
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa
File: 7c536253-c814-35e2-bf82-bf97bfbe568b.roa (raw, json)
Hash identifier: L69VAKZ6lJP4202p1kYhNxOLjR9tyH3OIf8f8QNZQpU=
Subject key identifier: 2B:81:B8:55:38:11:EB:E0:A7:A5:C9:33:99:85:71:08:FC:0B:0E:2E
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584B1AD1B0C1EC87FB76E8236080
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa
Signing time: Sat 06 Sep 2025 13:00:41 +0000
ROA not before: Sat 06 Sep 2025 13:00:41 +0000
ROA not after: Fri 05 Dec 2025 14:00:41 +0000
asID: 9304
IP address blocks: 107.158.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1a:d1:b0:c1:ec:87:fb:76:e8:23:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 6 13:00:41 2025 GMT
Not After : Dec 5 14:00:41 2025 GMT
Subject: CN=e0c4f476-1a0a-443d-9b08-fd6ad7b74fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:2d:5a:19:fb:dc:c7:f0:ee:72:1c:da:a8:
d8:e3:3e:e2:98:b4:88:70:5f:94:84:42:51:39:04:
49:53:52:1e:2b:ff:1a:2e:e3:69:bf:a9:d4:48:f6:
93:25:b8:ab:f1:fd:06:c0:aa:08:5c:a6:82:11:14:
4b:fb:a8:28:8c:96:4c:98:d4:05:f7:65:7b:43:a1:
d5:fd:53:66:bf:bd:85:f5:21:ca:f6:2b:53:d1:de:
46:8c:d9:ed:a4:f6:03:ca:89:05:6f:c8:dd:5e:56:
96:f4:a0:b9:5f:47:ab:f0:f3:c3:d0:e7:ed:5b:94:
b8:8c:0c:94:7c:f3:0d:79:05:c5:95:fc:0e:a5:0d:
32:9a:e6:84:e8:86:60:7c:c6:95:bf:fa:dd:0b:cf:
28:9f:54:5b:36:93:de:bd:18:10:ce:5c:c1:22:5d:
f9:e1:24:0b:5d:82:dd:ec:73:99:f8:87:0c:63:25:
b5:f3:72:90:d2:68:b3:5a:db:48:e9:5a:45:87:eb:
bc:7d:a5:10:79:9e:7b:f0:c4:69:c9:b0:36:53:96:
c0:01:24:04:66:5b:bf:b2:3e:48:bc:b5:5e:b2:3a:
92:f1:91:48:74:00:21:d0:6a:d6:53:39:02:d2:9d:
5e:24:5e:51:e3:ee:ac:58:b7:99:01:12:25:03:35:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:B8:55:38:11:EB:E0:A7:A5:C9:33:99:85:71:08:FC:0B:0E:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
107.158.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b8:f7:70:01:c2:44:6b:97:93:4e:20:35:d3:a5:59:96:05:
e3:e2:0e:31:7c:45:e0:d6:65:b1:41:08:22:6d:71:48:cc:88:
1e:ec:dc:42:dc:05:29:78:d2:6b:ed:be:f9:68:ea:e7:48:48:
d3:e7:2a:1a:b0:ca:eb:81:5f:bf:92:b6:70:77:bd:4e:0d:5e:
30:25:9d:b3:03:88:9d:ae:17:d5:ad:23:ab:99:24:76:a1:ab:
f7:23:e1:fe:86:a2:34:cd:18:63:92:3b:67:24:fb:ed:27:e7:
26:82:49:90:9f:ab:11:63:dc:41:93:2c:69:d7:85:72:70:af:
e2:65:30:8e:f3:fa:53:59:7c:b5:44:66:eb:ed:3c:3b:eb:72:
51:25:90:cd:1b:59:18:23:da:81:6f:cb:f1:4c:0a:75:7a:4d:
6e:64:f0:98:e5:4f:89:42:8c:e0:41:e4:1f:43:eb:52:bc:53:
b1:c2:38:b0:92:76:a5:57:5b:fc:2f:f4:73:08:a1:e3:9d:2e:
92:4b:a1:13:e2:62:f7:69:b2:2f:8b:af:c7:2b:e1:b0:37:d2:
92:fa:f0:1d:9b:78:5f:84:29:dd:e5:fd:66:a8:33:16:dc:b5:
24:53:53:7b:d7:69:a1:f8:3f:77:79:c0:ce:b3:3b:9b:34:09:
2e:61:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:19:29 2025 by rpki-client