
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b29a24a9-f3cb-3666-a03a-98a211db7994.roa
File: b29a24a9-f3cb-3666-a03a-98a211db7994.roa (raw, json)
Hash identifier: MV6mL8w6y/UXiaaE6THYDeLYBp39xH8eOFECLbGKje0=
Subject key identifier: F0:2E:6B:59:7B:79:22:D6:93:C5:F0:93:BD:0F:48:BC:06:6C:AC:FD
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584BBA105CFB61D7BD10B8073BA2
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b29a24a9-f3cb-3666-a03a-98a211db7994.roa
Signing time: Sun 02 Nov 2025 14:00:38 +0000
ROA not before: Sun 02 Nov 2025 14:00:38 +0000
ROA not after: Sat 31 Jan 2026 14:00:38 +0000
asID: 395793
IP address blocks: 104.206.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ba:10:5c:fb:61:d7:bd:10:b8:07:3b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Nov 2 14:00:38 2025 GMT
Not After : Jan 31 14:00:38 2026 GMT
Subject: CN=7fbf4c4a-2f70-4944-a36b-e776db602dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:1c:eb:a5:39:9f:86:11:ce:d7:c4:e7:16:
c1:0c:c8:b0:dd:d2:c1:7a:b9:c2:66:46:f8:f2:2e:
97:a5:84:1d:ea:b3:3e:57:a3:bf:3a:ae:53:91:60:
2c:ae:91:35:ba:3b:a8:17:b2:df:ed:44:f4:67:8b:
cf:aa:e0:51:17:15:00:ad:51:0a:bc:f7:cf:8d:83:
0a:3a:23:79:97:96:fd:79:a4:86:2c:1a:bd:b1:37:
1e:30:0d:6d:49:9e:91:f9:6e:71:bb:96:f7:dc:0a:
e3:c6:7a:26:ba:17:8d:3f:6e:cf:ea:6f:81:92:15:
b0:8a:dc:93:34:dc:de:9f:41:7f:74:f4:4d:cb:44:
f2:df:96:40:8b:0f:9a:21:db:7e:b1:81:c3:52:89:
40:ec:9a:fa:08:71:a5:1c:c7:d1:db:07:20:ca:e3:
fc:e7:86:c9:6b:e4:01:5c:85:01:78:2e:ba:16:a8:
c8:2c:22:ae:d2:c6:02:f8:ef:97:3b:5d:00:b4:84:
af:12:2c:10:0b:97:d3:c8:31:14:b5:24:2a:4e:2c:
8d:0c:67:98:c8:2a:c1:8b:13:8f:dd:09:67:00:6d:
8b:18:e1:c4:e1:7f:90:bb:53:a4:92:96:eb:4f:00:
f5:be:9d:bc:44:81:ed:09:9e:28:9c:ba:95:3c:74:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2E:6B:59:7B:79:22:D6:93:C5:F0:93:BD:0F:48:BC:06:6C:AC:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b29a24a9-f3cb-3666-a03a-98a211db7994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
104.206.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:1d:a7:43:74:03:2b:d7:a0:d1:11:34:b3:75:4f:19:c5:a8:
3e:14:fc:a8:4b:c1:94:69:d0:f3:d2:20:48:3b:b9:7d:c5:e5:
66:39:a8:53:36:d8:89:d4:f4:ce:16:08:e8:99:28:eb:4b:af:
b9:ab:e4:7c:f2:00:1a:ce:5a:65:37:c3:f0:a5:7a:40:df:d8:
6b:c9:97:a4:63:c8:02:34:e5:7b:29:c7:0b:21:cc:90:2b:34:
c6:91:5d:16:76:1c:36:a9:7a:5f:e6:07:22:41:e5:05:55:ca:
a0:13:d6:f1:cb:c4:12:90:94:1a:fe:72:f3:72:27:f2:58:ab:
23:3d:8d:02:21:d0:dd:40:10:cc:a2:1e:37:51:32:76:e8:ac:
06:e4:fa:74:72:6b:17:4d:fd:cc:14:a6:cf:49:05:d2:6d:37:
f1:48:f3:af:b3:57:57:a5:16:54:84:54:f1:35:d7:75:7b:19:
8f:03:8f:bb:e9:49:86:b3:d0:a6:44:e1:62:39:53:ef:c2:7e:
5c:76:e5:7f:49:9b:ac:a1:fc:3d:ea:71:e9:bf:43:23:7d:82:
a4:13:39:c2:cc:6c:5c:cb:be:fa:d8:14:69:c7:f7:25:4a:52:
e6:8c:51:9e:d7:de:02:54:15:14:c3:28:e2:b7:a8:34:f8:dc:
b7:0d:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:20 2025 by rpki-client