a:df:f1:01:e7:32:01:da:
e1:25:0e:01:00:ce:97:fb:bf:ab:e8:83:07:a7:bc:19:58:43:
8f:ef:e9:d6:58:72:2c:98:c6:10:1b:03:61:90:51:8b:e3:fd:
84:a9:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:23 2025 by rpki-client