
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa
File: 4df36641-222d-32f6-a628-9d7a11fed67f.roa (raw, json)
Hash identifier: LJjv9dBHRHe3SIzxPaiHwhXZCzIcB1g0S7MjFkE9O4Y=
Subject key identifier: F5:CB:F9:EE:D9:8D:07:D6:22:9E:68:2F:5B:3D:3F:3A:BA:44:90:32
Certificate issuer: /CN=4051554a-224d-4a2b-8646-85ee8bbdb883
Certificate serial: 010D0C9F4328584BBE47DF4296FDF99E8E9429C0
Authority key identifier: 7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa
Signing time: Tue 04 Nov 2025 02:16:06 +0000
ROA not before: Tue 04 Nov 2025 02:16:06 +0000
ROA not after: Mon 02 Feb 2026 02:16:06 +0000
asID: 8095
IP address blocks: 204.128.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:47:df:42:96:fd:f9:9e:8e:94:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4051554a-224d-4a2b-8646-85ee8bbdb883
Validity
Not Before: Nov 4 02:16:06 2025 GMT
Not After : Feb 2 02:16:06 2026 GMT
Subject: CN=db57b4f1-8732-40eb-844c-4fb6b4861131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:5d:48:de:a4:5c:61:18:75:9f:5b:8e:19:
4c:1c:bf:08:1d:a4:b9:48:c8:db:a5:e7:d2:ab:00:
bc:6e:f4:0a:a9:d8:27:be:4a:7d:e4:ed:97:6a:9f:
96:52:c7:88:d5:43:91:a0:1f:b4:06:fc:4d:33:26:
99:8c:14:76:e0:dc:81:f4:3a:02:96:86:4d:8e:f8:
e1:6c:14:33:c7:1b:c5:0d:ad:54:5d:c1:3c:59:62:
5c:00:b2:dc:f3:3a:2f:79:e2:11:80:3d:82:33:35:
76:a0:25:88:35:c2:f1:af:16:39:a3:b3:9f:21:a9:
63:9d:34:77:c8:42:dc:d7:8c:4b:7f:95:5d:62:1a:
11:10:37:a4:30:b4:58:b4:ce:52:16:c7:0c:df:75:
c8:c2:55:0b:b3:72:ad:02:a1:a8:c8:60:32:33:c1:
cb:79:b1:86:a2:9b:25:5d:8b:b8:0c:45:81:33:49:
ec:8f:bf:16:3a:84:24:98:89:26:e8:35:56:52:19:
f1:d6:13:79:86:fa:50:1e:56:ef:f9:cd:34:1c:93:
b0:01:61:e8:53:99:91:b3:48:d5:03:c7:f1:7c:2b:
5c:b9:ea:a2:7e:f1:f8:4e:2b:a3:7e:5b:98:71:bb:
1e:b5:7c:ac:70:a6:2e:36:05:8b:26:18:65:56:d0:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:F9:EE:D9:8D:07:D6:22:9E:68:2F:5B:3D:3F:3A:BA:44:90:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.crl
X509v3 Authority Key Identifier:
keyid:7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer
sbgp-ipAddrBlock: critical
IPv4:
204.128.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:26:6a:1e:3e:0e:1c:44:15:2c:92:e9:3f:4a:9e:e0:2f:e6:
bb:0b:7e:2d:08:88:30:fc:9a:77:4b:b2:63:93:6a:b8:89:fe:
6f:a4:87:df:92:e2:59:56:54:3b:7d:c3:8b:82:b9:b2:9e:8f:
f4:62:99:48:47:40:7d:57:30:3c:38:c4:57:bc:8d:ab:52:10:
4a:33:2a:6b:28:9f:62:d2:30:58:67:c7:94:23:cb:35:62:8a:
73:bf:91:06:ca:1c:d7:5a:d6:38:92:e5:38:4c:01:1c:6a:64:
d8:89:52:35:a0:63:30:56:bb:d4:ff:48:9d:69:ba:19:a4:60:
72:96:f9:f4:10:49:09:5a:49:5b:ff:18:fc:a3:db:88:44:c4:
81:e6:43:c2:b4:e0:ea:4d:35:7c:0a:30:e3:1b:22:e3:1d:21:
61:a3:f4:61:ed:88:16:b2:65:96:7d:a9:ae:0b:86:d4:77:b0:
d9:c0:43:5e:9e:4e:f2:2c:4d:67:45:50:10:33:44:eb:83:0d:
b1:43:f3:85:c7:bb:49:6a:7d:77:23:9e:fa:53:5e:9c:45:68:
f7:58:0f:9a:7c:09:d5:bd:1e:4d:ac:a1:de:f0:9b:6a:80:75:
8f:98:86:ba:92:b6:58:bd:70:25:c7:52:55:12:eb:a7:51:90:
36:86:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:07:28 2025 by rpki-client