
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
File: d1c12072-6c1b-3b2a-b15f-9a20316659df.roa (raw, json)
Hash identifier: 87Z/6pvXhKy4cIAX7aXh2GCH6iYboEuN5I5Xfsd1wjc=
Subject key identifier: 85:AE:32:F2:CE:6E:1D:26:8F:9F:BF:52:A7:EF:92:94:61:B6:62:F5
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584BB2F7A909B8E0083BA79F38F0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 20454
IP address blocks: 23.235.244.0/24 maxlen: 32
23.235.245.0/24 maxlen: 32
23.235.246.0/24 maxlen: 32
23.235.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:a9:09:b8:e0:08:3b:a7:9f:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=3ae26098-46dd-4bdf-b77d-c9e1a410bba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:01:44:80:fd:c5:25:c0:be:43:2c:e0:be:
d9:0b:8d:3e:09:cf:e8:8a:6c:86:bf:a2:8b:ae:cf:
f9:df:7d:97:10:22:c8:12:59:86:65:d9:a2:25:44:
df:d1:09:71:e0:a5:b4:3f:5a:05:17:ae:0d:dd:1a:
df:e3:d0:ad:9b:1b:72:f9:d7:a2:b6:fa:82:e5:92:
43:46:64:7b:75:29:e8:95:63:2f:4e:3b:33:9b:c6:
c1:08:25:42:ce:7b:31:50:4f:15:81:5b:bf:02:21:
c7:53:5a:07:94:2b:be:d9:7d:74:43:f7:4a:39:32:
8f:d7:b4:d9:21:f9:3a:ec:85:c6:2e:82:d3:f1:86:
4e:0e:74:83:04:da:d5:da:d9:bb:e9:ff:16:d4:89:
66:58:29:9b:ed:61:46:0e:c7:1a:a4:51:22:44:87:
45:07:cf:41:e3:99:14:3b:61:49:83:bd:5a:01:de:
5a:f8:e4:db:8a:f1:26:87:b4:a5:18:44:0b:b5:b1:
cb:90:63:93:60:33:1f:85:79:a9:9d:0a:a2:89:03:
38:1d:42:1e:54:88:67:64:93:99:74:25:e8:55:0d:
36:cb:05:9a:22:0c:9a:d4:5b:90:af:9d:bc:55:7b:
3a:6f:ca:ad:3c:b9:6b:38:64:12:f2:f4:40:9d:b8:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:32:F2:CE:6E:1D:26:8F:9F:BF:52:A7:EF:92:94:61:B6:62:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.244.0-23.235.246.255
23.235.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d0:a3:7e:80:cf:68:cc:3b:a9:5a:da:1a:5b:4d:85:bc:bd:
f8:11:9f:1d:b3:08:e7:57:4c:a8:69:3e:9c:78:dc:44:c7:1a:
52:26:5e:15:52:a8:64:81:80:46:23:6c:0c:96:e5:d5:71:d7:
03:7e:a4:d8:9f:0d:c0:76:91:c4:4c:1b:55:1d:c6:4a:95:bc:
da:7c:5b:26:99:4e:a4:62:42:26:6b:d6:0c:ea:b2:5d:83:a7:
15:87:93:36:ee:99:ad:7b:71:bb:8c:da:ea:97:a6:9a:3b:b7:
fa:db:d5:ee:c7:95:1b:58:3b:64:25:50:c5:f5:87:da:e0:5d:
bf:30:56:86:28:1b:8e:af:f2:67:47:66:be:31:b2:6e:a5:21:
2d:5c:ee:7c:a8:41:cd:88:88:5b:ec:0a:8c:85:75:39:0e:f0:
0a:10:a6:a2:72:d6:a6:20:fc:66:48:0b:f7:63:a6:59:15:5d:
eb:76:b5:9b:3e:c5:50:b6:04:7a:f0:75:d5:62:76:ef:52:c6:
f5:9f:95:f3:32:c0:12:97:27:af:4b:f8:53:18:39:58:55:4a:
8e:0b:33:83:72:d7:1b:93:ab:50:fd:1d:9d:ba:ea:09:33:7e:
a3:d2:e9:f1:ad:c1:17:17:59:18:be:8f:6e:9a:ab:b7:c2:42:
4c:ef:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:58:32 2025 by rpki-client