
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
File: 29d5e091-9446-3719-ad71-bce2ae8ab71c.roa (raw, json)
Hash identifier: rgIXg6QvEFWZJMhuVQGIaGrVBMPpZaLluikCbpMbp8k=
Subject key identifier: F4:26:24:94:8D:40:68:BD:BE:71:BD:8C:75:DB:50:31:8C:67:95:44
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584BC53AF4533831D39FDF986580
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 14061
IP address blocks: 107.170.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3a:f4:53:38:31:d3:9f:df:98:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=375a238c-b417-4e5f-a6d2-f77355c35eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:08:04:da:c7:a9:ce:8a:82:2b:92:cd:28:
76:fb:87:3d:71:cf:19:c4:62:84:17:5c:e8:97:1d:
20:c4:8e:6e:38:d9:94:10:d8:19:81:ac:c6:34:4f:
a1:9c:d7:bc:5b:a3:f4:68:33:b0:13:e7:7a:a7:57:
40:1a:09:02:89:bc:0f:51:f4:17:c7:cb:a7:ba:05:
1c:93:0f:54:ad:d4:37:a8:14:03:7d:db:95:f5:48:
49:34:6f:4c:e0:6d:bb:da:59:e6:ed:5b:81:d0:ec:
f4:54:da:97:88:6c:b6:ba:4f:8d:84:5b:6f:b5:6f:
6c:d1:d7:bf:2e:51:d3:b1:95:a2:e9:dd:ea:e1:de:
2b:ed:d5:59:3c:82:9b:d6:10:43:6f:99:b3:a0:03:
c0:f7:51:c6:6f:c6:83:ac:3f:44:79:99:55:1b:8e:
1d:94:74:71:10:cb:8b:8f:14:fe:65:31:1c:87:a4:
96:c6:32:96:fb:cc:c8:cb:de:91:99:1d:68:12:6f:
2e:bc:65:c8:8c:ae:c9:54:ae:99:c4:9c:10:45:68:
e9:ac:97:16:81:cd:c7:31:3b:4f:f2:6f:8b:70:78:
0c:71:1a:31:6a:4e:59:3a:05:99:04:ac:52:0d:06:
10:c2:84:d7:f8:20:28:c6:70:7e:1c:35:97:99:4f:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:24:94:8D:40:68:BD:BE:71:BD:8C:75:DB:50:31:8C:67:95:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
107.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:0c:2c:4c:1e:63:67:e3:d0:7a:1b:64:fc:f9:8f:bb:d5:54:
87:fd:e2:cb:0c:c0:f3:25:b0:16:5c:2f:a9:d6:dc:6c:04:74:
b3:e4:db:1a:e6:9c:e0:7c:51:52:9a:6a:b0:ed:c2:44:c2:5f:
1b:dc:61:dc:35:80:e4:11:b8:33:db:f0:ab:51:25:15:5c:3c:
86:9d:7c:87:69:fc:3c:6c:18:2c:76:80:33:86:0e:72:75:ee:
c1:cd:dc:19:fa:59:01:50:92:c6:c4:2e:e2:80:b3:57:9e:22:
b2:2e:3a:49:a6:99:9f:f0:94:d0:3c:a1:17:2b:b0:60:89:d4:
e1:42:d9:44:2e:59:59:4c:0d:2b:77:b4:1c:c8:c9:02:48:b2:
a3:74:32:b0:a2:30:af:ad:66:c8:5f:fb:8e:d2:11:01:f6:79:
d5:f9:de:7e:65:d4:87:31:32:c1:25:57:f9:d2:7e:6d:9d:6f:
4e:54:51:53:8e:5a:5a:a5:1a:81:17:c7:d1:e4:a5:63:4c:be:
2c:d0:2b:85:8f:4e:3b:8e:68:2d:a4:37:81:9f:93:3c:f7:e6:
b0:a7:b0:1b:b6:f4:44:8f:21:0c:9d:d6:cc:41:b4:6e:7e:6c:
13:36:10:a2:61:bb:88:70:85:4f:1c:0d:f0:33:07:f6:80:1c:
3d:77:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 02:32:16 2025 by rpki-client