
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa
File: 372300b1-92ff-3bda-8798-f61257b39942.roa (raw, json)
Hash identifier: hpMcRC84Wb2tl+5d4FAgJPib4hKV6iWZDpXYjmaoYoc=
Subject key identifier: 49:B4:00:FB:A9:E4:2B:12:35:81:9F:17:F5:71:FA:0A:09:88:15:8E
Certificate issuer: /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial: 010D0C9F4328584B5B072C76023C5CF4CEC0AB00
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa
Signing time: Mon 29 Sep 2025 13:00:41 +0000
ROA not before: Mon 29 Sep 2025 13:00:41 +0000
ROA not after: Sun 28 Dec 2025 14:00:41 +0000
asID: 50131
IP address blocks: 104.218.232.0/22 maxlen: 32
172.83.152.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:5b:07:2c:76:02:3c:5c:f4:ce:c0:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
Validity
Not Before: Sep 29 13:00:41 2025 GMT
Not After : Dec 28 14:00:41 2025 GMT
Subject: CN=4df3db25-c593-4a21-b2f8-28d7f091afab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:c1:44:92:37:be:13:bb:86:0c:81:fb:68:
b2:35:2e:b8:cd:96:27:65:62:7f:92:0e:d9:aa:0f:
47:d0:1e:3d:90:7d:d4:44:9c:dc:1f:68:36:b4:2d:
b9:0c:53:7e:8a:ba:19:fa:79:e1:e4:bb:58:ce:9a:
6a:42:9c:0b:9d:df:ec:a9:c6:e5:ac:b3:aa:ec:8e:
84:97:8a:52:16:e2:51:76:d3:34:f0:60:57:ea:82:
9d:74:9a:26:9c:45:1a:b6:f8:32:2f:fe:a5:d3:11:
76:3d:25:cc:eb:62:9f:8c:ac:2b:e6:d3:2f:c8:6d:
dc:e6:9a:c6:30:b6:6e:69:d5:46:0c:29:75:f8:90:
5f:3e:2a:a6:e8:72:2a:f1:46:8c:b2:13:8d:38:fb:
2a:20:54:c9:f9:49:60:60:e5:e2:1f:3b:6d:1f:e4:
a4:2c:bc:49:af:da:8f:5a:d7:79:86:91:0c:8a:36:
04:7b:96:76:6f:10:75:59:fa:c1:ff:2e:51:ad:f9:
a7:5b:e6:ca:bf:81:b3:07:45:49:d9:10:4e:d9:1e:
69:f9:71:bc:96:ff:b0:c5:ac:24:0d:eb:ee:3d:0a:
44:fd:4e:bc:94:94:2f:49:d5:80:b6:09:c5:03:81:
13:c4:b4:3f:cd:43:5c:c9:37:f9:06:8a:04:28:03:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:00:FB:A9:E4:2B:12:35:81:9F:17:F5:71:FA:0A:09:88:15:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
X509v3 Authority Key Identifier:
keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.232.0/22
172.83.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:8f:04:52:2c:e1:18:de:d7:d0:07:61:49:8f:8e:a9:d0:6b:
54:c1:c4:b5:cb:c4:1c:5c:b7:5e:07:f8:2d:93:49:48:d0:11:
f2:47:8c:47:93:22:a6:6f:13:29:b9:8a:cf:ed:00:a7:57:af:
8e:f0:ad:c0:33:f5:07:3e:02:1a:84:c8:4c:d0:35:46:06:7e:
50:ad:82:b0:25:b6:36:f9:32:47:1a:30:eb:f8:15:c9:ba:89:
e3:57:ec:5a:2b:59:b4:5b:09:df:58:f3:8c:05:89:79:3c:4d:
af:c0:c0:2d:3c:58:e3:ab:a9:8e:b7:22:dc:1d:16:a2:a7:09:
cf:c4:aa:b7:1b:dc:87:f0:3c:7f:4b:92:08:8e:ad:ef:40:60:
c0:e3:20:45:12:dc:8c:b4:c5:26:f6:6e:cc:4b:d2:7b:02:cc:
3b:af:8b:84:21:dc:6d:e3:e5:71:53:6d:64:09:7a:d7:1e:ab:
30:d6:59:91:f5:43:00:af:7c:0d:32:6b:8e:ff:81:cc:97:6f:
54:b2:a4:7e:47:56:64:1b:c8:28:4e:66:99:5d:36:95:83:bb:
de:55:7f:7f:18:62:a1:04:89:11:19:92:dd:d5:ff:30:2c:18:
33:c1:2d:5f:c5:88:21:b5:6e:be:9d:73:a0:41:e8:5c:21:c2:
68:4f:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:03:38 2025 by rpki-client