
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa
File: 11e8d12e-99be-3ca9-9f5d-648782b712c0.roa (raw, json)
Hash identifier: InUHkmpqGIx2mvI9nfhMfv5XmSY+eH1fdBzlq8Q+cRo=
Subject key identifier: 33:FD:D1:85:F7:98:32:63:93:33:6A:E9:8D:F0:19:0E:2B:88:1E:B4
Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial: 010D0C9F4328584B1806EE693FE8517E0307AA00
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa
Signing time: Fri 05 Sep 2025 13:00:41 +0000
ROA not before: Fri 05 Sep 2025 13:00:41 +0000
ROA not after: Thu 04 Dec 2025 14:00:41 +0000
asID: 26658
IP address blocks: 104.243.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:18:06:ee:69:3f:e8:51:7e:03:07:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146a096d-134a-4c52-9243-da3981810107
Validity
Not Before: Sep 5 13:00:41 2025 GMT
Not After : Dec 4 14:00:41 2025 GMT
Subject: CN=fd9e1388-570a-48d0-89e4-9e2beb556e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:b9:2f:d6:5d:39:4d:02:60:af:d6:0f:71:
63:5d:81:37:28:2d:28:66:c9:62:f4:24:40:94:d2:
13:66:a9:18:8a:ac:dc:22:b7:13:0e:fd:41:1d:24:
2e:94:ce:47:11:11:1d:a4:f0:17:94:66:a5:5e:01:
33:00:51:fa:24:f0:d9:7e:25:dd:e4:27:b4:b1:8f:
ee:6b:a9:73:60:82:8c:c9:f2:ff:13:f9:05:7a:04:
09:a0:55:47:0c:73:a3:ab:8b:61:27:94:ff:f9:37:
8a:46:cf:c0:59:f6:93:12:bd:97:52:ed:39:57:1a:
d4:30:ec:4e:09:b5:9c:cc:6e:e5:2d:37:16:6b:d3:
bf:ce:f6:d5:4c:a5:f3:f8:d7:ee:e2:dd:2c:0f:e2:
ee:76:06:19:00:2e:e9:c9:ce:b6:c3:bf:23:73:a9:
71:ee:a8:1f:28:f9:38:1c:13:ed:df:df:90:c4:24:
f9:84:47:05:ae:7f:f3:96:dc:3d:35:f1:2d:66:fe:
dc:23:b9:88:14:cf:80:46:73:87:09:d5:3f:d1:ad:
eb:d9:f2:66:e9:2c:0f:5d:aa:25:97:3b:b6:82:5b:
5f:a4:90:ef:97:8e:a9:44:a0:7f:68:33:45:b2:70:
39:73:01:b0:07:c2:de:12:7a:ee:da:e7:11:11:46:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:D1:85:F7:98:32:63:93:33:6A:E9:8D:F0:19:0E:2B:88:1E:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
X509v3 Authority Key Identifier:
keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:90:d8:67:87:db:b2:90:eb:01:a6:08:25:03:ff:13:b4:83:
e2:d7:40:c7:54:24:ba:27:79:9f:62:4a:4c:94:e7:58:d4:f2:
bb:cd:38:a1:bd:d4:f7:34:d8:aa:e4:55:20:55:32:36:ec:63:
3f:55:1c:2d:77:32:5b:52:58:83:e2:49:5f:51:27:f4:19:d8:
05:4c:2c:48:2a:b9:85:98:00:b3:6f:2b:08:38:3a:bb:21:a8:
e6:5a:80:a6:60:f3:1e:ba:bf:ca:0a:d5:2b:22:cf:ae:63:49:
15:bd:14:06:d4:75:d9:e7:fe:79:a9:79:98:5e:6c:5f:de:77:
e2:c9:10:f9:cd:52:1a:0b:03:ab:b6:ee:f4:5c:7a:e7:96:2c:
59:9c:34:5e:01:2f:cf:2d:03:b2:cf:5a:f2:fc:a6:51:1c:df:
0d:80:47:34:2e:2c:da:7f:51:66:31:f3:ba:e6:9b:f4:42:87:
d2:38:6f:04:e4:ee:15:eb:e8:64:7c:67:c7:3a:95:a5:fc:d8:
9d:ea:10:8b:ff:06:82:b1:b9:74:b0:9e:63:ea:86:d1:18:25:
d1:1c:dd:0c:bf:15:01:2e:f7:33:0d:1e:1c:da:38:a7:b7:57:
c3:aa:a3:9d:86:69:6e:21:1a:d4:ed:e7:e3:5a:5d:fa:4d:f8:
6f:2c:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:53:16 2025 by rpki-client