
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/d4a8d1d0-6799-3faf-a551-2fa890450f17.roa
File: d4a8d1d0-6799-3faf-a551-2fa890450f17.roa (raw, json)
Hash identifier: ++Mwh3I89nuB7YE7osQS9sQ4pKJBLGYdKbokeZDDpbQ=
Subject key identifier: 9D:69:8A:FD:70:0B:5A:D7:6D:74:45:17:6D:D7:10:6D:5B:B6:58:35
Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial: 010D0C9F4328584B72542E3252388E780E0E0580
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/d4a8d1d0-6799-3faf-a551-2fa890450f17.roa
Signing time: Tue 07 Oct 2025 21:19:28 +0000
ROA not before: Tue 07 Oct 2025 21:19:28 +0000
ROA not after: Mon 05 Jan 2026 22:19:28 +0000
asID: 400110
IP address blocks: 184.169.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:72:54:2e:32:52:38:8e:78:0e:0e:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Validity
Not Before: Oct 7 21:19:28 2025 GMT
Not After : Jan 5 22:19:28 2026 GMT
Subject: CN=a9cf9059-283b-4731-9a45-a4c6b4258c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:f2:e9:df:30:18:5c:b3:8e:df:1c:45:f0:
11:91:41:54:d3:39:26:92:f9:25:d4:36:4a:d2:97:
6e:ba:18:76:49:78:bf:64:b9:80:21:66:70:0a:b9:
87:4e:74:43:75:e1:36:fc:43:a1:0b:fc:47:b2:9e:
80:82:f7:dc:35:d9:72:40:fa:5a:a3:d4:3c:31:ab:
bd:ff:56:c1:7e:b0:66:4e:c6:ae:48:22:64:39:b0:
74:f1:68:52:4b:a2:64:66:63:1e:6c:a9:e7:6c:44:
1d:5f:dc:55:a9:d9:89:da:b5:97:7c:5b:67:04:43:
48:06:c3:a9:8a:f8:c4:27:b5:a1:57:3c:b8:80:46:
38:bf:72:d2:ed:83:32:c7:98:f6:dd:76:1d:a4:2c:
65:d0:93:c7:b2:77:4d:4c:b8:4f:30:35:79:07:63:
64:82:2b:94:54:5f:ac:bf:a6:01:37:04:0f:fa:cd:
c8:29:10:ac:72:b8:88:f4:10:b0:10:75:37:09:05:
ae:9e:ce:ea:95:14:9d:4b:16:cc:20:a0:5c:b2:8d:
38:8d:bb:5a:46:14:58:f7:8b:c5:e7:1d:86:32:2f:
cb:74:c4:0e:6b:1d:00:a1:ca:2d:1f:84:fa:89:82:
df:87:f4:1c:7a:8b:dd:b5:14:5e:8b:bf:b2:54:c3:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:8A:FD:70:0B:5A:D7:6D:74:45:17:6D:D7:10:6D:5B:B6:58:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/d4a8d1d0-6799-3faf-a551-2fa890450f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
X509v3 Authority Key Identifier:
keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
sbgp-ipAddrBlock: critical
IPv4:
184.169.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:5a:59:c1:a1:8e:e2:7f:11:b0:e9:f4:d2:fb:73:d7:f7:8d:
b3:e9:79:74:b4:99:69:23:a6:22:04:a4:d7:22:90:35:2e:d3:
0c:f6:a5:3c:3d:d9:da:e5:02:70:7f:d0:c2:93:ac:8d:6e:6f:
c6:ff:c7:6b:66:34:ce:cc:0f:bd:2d:b5:5b:f9:97:88:4c:91:
ae:31:32:9f:43:e2:52:ae:67:3d:8b:5b:e8:65:a6:d3:10:c8:
30:5d:48:1d:25:e0:18:f4:81:82:6d:2e:b2:3e:f3:bd:17:24:
14:8a:25:fb:80:22:7e:45:b6:24:08:a6:2a:7e:ab:b0:96:ed:
92:96:a6:81:db:f0:1e:49:b1:fd:9f:46:5e:ff:04:35:93:5d:
de:a5:87:90:c1:5d:bb:7e:d7:ff:d6:21:67:59:a7:eb:1c:6f:
4d:cf:a3:62:92:06:be:fe:49:d7:10:a2:64:ef:6c:4c:95:13:
28:fa:d1:8a:31:65:c0:b0:16:62:50:22:91:e9:15:f9:74:79:
9f:fa:da:a2:fc:6c:6b:2d:fe:f0:53:b5:89:31:7f:fe:dd:da:
14:d0:de:c7:64:0f:9b:89:4e:be:32:ee:0e:4c:3f:86:08:bb:
51:5e:90:8a:20:67:a3:33:ac:ce:34:0d:17:70:90:87:df:c3:
71:3c:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:20 2025 by rpki-client