
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45e10203-2dc5-35f1-bf65-9d467fa2f19b.roa
File: 45e10203-2dc5-35f1-bf65-9d467fa2f19b.roa (raw, json)
Hash identifier: IJYpjrUeBuckzd/DSxSg3w/8njZMh0IfS/lz77lk9eo=
Subject key identifier: 4C:F9:C9:C4:51:54:F0:D7:EE:71:78:42:08:A7:03:42:10:46:67:49
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328584B95AB02BC352350A906E93D80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45e10203-2dc5-35f1-bf65-9d467fa2f19b.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 40950
IP address blocks: 209.178.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:ab:02:bc:35:23:50:a9:06:e9:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=2f77f45e-21c3-4f36-8bb5-433818f1576a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:13:a7:61:14:36:15:03:18:be:2c:80:d1:
c5:7c:aa:e9:03:85:61:39:1b:91:00:87:7b:c8:c4:
e5:69:1e:f9:6e:a9:e0:a4:96:4f:ca:7a:6e:0c:2e:
87:ec:b8:60:01:73:b2:fb:13:0d:a2:23:85:e4:07:
56:25:3c:e4:21:3f:e1:fa:d3:51:29:14:8f:ba:02:
41:f4:3f:8b:0f:2a:1f:76:8a:d5:ba:6f:1f:e2:6a:
7f:01:24:46:ae:26:30:06:99:5b:d0:57:39:5d:5e:
cd:ef:5f:2b:33:14:a3:b9:ee:49:cb:54:8e:67:8e:
57:ee:27:c4:aa:0b:71:b7:b0:c7:a3:07:88:d3:91:
4d:73:57:f7:ec:f7:18:50:35:28:de:23:19:fe:89:
4e:fe:54:45:20:6a:fd:02:0f:a0:9a:80:9d:58:b9:
73:38:7a:78:bd:23:e3:d4:ba:86:41:ad:56:58:5b:
23:24:0a:ac:e5:84:d7:cf:a9:8b:d0:ef:8b:bf:37:
f6:5a:64:d6:9f:7c:46:ed:b5:9d:ce:dd:00:ea:29:
fb:66:6b:03:a8:d2:92:c9:25:6e:12:50:92:05:58:
45:49:31:b1:46:25:38:89:f4:ca:79:78:cd:a9:b4:
1c:3b:91:5b:11:2e:bd:77:e7:c2:54:cd:67:05:58:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:C9:C4:51:54:F0:D7:EE:71:78:42:08:A7:03:42:10:46:67:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45e10203-2dc5-35f1-bf65-9d467fa2f19b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:77:d2:07:69:e8:70:b6:47:75:0f:8b:73:f4:dd:25:c0:44:
41:72:3a:5c:4e:c3:0a:ad:72:d6:12:89:28:be:8c:d8:a1:5a:
bf:cb:fc:53:8b:41:46:35:46:75:41:30:a7:25:1a:43:9a:75:
22:f6:c8:51:ac:3b:fc:5c:0c:fa:46:a3:f9:0c:0c:f6:88:a7:
a3:23:01:98:31:03:be:6c:b7:2d:5e:39:5d:95:c4:dc:a2:4f:
b1:d9:a8:59:94:22:08:96:cb:bb:43:94:df:25:ce:9c:14:85:
f3:b8:1c:a5:77:7e:65:b8:a7:72:42:85:af:f3:c0:19:90:3c:
e1:a9:69:38:09:4f:39:1c:c7:fd:c2:45:16:c8:14:cf:39:7f:
8a:74:22:f7:dc:bb:25:22:1e:e5:16:a5:ff:e8:66:65:31:48:
de:89:b5:4d:27:6c:44:18:11:58:2b:a9:07:b4:79:e7:0b:eb:
5f:4c:f3:9e:a6:47:16:dc:98:84:a6:b8:01:9a:8b:86:52:f0:
35:34:48:b6:c3:e6:66:5a:43:f7:1c:6d:65:ba:54:ea:2a:5c:
6b:0b:9a:b9:4d:64:17:82:08:6b:2e:3a:a0:6f:3a:23:8f:b6:
7b:c0:06:91:3f:e5:43:70:6e:9d:5c:de:86:22:d1:2d:d9:04:
97:32:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:30:21 2025 by rpki-client