
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
File: e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa (raw, json)
Hash identifier: t84suqRhCsMNaOEbZlu3/MKBYmS+wtQD1Hu9sltxG8Y=
Subject key identifier: ED:3A:C7:F1:E2:7A:C6:7F:3E:EF:6A:37:0D:9B:BF:C9:42:BC:07:B9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CD87BC25CE7801C82A7E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 7155
IP address blocks: 70.41.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cd:87:bc:25:ce:78:01:c8:2a:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=02d3cd8d-d90c-4c9b-becf-7c240552cfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:23:e6:93:69:27:af:3b:0b:25:56:b9:d6:
4f:36:0a:af:66:2a:ce:bd:0c:49:2a:16:b1:e7:0a:
16:80:d7:97:12:42:3c:ef:08:d4:73:1d:d3:36:37:
40:29:13:5d:16:61:ff:9e:fb:b0:ed:66:b6:02:36:
5a:45:01:e0:91:53:22:ca:dd:75:52:fe:b3:70:bd:
10:c0:79:41:ca:c8:53:92:29:c9:e6:27:52:9b:71:
24:34:01:63:3d:d6:0c:7e:db:d1:95:ad:3b:cb:87:
cf:25:b8:93:15:ef:57:32:99:2d:5e:4b:73:69:a4:
71:76:cb:eb:f9:3f:66:e8:9c:b0:d0:3e:bb:8f:7d:
c3:ce:ef:c0:e2:a8:45:04:a4:5b:59:ab:ad:5e:f4:
92:5b:51:ac:ce:63:d9:1f:9d:27:64:2a:c8:d3:a1:
3e:3a:21:1b:08:d9:63:e4:98:df:f0:86:e2:93:7d:
4e:ba:77:1d:40:f5:ee:67:30:71:72:16:97:c8:06:
86:ab:6c:76:61:16:ae:c0:bb:ac:a5:a6:4e:26:79:
df:e6:d6:89:3e:8d:f9:db:e5:f3:39:d5:26:31:32:
2c:6f:7c:e7:f3:5c:0f:e4:7d:52:11:73:de:cf:8e:
74:eb:e6:22:e8:ca:20:f3:34:8b:ef:97:ff:f1:97:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:C7:F1:E2:7A:C6:7F:3E:EF:6A:37:0D:9B:BF:C9:42:BC:07:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:a4:a3:ab:f3:bb:87:3a:d9:3b:bd:8e:15:6c:1c:5d:47:bb:
3a:e9:18:ac:bb:f4:da:5a:e7:3d:5a:ba:2e:46:fb:03:39:24:
c7:af:5a:15:fc:18:4f:fd:41:31:14:4e:c6:e4:d8:a2:6a:7d:
52:bd:2d:1b:de:42:29:7c:61:81:7e:1b:98:1a:fa:5b:b9:71:
b2:b7:d2:3d:e4:63:e0:5e:39:cf:8f:74:7b:34:48:90:7e:19:
f5:1c:aa:69:05:2a:b7:75:bf:87:68:38:b4:b0:d6:a7:14:9b:
5a:81:bd:bc:79:dd:f4:2b:93:fa:2c:3b:30:68:5b:ac:ee:2b:
83:47:2a:3b:a4:1b:9a:25:fd:72:b4:d6:69:a2:39:2a:fa:50:
f1:de:c4:0e:54:3c:3f:6d:b8:1e:93:ec:f7:e6:19:e1:4b:15:
58:81:a1:6c:96:7a:ce:8e:64:3d:c6:7b:1b:cf:d1:54:92:ce:
bb:6b:ad:b6:8d:37:c0:fb:d5:3e:23:38:84:2d:d3:9e:53:02:
66:04:20:c3:bf:18:db:74:4f:87:b9:55:51:fa:50:fb:29:4c:
19:ba:11:7d:ac:13:4d:4f:a7:4d:f2:0f:6b:35:c3:e7:61:93:
1e:65:c5:5b:c3:27:f2:a8:ac:fc:f9:48:8b:b4:8a:52:24:66:
a1:53:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:58:34 2025 by rpki-client