
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/5be2397f-55cb-30f5-b090-986fb9ff0ec0.roa
File: 5be2397f-55cb-30f5-b090-986fb9ff0ec0.roa (raw, json)
Hash identifier: 376UK8vK4QHy24J7RFXJDEVqqG0Dbpr59OB0HIRcReM=
Subject key identifier: 39:D2:1A:4B:D9:6D:4C:72:06:B7:D3:EB:99:0A:F8:0D:3C:62:92:E2
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F4328584BB1B873929BB1352FF8AEE980
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/5be2397f-55cb-30f5-b090-986fb9ff0ec0.roa
Signing time: Thu 30 Oct 2025 14:17:25 +0000
ROA not before: Thu 30 Oct 2025 14:17:25 +0000
ROA not after: Wed 28 Jan 2026 15:17:25 +0000
asID: 205886
IP address blocks: 104.241.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:b8:73:92:9b:b1:35:2f:f8:ae:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Oct 30 14:17:25 2025 GMT
Not After : Jan 28 15:17:25 2026 GMT
Subject: CN=4d60dd27-431a-4feb-9ad8-e13462b62eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:90:f1:be:cc:c4:4c:7f:69:2a:71:03:ad:
bc:ce:2f:a4:a5:29:04:0a:f9:f0:3c:80:c3:39:de:
16:66:d5:80:11:61:05:1f:27:4d:8b:7b:16:d9:2f:
4f:87:b4:cd:ea:b6:4c:72:94:1f:b9:2f:40:58:f1:
45:f0:e3:20:d0:75:56:57:f3:cd:33:da:ed:14:57:
88:a3:7e:57:c2:c9:a5:3b:2a:7a:a4:a7:1e:a6:3b:
63:1d:18:cf:48:be:b3:df:64:12:a5:3d:23:16:82:
47:dc:fd:ac:9f:44:34:ef:34:c3:d9:78:27:e5:bf:
fa:d5:6e:12:8f:55:d5:41:f3:fb:99:51:a2:71:96:
02:84:6b:15:a7:db:31:76:f5:15:0f:1f:04:b3:05:
12:22:b5:d7:c0:0d:9a:c2:bd:2a:9d:ed:fd:a2:ef:
fe:ee:e3:c9:c6:87:6e:b5:60:61:45:ce:ca:e1:f5:
0a:ba:bd:cb:e3:e4:d7:33:00:e7:e2:f0:db:f8:f1:
e3:a0:25:d1:c3:7b:25:07:50:86:f1:e0:25:8a:54:
cb:8d:45:5e:74:8b:29:18:ca:9d:7f:35:08:74:58:
09:96:9d:86:ce:fe:66:be:a0:92:8f:8a:c9:9e:76:
db:6d:1f:55:82:85:6d:3c:63:be:70:ca:16:ed:7e:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:1A:4B:D9:6D:4C:72:06:B7:D3:EB:99:0A:F8:0D:3C:62:92:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/5be2397f-55cb-30f5-b090-986fb9ff0ec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.241.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:b6:c6:5c:a9:eb:b9:b8:8c:17:7c:c3:ed:8d:df:36:6a:f2:
69:40:c8:2d:20:53:2c:4e:83:d0:23:17:34:64:f0:19:06:bb:
46:eb:2f:92:5f:4a:b4:4c:04:d1:b4:fd:40:3f:23:6f:ec:e7:
00:bf:d3:d3:ef:1c:30:89:9a:6a:d5:a0:72:0b:10:32:19:b6:
36:5f:14:89:d7:02:9c:69:74:65:9c:08:2a:03:85:b4:7d:88:
2e:20:d4:50:f2:23:4f:5a:7a:a9:69:6e:06:7e:17:9d:a6:b3:
62:7c:99:8c:1c:56:cb:c5:17:bb:73:51:e3:78:ce:f3:e0:df:
6d:67:43:f0:44:66:ec:44:ec:63:41:45:04:80:33:ae:d6:8d:
bf:3b:e3:b2:36:2b:04:5b:98:e4:2d:9f:d9:94:8a:16:fd:35:
de:c1:72:20:ba:34:0f:dc:fb:3a:c5:7c:19:c9:c2:ac:96:e9:
e5:b8:a9:8d:08:98:6c:36:23:1d:f6:ee:19:d9:9f:85:89:62:
f2:7c:5a:e3:0a:c9:e2:39:44:1e:18:8c:51:24:14:db:5e:ea:
ec:a5:04:9e:71:9c:98:ce:a5:fe:3f:9d:4d:fc:c5:e6:60:37:
a9:f0:11:9b:cf:64:0a:e1:2d:af:80:1f:60:41:c9:1f:24:11:
5b:9f:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:47 2025 by rpki-client