
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa
File: 28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa (raw, json)
Hash identifier: mCqAUEK5HSNvSPvb9gind8Nz6yaDEGxfTkadsek50sI=
Subject key identifier: 82:F6:F7:2C:8F:4B:E6:26:AF:42:C6:E1:6A:4C:13:7D:C6:AB:CF:E6
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584B583C82AE42D78451ABA42080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa
Signing time: Sun 28 Sep 2025 13:00:41 +0000
ROA not before: Sun 28 Sep 2025 13:00:41 +0000
ROA not after: Sat 27 Dec 2025 14:00:41 +0000
asID: 852
IP address blocks: 208.181.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Oct 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:58:3c:82:ae:42:d7:84:51:ab:a4:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 28 13:00:41 2025 GMT
Not After : Dec 27 14:00:41 2025 GMT
Subject: CN=3ec9cbe6-5dd1-45ec-89b9-f4451c5c7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:78:fa:cf:be:9c:16:06:4d:8f:73:8a:b5:
1d:54:43:50:c5:e3:bf:35:65:89:ed:71:59:55:99:
15:78:c6:a8:8b:e8:9f:74:a5:0a:f9:fa:d5:58:10:
86:b9:96:87:34:c1:e4:05:23:32:8a:f3:b3:4f:1c:
8a:6d:48:5f:2f:25:d3:c9:f1:b3:15:40:e8:31:9a:
5c:f1:e1:84:6d:6f:af:7c:cc:57:56:51:a1:c2:63:
ca:21:bf:cf:7c:2e:ef:25:d0:c3:ee:13:61:cb:6a:
8d:47:13:6c:a4:93:a6:c8:7f:1f:19:0c:92:05:ee:
ff:17:4a:35:5b:8f:55:04:49:73:ab:54:9b:de:5d:
d4:5b:44:5f:b5:27:5e:07:43:d6:98:de:e0:d8:b5:
a9:4e:dc:64:a5:1f:eb:f6:03:f1:fb:99:b2:c0:99:
76:9d:a5:2a:ba:af:8a:e5:b8:8f:61:b2:67:9a:84:
56:1a:72:19:3e:14:66:39:21:76:d3:5d:37:f3:e3:
0d:eb:a4:85:70:3e:f1:c7:49:2f:81:8f:40:7e:9d:
41:73:47:fa:15:96:b8:f3:f1:7d:3e:49:95:42:11:
af:01:cf:65:40:30:be:65:d8:67:c4:e3:9c:55:28:
18:f3:77:a8:58:9d:2a:e3:ef:13:86:30:cb:b6:cb:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:F7:2C:8F:4B:E6:26:AF:42:C6:E1:6A:4C:13:7D:C6:AB:CF:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:0e:da:a8:10:b1:99:6d:1e:fe:60:02:9b:db:62:d6:a9:e2:
ee:95:e1:06:c3:c8:2f:96:b4:71:9a:96:46:42:c7:47:5b:61:
92:f4:1d:84:66:80:3c:a3:5f:fc:d6:1c:88:55:ae:a4:b7:30:
f0:5b:e8:c1:79:38:12:40:84:15:ff:de:b3:de:e6:e8:c0:72:
9e:e1:74:ca:67:76:e3:7d:1e:5f:56:1d:23:c9:2f:d1:4b:69:
f2:68:97:30:16:b5:79:b3:d0:df:87:2a:75:ae:03:f5:ac:a8:
17:84:9d:9e:f2:cc:8c:f5:10:2a:7b:91:c0:0f:1b:23:cf:71:
f7:fc:8f:50:c9:87:09:43:01:e3:62:88:6e:e7:ea:f4:8e:c3:
c4:92:f6:82:61:a8:1d:8e:54:1c:10:f0:1e:e3:ae:05:e0:01:
ad:f1:2c:5d:19:26:88:b9:4c:24:cb:f4:8b:87:ed:58:f6:a2:
19:89:eb:00:51:ac:5d:72:6f:23:de:c7:54:93:c9:ff:05:06:
ee:55:9c:d6:b9:35:3e:63:61:93:69:5d:d1:20:51:57:4e:8c:
13:16:26:d8:6b:55:11:2f:0c:32:01:0e:93:36:89:8a:f8:79:
cb:24:e8:82:c7:ae:57:33:57:20:f9:a2:c4:77:f1:d0:35:6e:
88:ab:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:19:33 2025 by rpki-client