
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa
File: f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa (raw, json)
Hash identifier: 4Bl+yU0wrTbjDPk5ZZmYQonWXBYNWQC3JMg1q4LKbQw=
Subject key identifier: 00:58:81:30:A0:54:53:F7:98:B5:14:26:B0:2D:B5:DE:76:37:05:69
Certificate issuer: /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial: 010D0C9F4328584B2FC184B2CEACC9EA88A73600
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa
Signing time: Sun 14 Sep 2025 01:00:33 +0000
ROA not before: Sun 14 Sep 2025 01:00:33 +0000
ROA not after: Sat 13 Dec 2025 02:00:33 +0000
asID: 55163
IP address blocks: 108.174.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2f:c1:84:b2:ce:ac:c9:ea:88:a7:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
Validity
Not Before: Sep 14 01:00:33 2025 GMT
Not After : Dec 13 02:00:33 2025 GMT
Subject: CN=29ffc82e-06ab-45fb-af73-51e528fd487e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1a:27:14:71:db:9b:1d:04:88:45:56:b8:97:
7f:d3:fc:f6:33:68:13:0f:da:20:7c:84:b0:cb:6d:
74:8d:da:cf:c4:35:4a:76:2f:2c:18:87:7c:68:58:
4a:cb:3f:e9:e1:eb:07:59:7c:4c:82:25:b6:34:b7:
ac:45:33:64:b2:cd:54:be:48:f3:30:02:f3:d1:cf:
e2:f4:b0:25:c6:bc:3f:40:93:c5:58:99:d9:dd:0a:
07:ef:0e:19:81:4c:74:4d:d9:e3:da:35:ae:b0:15:
96:4d:84:de:1e:6d:d3:ff:c2:21:f4:4f:dc:41:57:
ea:c0:7a:66:77:d3:5f:82:f9:5f:92:81:21:3e:c8:
39:d5:15:8c:cd:35:f0:d1:84:56:dd:23:29:82:7d:
5b:32:84:2e:49:8c:5f:8c:1e:a9:32:08:3e:d6:b1:
66:3c:41:cc:d9:8c:29:d9:eb:7d:0a:56:7a:77:9b:
b7:ac:7d:4f:ab:7a:c3:22:85:48:3d:a7:80:6d:d6:
a6:ae:73:21:d8:13:0c:8a:bb:09:3a:56:57:8d:f7:
a6:07:86:ae:d4:97:96:08:0d:e7:ac:5c:84:95:99:
77:ed:8a:a9:14:64:bf:80:4a:57:f0:32:6a:7a:f3:
02:28:07:e7:ad:a9:bf:88:3c:e0:e2:68:50:d0:16:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:58:81:30:A0:54:53:F7:98:B5:14:26:B0:2D:B5:DE:76:37:05:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
X509v3 Authority Key Identifier:
keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
sbgp-ipAddrBlock: critical
IPv4:
108.174.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:7f:d9:23:9b:fc:4d:d1:33:36:43:84:1c:3b:43:63:55:48:
27:53:ef:6a:bc:ff:36:d3:7a:9d:b1:fe:38:79:04:e4:d4:38:
5d:06:a4:cb:fb:6f:cc:c8:e5:a4:9f:1c:06:e4:47:16:62:8e:
12:22:44:93:7f:ca:22:f8:ed:64:69:9a:fb:3a:8c:03:70:84:
cf:e4:bf:c4:3d:0f:54:7b:b8:c0:24:0f:e3:5d:c7:ab:e9:d5:
ba:8d:03:8f:95:26:a3:4f:81:12:a6:92:0e:15:c4:a8:94:3c:
35:69:6f:a6:43:2a:54:b1:a5:6a:2f:a8:d7:c2:6b:40:f6:de:
eb:98:73:18:0f:13:93:64:61:1d:0f:68:77:c8:12:2b:81:64:
42:1e:ee:2c:98:93:4b:20:b2:46:75:44:64:72:2b:63:36:c8:
e4:69:e1:e8:40:c4:d7:07:3e:d2:30:86:95:52:da:69:1a:2c:
56:84:d7:3b:3d:1f:6f:15:cd:27:79:9e:47:b1:cb:b2:24:34:
7c:01:9e:b9:8e:0a:87:85:cc:e0:89:cd:3a:5a:65:dd:de:a4:
da:3b:c5:4b:3e:24:a1:ba:9f:b8:a4:5d:ec:69:57:f8:1b:0d:
37:6e:e9:d1:89:23:e2:b1:d9:c2:a2:fd:b3:bf:db:30:72:43:
c1:37:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:16:40 2025 by rpki-client