
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa
File: 2a3e600a-538a-31d1-bf46-d544767ed9c9.roa (raw, json)
Hash identifier: lI4AnrxMzY0toVdmFKznnIsotYIkXOVE5MM8eXlLKUI=
Subject key identifier: 3C:9F:68:E4:C2:C3:EC:FC:B3:66:C7:3A:7F:E9:34:B7:52:7A:89:A4
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F4328584B13D6C425EB1F596877414D00
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa
Signing time: Thu 04 Sep 2025 01:00:33 +0000
ROA not before: Thu 04 Sep 2025 01:00:33 +0000
ROA not after: Wed 03 Dec 2025 02:00:33 +0000
asID: 48254
IP address blocks: 67.213.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:13:d6:c4:25:eb:1f:59:68:77:41:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Sep 4 01:00:33 2025 GMT
Not After : Dec 3 02:00:33 2025 GMT
Subject: CN=73e9dc28-0731-4eff-a878-770b6026f5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:20:83:64:97:43:86:2b:43:67:3c:f0:6c:fe:
3f:e6:15:13:19:99:c2:f0:4a:b5:b6:6a:d6:3d:30:
7f:cc:66:65:21:38:43:82:64:1d:8f:89:4f:7e:10:
80:dc:6e:ca:82:c3:ad:53:1c:96:db:bd:93:f0:f6:
71:7f:e3:7e:b9:a2:02:9d:ed:17:97:25:8d:a6:93:
f9:bf:ef:6f:dd:e8:f8:eb:56:bc:e7:35:fa:0f:d3:
7b:46:12:48:b6:c8:46:4e:d8:12:45:35:08:4c:c9:
9e:e9:e9:02:5b:1e:b7:a6:0c:75:46:0d:96:5d:2c:
fa:68:94:16:79:59:58:00:77:a9:cc:da:a9:ae:03:
56:94:e1:c7:3e:14:19:ac:b7:91:60:a7:a3:8e:53:
4f:5b:ed:79:e8:c5:99:b1:50:f8:e4:86:e1:01:a3:
00:ae:0d:ed:1c:b8:69:f0:e6:7f:2c:40:64:7c:ad:
c0:37:bd:7b:c4:48:54:a0:c2:5a:d5:61:72:57:08:
53:85:dd:3f:61:06:6a:c6:94:d8:78:b5:36:8c:c6:
78:8d:a8:fc:e4:0c:f0:e2:1c:aa:ab:65:7f:1d:41:
f6:05:de:29:ef:ac:fa:38:a6:9f:e8:62:53:76:a0:
a6:9a:46:15:e3:7f:a9:d4:a5:00:64:f8:58:77:a6:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:68:E4:C2:C3:EC:FC:B3:66:C7:3A:7F:E9:34:B7:52:7A:89:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.213.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:f2:7e:27:2a:02:d2:44:6a:31:7e:a8:0a:18:72:38:b2:1b:
a4:55:06:58:45:94:74:d7:b6:8b:e6:3e:bc:d8:83:bb:a1:ea:
83:39:10:98:c5:2f:32:3c:b3:65:ca:ed:b7:78:fe:f2:fb:64:
ac:56:3d:82:36:94:32:57:e7:5a:b0:4c:27:71:79:4a:50:b5:
07:a2:54:9e:cd:3e:76:64:ee:17:5d:bf:88:84:00:c9:41:69:
1f:ab:c2:32:c0:a4:f6:c5:9a:18:b5:c6:43:3d:7b:ca:67:6e:
ad:06:5d:69:49:a8:3b:ef:4c:f0:17:23:85:9e:eb:27:28:f8:
1c:79:ff:9c:44:0b:8a:e1:6e:cf:27:fc:39:c4:7b:fe:9b:29:
da:07:3b:7d:55:a3:ac:ba:1e:50:58:ca:7e:b2:20:a1:06:5d:
5b:d3:13:c3:46:d0:54:80:f8:bb:17:06:2c:21:ae:0b:eb:54:
8d:92:2f:79:a7:76:e0:92:50:0d:b6:9a:63:a0:93:2a:b5:37:
c0:f8:a8:df:c7:6d:d5:d6:ef:22:d8:9a:32:a1:57:42:05:51:
f9:0c:38:5d:73:25:7b:45:d2:f3:77:65:96:0d:74:eb:c2:a3:
42:e8:63:09:fd:fa:bd:0d:04:a7:22:ee:70:b4:be:31:06:c0:
c2:8b:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 15:14:21 2025 by rpki-client