
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/84e95a43-4c2c-358c-bd04-67966cc26d7d.roa
File: 84e95a43-4c2c-358c-bd04-67966cc26d7d.roa (raw, json)
Hash identifier: wKs+iosHBVzcW8EEbV8Mu6fvyWEOenLyvLS7puNB8oQ=
Subject key identifier: 00:62:EC:63:2C:22:45:1D:85:1B:CE:C8:A8:7A:EB:C8:FF:FA:8D:6D
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584BC53AF4663879C4634A6FF980
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/84e95a43-4c2c-358c-bd04-67966cc26d7d.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 14061
IP address blocks: 104.248.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3a:f4:66:38:79:c4:63:4a:6f:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=c072f669-7c13-4981-9382-6ee986af1e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:75:96:af:24:4d:07:a9:a0:00:b1:b2:ce:
2c:e5:ee:1f:f6:50:60:81:5a:dd:39:df:7b:4e:08:
0d:3b:fb:ea:d1:ac:0b:a4:db:6d:15:bc:02:ee:e5:
2e:55:12:26:8c:fe:82:73:db:62:c3:c5:37:f1:e9:
05:4c:cc:0b:92:41:1a:b3:82:0d:89:01:fc:d8:91:
2b:b7:ed:01:9d:c4:99:78:43:a7:39:7c:c6:79:ee:
34:1e:fc:87:66:a9:39:b4:bb:73:bb:18:9a:85:34:
6e:aa:75:bf:f6:9e:30:64:35:28:14:bb:3b:cf:bc:
1f:48:e9:ff:f3:f0:4b:60:41:13:f8:6c:93:6f:45:
89:b0:a7:f2:93:7a:e1:9e:33:38:3a:51:a5:8a:99:
0b:20:88:6a:9e:0f:af:f9:49:4a:56:98:9d:2d:cf:
c2:d9:3d:a1:b1:f4:d0:1f:27:1e:47:a0:57:1c:e3:
29:c3:63:5d:f2:97:68:bf:db:41:b3:7f:1c:03:cf:
2d:8c:30:56:ad:1d:0b:7b:e9:cd:ab:02:63:ea:2c:
90:0d:50:8e:61:33:3c:c1:9f:65:ae:b1:22:60:41:
05:87:2c:5c:68:df:3f:35:0a:0b:17:dd:d9:b7:70:
c3:36:01:88:88:6a:d1:36:1d:cd:32:10:4c:ab:59:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:EC:63:2C:22:45:1D:85:1B:CE:C8:A8:7A:EB:C8:FF:FA:8D:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/84e95a43-4c2c-358c-bd04-67966cc26d7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
104.248.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:92:2d:18:47:bf:4e:56:de:1d:a2:30:cd:3a:be:3f:a4:6f:
24:33:90:af:e1:4d:b1:70:b9:2f:ee:86:27:46:a5:25:2e:5d:
c1:cf:c2:1a:52:88:2b:bf:b7:0b:c8:4f:66:35:60:8d:5e:99:
d8:c4:98:0f:af:8b:9c:e5:67:af:e0:66:4e:77:d4:ff:0e:65:
96:0f:a3:38:79:44:12:c9:9d:dd:11:c7:0f:4b:3f:a4:eb:eb:
37:ae:b6:16:cf:6b:f6:c2:03:71:9b:a6:31:76:9e:29:50:de:
0c:8e:b8:b5:2b:23:0f:3d:f8:24:4a:57:4f:e7:c8:34:6d:f1:
79:5b:f6:63:78:b0:ca:2b:f6:78:49:83:3b:41:39:61:f6:28:
a4:1c:d0:1c:3b:ff:28:5b:b6:c4:2d:24:8b:6a:a5:56:01:c9:
ff:18:ce:d4:b6:e9:fb:41:ce:f8:93:4a:5f:a4:2f:a5:3e:eb:
34:d5:0c:d6:42:f1:92:c8:72:ae:53:ae:ce:a5:06:e6:bd:e7:
50:80:81:33:af:1f:83:87:ef:46:2e:fc:84:99:25:aa:c2:88:
e3:92:c5:4a:9d:fb:a9:cc:c9:06:5f:94:c6:89:7d:0d:d7:b0:
26:3d:ae:cd:7c:0f:ea:7c:23:23:3f:44:2b:f9:2b:aa:4f:fb:
31:60:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 02:29:13 2025 by rpki-client