
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
File: f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa (raw, json)
Hash identifier: IoY6X044Udms4pxb2seMV3FivLDGzGgZ08UJOOgoXwY=
Subject key identifier: CD:D8:F7:8E:65:DA:BE:6A:70:2E:B5:51:AA:8A:FD:3D:E3:BE:0E:B8
Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial: 010D0C9F4328584B2761720A2B66F4A3C61B3470
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
Signing time: Thu 11 Sep 2025 01:00:33 +0000
ROA not before: Thu 11 Sep 2025 01:00:33 +0000
ROA not after: Wed 10 Dec 2025 02:00:33 +0000
asID: 210110
IP address blocks: 23.105.192.0/19 maxlen: 24
23.106.128.0/19 maxlen: 24
23.252.96.0/20 maxlen: 24
45.62.96.0/19 maxlen: 24
45.78.0.0/18 maxlen: 24
66.112.208.0/20 maxlen: 24
67.209.176.0/20 maxlen: 24
74.121.148.0/22 maxlen: 24
104.128.80.0/20 maxlen: 24
104.160.32.0/20 maxlen: 24
104.194.64.0/19 maxlen: 24
104.224.128.0/18 maxlen: 24
107.182.176.0/20 maxlen: 24
138.128.192.0/19 maxlen: 24
144.168.56.0/21 maxlen: 24
162.211.224.0/21 maxlen: 24
192.243.112.0/20 maxlen: 24
198.35.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:27:61:72:0a:2b:66:f4:a3:c6:1b:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
Validity
Not Before: Sep 11 01:00:33 2025 GMT
Not After : Dec 10 02:00:33 2025 GMT
Subject: CN=3ba1db40-5fb8-44e8-8c81-29851cc1339f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:ec:5c:c6:05:09:4b:15:d0:1c:4c:00:01:
82:81:17:b5:2f:1d:6a:c2:ed:69:28:77:6a:f9:62:
0c:15:3b:43:ff:1b:f3:56:cd:5f:c3:92:7e:d9:4c:
5a:73:e6:aa:bd:de:79:18:57:78:42:c4:dc:a6:fb:
9c:4e:16:3f:c3:7d:15:f5:f0:ff:d0:38:ae:ad:fd:
ae:2b:74:b7:7c:f6:54:dc:14:81:19:6c:33:3e:5c:
3d:2b:11:50:ff:f0:61:25:76:64:3d:f5:0f:37:d2:
0e:3d:be:5a:dd:13:39:d3:70:d1:92:a2:cd:d5:ac:
b1:03:a6:f8:ea:0b:e0:58:96:33:0b:d9:c9:db:9d:
3f:ca:a5:7c:97:43:72:51:95:d0:d2:40:76:ca:12:
c9:59:e6:04:47:2a:c3:6e:e2:99:4c:f9:40:7d:60:
27:dd:74:82:83:48:02:3c:72:b7:6c:f0:74:0b:6d:
96:84:7e:18:65:07:71:c1:43:a0:41:be:ce:6f:16:
a5:52:26:51:e8:fc:44:87:91:91:1f:fa:62:b2:fb:
71:a6:5e:cf:e0:e0:a7:18:be:db:ab:3c:9b:98:26:
d1:1e:7a:6a:80:85:b2:10:5d:d0:4b:94:71:ae:3a:
c6:31:c3:0f:df:55:7f:74:cf:1d:74:f8:f1:77:3d:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:F7:8E:65:DA:BE:6A:70:2E:B5:51:AA:8A:FD:3D:E3:BE:0E:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
X509v3 Authority Key Identifier:
keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
sbgp-ipAddrBlock: critical
IPv4:
23.105.192.0/19
23.106.128.0/19
23.252.96.0/20
45.62.96.0/19
45.78.0.0/18
66.112.208.0/20
67.209.176.0/20
74.121.148.0/22
104.128.80.0/20
104.160.32.0/20
104.194.64.0/19
104.224.128.0/18
107.182.176.0/20
138.128.192.0/19
144.168.56.0/21
162.211.224.0/21
192.243.112.0/20
198.35.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e7:5e:4d:de:b1:c1:54:13:94:cc:fa:a3:52:0f:8e:e5:a8:
2e:04:b1:07:b3:f4:b7:96:1c:55:d9:0b:80:8f:45:ed:30:66:
d9:2b:24:88:e2:bf:ad:35:cc:24:a2:5f:02:21:4a:a6:6b:70:
9f:12:be:d4:63:74:3f:4c:4e:04:e8:53:1d:73:20:8a:4a:ff:
07:29:9a:ab:5c:87:bd:78:91:d8:15:b3:c7:c0:61:9c:41:7d:
27:96:21:c7:e6:0b:c5:19:53:35:27:69:1e:4d:4f:51:ce:6e:
8a:ac:f2:2a:05:37:ea:ef:77:65:ae:6e:54:6d:87:cb:29:bb:
01:7e:83:c9:55:c1:79:a8:cb:6d:74:b2:c5:c2:e3:3b:4e:08:
0f:1b:19:9f:63:c0:a5:17:f5:cf:c5:97:92:31:66:1b:cc:0c:
83:79:8d:64:29:4b:59:de:de:ac:b2:25:d0:93:2d:d4:5e:72:
6c:a1:e8:dc:0b:1c:ae:f3:a3:e0:95:b4:87:7e:2c:ae:da:a1:
49:37:45:b2:2e:1c:7e:bd:1a:08:65:7a:8e:3d:e7:06:68:7a:
3a:80:79:31:59:3b:42:7f:05:93:82:9b:44:6b:4b:87:e1:f5:
77:9e:5f:89:1a:5c:a9:3e:42:38:52:21:60:91:a4:be:bd:0b:
e4:5d:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:25:52 2025 by rpki-client