
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa
File: 4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa (raw, json)
Hash identifier: kb5iFexTmp/RcL3eAZDkeySCermea6VSd3eGp0Bdc5c=
Subject key identifier: 25:8A:28:E4:85:4F:36:E2:66:53:99:F9:40:0F:16:C0:38:74:32:D7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584AF2568902A19E1C0340BDF380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa
Signing time: Sat 23 Aug 2025 01:00:33 +0000
ROA not before: Sat 23 Aug 2025 01:00:33 +0000
ROA not after: Fri 21 Nov 2025 02:00:33 +0000
asID: 16625
IP address blocks: 104.66.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f2:56:89:02:a1:9e:1c:03:40:bd:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 23 01:00:33 2025 GMT
Not After : Nov 21 02:00:33 2025 GMT
Subject: CN=31d56a38-e721-4f74-b325-30f290628c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:36:75:e7:fb:d1:ba:16:c6:f9:37:4f:35:
58:12:65:97:73:58:da:d8:c7:2a:71:94:b9:8a:11:
57:92:18:1c:db:49:2e:41:b5:61:e6:68:0a:0e:51:
88:5f:a0:3b:e4:24:f4:05:f3:45:ba:10:4b:8a:47:
22:6a:1a:75:67:8e:1d:86:b4:97:17:c0:c5:03:f5:
75:9d:c3:2f:05:57:18:1c:09:c1:d3:f3:b4:60:ca:
87:18:61:3f:50:d4:f4:98:d2:94:a7:b9:c3:86:42:
b9:5a:72:2f:5b:44:5c:0a:e5:43:47:f6:f7:1b:f9:
9e:ee:6b:ef:d9:b3:1e:68:b3:2c:17:2e:9c:db:54:
c0:e0:6f:65:00:02:38:25:46:37:f6:45:71:9e:b9:
5b:b4:90:60:a5:e1:7b:b9:f0:26:a5:24:d9:b1:c4:
1e:73:fb:1d:ca:e6:2f:de:04:3e:9f:dc:56:c1:c6:
fd:08:ce:28:a0:63:84:2b:04:87:b2:21:e4:14:31:
e9:b0:56:18:34:0c:4b:ab:36:56:c1:69:ee:a8:c9:
ef:e8:7e:3f:8f:32:b7:7b:3c:19:67:ec:4c:15:dc:
4e:0a:48:ad:dc:87:58:98:a8:01:f2:8a:8f:40:8c:
29:ce:22:16:41:f3:ef:23:b0:c2:35:2c:4f:4d:ad:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8A:28:E4:85:4F:36:E2:66:53:99:F9:40:0F:16:C0:38:74:32:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.66.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:09:09:63:eb:c1:23:80:0f:9b:a1:a8:72:18:8b:45:02:a4:
ba:6e:e6:d0:2c:09:48:5a:a9:32:b4:74:6b:2f:20:82:e1:3e:
21:84:ff:bc:34:ec:f8:cb:fb:8b:1f:d1:93:13:35:d6:81:ac:
b8:b9:33:78:20:96:27:dd:e2:c8:99:32:59:50:11:21:38:d7:
56:5b:01:37:fe:ef:92:90:7b:a6:86:30:25:ea:d4:b8:71:aa:
cd:bf:ad:d4:8a:a3:23:8d:50:ba:6c:5a:f3:77:98:15:02:ab:
03:c3:b3:ca:46:a8:b9:34:4d:18:d9:d5:46:1b:61:86:bb:7a:
4e:d9:1d:20:e7:48:19:04:bf:a6:ce:af:3a:36:bd:ec:43:36:
74:32:1b:bb:d5:a1:a2:72:61:fb:7c:32:ac:37:b9:ca:d4:fe:
de:86:a7:b3:19:65:e2:30:80:65:77:42:1e:48:32:3a:ac:b4:
c2:bc:19:63:a2:4b:8f:35:63:c1:5d:cf:f4:39:73:f8:75:0f:
2b:b2:53:87:2a:26:00:41:3a:95:a2:50:c2:3b:f8:18:4b:cb:
da:40:c7:05:26:43:57:3b:e4:11:36:f1:14:6e:39:a9:9f:1c:
5b:8e:f6:9c:87:5d:aa:fd:a2:dc:cf:32:78:aa:b2:ee:95:af:
61:15:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:17:15 2025 by rpki-client