
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/0dbec04b-d175-331c-a6a6-e5546fa84660.roa
File: 0dbec04b-d175-331c-a6a6-e5546fa84660.roa (raw, json)
Hash identifier: NiBTCaJxKWcyzhPRUlObdx7Y+0wDcWj79RzRGDl0fSA=
Subject key identifier: 13:0D:47:2F:F5:FE:32:65:C3:FE:C4:5E:03:6C:ED:42:C0:03:3A:37
Certificate issuer: /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15
Certificate serial: 010D0C9F4328584BA6679E0EBEB6715C11C6A400
Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/0dbec04b-d175-331c-a6a6-e5546fa84660.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 16509
IP address blocks: 104.171.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:9e:0e:be:b6:71:5c:11:c6:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=589c411a-e10e-41bc-aa3e-14eb876f3cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:2f:a1:77:fc:f1:21:1e:ad:23:16:2e:c7:
08:a7:04:b3:3b:85:55:04:eb:8d:81:3c:bf:bf:3c:
bb:1c:a0:29:c8:a5:02:7f:52:a5:cc:15:17:b3:ee:
68:31:e7:b5:db:8f:f5:e2:24:c2:bd:42:7b:b4:b7:
a2:68:2c:a1:64:d3:87:bc:9e:d6:d0:ca:61:ef:23:
df:ed:20:e1:a9:87:75:15:79:7e:2e:0e:d2:59:6f:
d0:4a:e6:73:c5:4b:9d:84:2e:f9:8e:87:e4:0c:1e:
0c:f7:af:53:cc:ed:1c:1a:72:18:65:af:6e:88:b9:
ff:f1:da:59:5f:c5:fe:7a:a3:1d:09:ce:9b:50:06:
da:32:73:3e:98:cf:2e:fe:89:62:d9:d4:80:17:e6:
31:71:0b:27:31:49:be:b9:ca:4a:c1:11:da:5c:78:
06:92:7f:b1:4e:6a:33:33:17:ff:6a:29:20:34:27:
47:e6:33:0c:b0:42:75:48:60:e5:5b:7b:f6:78:e7:
fd:4a:b3:55:e8:ec:58:d6:eb:4f:55:eb:34:36:ae:
e5:2c:ee:fe:3b:cb:b9:d5:45:97:95:58:ca:c7:45:
bd:10:65:f2:75:ae:9f:29:5e:10:86:a5:34:f8:73:
e9:19:a8:57:42:ca:55:4c:3f:81:f2:6d:92:c9:de:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:47:2F:F5:FE:32:65:C3:FE:C4:5E:03:6C:ED:42:C0:03:3A:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/0dbec04b-d175-331c-a6a6-e5546fa84660.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl
X509v3 Authority Key Identifier:
keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:94:9d:cc:f4:8e:8a:52:e8:84:c7:14:36:65:2c:80:9a:8d:
d4:8c:b7:5c:5d:b4:cc:2d:9b:16:38:02:b3:4c:6e:62:49:5b:
55:ea:3b:c3:ce:d3:1a:bd:50:49:8a:dd:9c:32:e5:2f:40:8e:
9e:e0:e9:7c:8a:97:b9:0f:57:0a:3d:5f:3b:f8:0d:0e:f4:f0:
ca:8d:a5:34:f2:f2:8b:c7:33:c1:e5:db:7b:a8:55:1c:1c:b0:
58:a5:90:af:72:4d:51:9a:18:69:c9:e6:fe:0c:55:86:72:3b:
51:76:2a:4c:be:bc:f8:8c:cd:c0:e0:6e:8d:dd:d8:dc:d7:42:
68:00:48:14:d2:28:72:2f:7d:30:5d:53:8d:b6:49:84:c1:0d:
f8:7e:96:a4:5d:60:3b:82:00:41:b9:68:31:00:33:50:ae:6b:
f2:e1:2d:8a:46:54:cb:6a:82:2b:57:98:6c:1b:b5:3f:10:a3:
20:2c:56:9f:97:84:b4:56:71:08:5f:56:1a:3f:20:bb:f2:74:
b2:f1:c0:ad:0c:59:e9:b6:b3:fb:f2:d1:2f:e5:f2:aa:13:8e:
c0:c9:65:9b:69:18:73:fd:2a:fa:05:90:46:ce:5f:1a:fb:df:
1f:47:57:1f:2c:d3:b6:bb:67:a3:52:68:f8:ea:4a:e3:34:76:
4b:7d:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:16 2025 by rpki-client