
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
File: c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa (raw, json)
Hash identifier: E8rBxD0TneNr1WyllzeTnT7aVLY12eGsCt1BPOMoDjI=
Subject key identifier: 65:25:38:61:C0:07:A4:8F:3B:CD:C9:15:77:38:21:46:6B:80:CA:DC
Certificate issuer: /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial: 010D0C9F4328584BB5C254EB49EE6381C6BD7500
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
Signing time: Sat 01 Nov 2025 01:00:30 +0000
ROA not before: Sat 01 Nov 2025 01:00:30 +0000
ROA not after: Fri 30 Jan 2026 02:00:30 +0000
asID: 17034
IP address blocks: 103.229.152.0/23 maxlen: 23
103.229.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b5:c2:54:eb:49:ee:63:81:c6:bd:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Validity
Not Before: Nov 1 01:00:30 2025 GMT
Not After : Jan 30 02:00:30 2026 GMT
Subject: CN=3df9be66-d964-46ba-885a-1280107f40d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:bf:f5:01:b9:95:30:36:0b:44:35:4d:01:
8b:63:f8:d2:11:a6:6e:5a:0b:a1:78:e5:27:3c:f2:
a3:b9:33:44:2b:d1:81:92:12:6f:3e:b0:f3:35:86:
a4:e3:b9:b8:4d:cb:08:03:f4:b6:94:ae:3f:5d:ff:
93:90:c4:d4:9d:59:36:3e:5f:a0:df:a8:2c:f5:48:
b2:c5:98:90:c3:5c:67:0c:ac:9a:9d:ee:7f:db:fe:
ba:4b:80:bd:5b:fd:87:cf:9f:44:e9:c0:dc:e8:46:
7b:59:09:2c:ee:88:9a:de:33:d3:71:84:43:28:19:
1d:cc:34:93:3c:d1:d4:e2:9a:5f:28:dd:29:44:09:
a9:26:7e:9c:2f:3b:73:f3:d8:c3:eb:92:bb:51:eb:
ae:2b:1f:96:da:93:04:f6:43:c1:4a:cf:a5:41:fd:
17:41:36:65:8a:8a:52:85:33:2e:2a:bc:dd:b5:8c:
f9:4f:4a:25:fb:d3:0e:4c:db:5f:fa:d4:14:95:3a:
c0:85:21:52:6c:ad:ed:69:4c:44:d1:02:6f:10:5d:
0f:52:87:4a:ab:cf:c7:87:48:d2:49:2a:9d:aa:cb:
64:d7:11:c9:a6:3e:0e:65:4c:cc:ac:64:59:d0:75:
5c:15:2e:86:7e:d3:98:20:3d:91:91:2e:ff:60:f1:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:38:61:C0:07:A4:8F:3B:CD:C9:15:77:38:21:46:6B:80:CA:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/c8054479-3e6f-3af4-bb95-91e755f0ca5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
X509v3 Authority Key Identifier:
keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
sbgp-ipAddrBlock: critical
IPv4:
103.229.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:b7:27:c2:18:d4:1b:b9:d3:f3:05:5d:5a:1e:38:32:06:f7:
ed:9e:78:f4:94:0e:62:a0:c5:51:6d:90:f9:88:bb:54:66:87:
67:6c:cf:e8:9e:40:b1:3f:79:8a:13:99:85:ed:7c:d6:58:44:
72:a9:c1:ab:01:de:23:6d:f3:6b:15:42:94:28:7f:37:70:fe:
52:25:7f:0f:fa:c0:89:55:dd:04:7d:fa:4c:93:9e:e9:60:9b:
d8:e7:fd:c8:94:e9:d0:20:3d:cd:58:a4:56:84:72:4d:79:c7:
8f:f6:58:fb:48:dc:8c:bc:1c:83:86:28:b0:b4:4b:96:ba:65:
13:e7:dd:8f:d5:99:8b:78:f6:fc:10:0d:0d:ca:b8:f3:a9:11:
98:90:c3:00:6d:62:94:5c:4b:3d:6d:2d:92:d5:bb:53:c7:20:
0c:4a:31:b0:99:79:27:57:b9:e9:69:c8:88:b6:b0:a4:19:0d:
e2:59:6e:92:d8:50:f1:df:a3:6e:57:4f:6d:eb:1f:97:d6:01:
dc:eb:11:0f:f4:d1:d1:8e:41:10:21:b1:90:01:e4:6a:ce:68:
06:87:c0:91:52:e4:40:a0:99:e4:bc:32:8a:bd:94:25:23:80:
37:4a:93:68:82:2c:6c:49:b1:1d:f3:4c:b3:6e:86:1b:e1:e9:
f9:10:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:56 2025 by rpki-client