
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
File: a8644137-6b60-3be7-b264-80e3e2c1a315.roa (raw, json)
Hash identifier: iQMdjK3F9w6+bxzY0aCoSS1M05AbmeHzdqjSVSQopHM=
Subject key identifier: 19:05:13:78:ED:82:FD:DF:3E:BE:29:7F:27:FC:47:97:4F:21:96:4E
Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial: 010D0C9F4328584BAEC7B5CBD35D60B8156DC740
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
Signing time: Wed 29 Oct 2025 13:00:39 +0000
ROA not before: Wed 29 Oct 2025 13:00:39 +0000
ROA not after: Tue 27 Jan 2026 14:00:39 +0000
asID: 30305
IP address blocks: 74.113.192.0/21 maxlen: 24
204.86.64.0/19 maxlen: 24
206.201.64.0/20 maxlen: 24
208.93.241.0/24 maxlen: 24
208.93.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ae:c7:b5:cb:d3:5d:60:b8:15:6d:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
Validity
Not Before: Oct 29 13:00:39 2025 GMT
Not After : Jan 27 14:00:39 2026 GMT
Subject: CN=57fa71a4-e05d-4d43-959d-6c9d14a4ce33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:96:9f:0e:9f:66:3e:25:45:3c:a5:d0:fc:
1b:43:76:0c:4d:d2:1b:71:3f:25:5b:d7:2d:c6:5d:
51:7c:a6:28:0e:ff:41:26:92:27:57:60:6f:bb:e2:
d5:06:0e:ea:4b:86:4d:69:5d:7e:6d:04:dd:6d:e6:
3a:6d:8f:82:d8:69:13:92:c5:23:c6:96:b2:5a:96:
c4:21:6e:7c:82:bb:81:8d:fc:45:26:59:93:a0:b6:
96:ca:ea:63:01:71:a8:75:ce:53:7c:dd:6c:1d:9b:
fc:3b:16:ce:06:dc:a0:08:2f:99:1b:f3:4b:c4:79:
6a:ac:b4:b9:9b:16:ea:57:cb:c3:d2:5a:66:d1:f8:
74:7e:fd:f7:77:f0:00:74:77:ed:e4:6a:83:22:18:
a5:e1:49:92:ca:88:09:a8:f9:ab:6e:29:26:59:26:
90:3a:fb:d3:e7:14:a0:6c:3b:0a:2a:72:3e:13:e9:
0d:b6:b0:0b:32:47:f0:d9:33:00:a3:b5:60:54:b8:
8d:e2:94:bd:d1:50:97:aa:d9:06:8d:f2:26:4b:59:
b4:9a:e6:f0:17:8c:9d:99:2e:70:81:4e:1a:41:11:
f7:1a:72:5f:d4:08:c9:a2:d9:b4:fb:26:29:e2:4b:
97:08:a8:ec:56:da:10:d0:35:21:f9:d7:2e:ec:27:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:13:78:ED:82:FD:DF:3E:BE:29:7F:27:FC:47:97:4F:21:96:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
X509v3 Authority Key Identifier:
keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.192.0/21
204.86.64.0/19
206.201.64.0/20
208.93.241.0-208.93.243.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:93:a0:93:f3:10:e0:1a:e3:e1:b1:04:4c:3e:c3:c2:ae:71:
bd:81:d2:3d:c7:ce:1a:83:fe:01:40:c9:67:e4:94:6c:d6:e6:
49:67:ed:fc:24:58:3d:e0:46:cc:ab:85:51:9a:0e:39:8a:d2:
18:84:97:99:a9:ea:94:6e:6d:f8:1c:4b:6b:b7:0b:ff:f2:3c:
70:c1:5c:61:b9:99:84:f5:e5:d3:dd:e5:ff:2c:9d:a3:67:a3:
6a:77:09:9c:39:ff:39:61:72:29:97:3e:19:40:48:e2:ab:c6:
15:c3:e7:27:a7:89:a0:aa:d2:ae:7e:b6:3e:31:67:f0:9f:15:
41:d3:df:bc:c1:c3:94:d0:7a:71:ee:00:5a:40:f9:3a:0c:4f:
69:6e:ed:fb:f1:32:a0:ee:b0:70:fa:f8:81:f8:a6:8d:57:93:
02:52:81:5e:82:d1:03:b8:7b:a6:0b:50:13:d7:ea:3a:c8:8d:
10:db:71:55:c8:ac:f9:d3:f7:01:fd:68:a5:fc:34:ea:36:59:
b9:22:cc:e4:8d:14:9c:7f:b1:2f:e8:70:2c:6b:48:1b:7b:b5:
d5:3e:fd:74:1b:0f:4b:53:6b:34:f8:a4:57:e5:d4:30:97:9b:
8e:bd:31:fd:17:02:bf:77:0c:fe:da:e0:6d:89:fa:29:b8:42:
92:be:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:24:47 2025 by rpki-client