
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa
File: 1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa (raw, json)
Hash identifier: +e25P2Iw03iikCc/bzt+dRwgUOkrFeTMHgMtDTqmcAc=
Subject key identifier: 6C:79:33:6A:76:D5:89:D1:F2:FB:2B:F1:93:C4:A3:7D:9C:16:96:C5
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328584B64CD5627EF7C1E7F8C9A0F40
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 36492
IP address blocks: 209.107.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cd:56:27:ef:7c:1e:7f:8c:9a:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=915606dc-2465-4d75-a67f-267c8b2cc0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:37:56:ae:29:36:c5:37:86:10:f6:67:93:
08:7a:ee:24:ac:d0:2e:43:6d:32:c7:7d:bb:67:8b:
11:37:e3:19:83:bc:70:6c:ef:d2:19:d7:82:fb:e6:
3b:ae:fc:ff:51:e7:89:ba:16:db:bb:49:c9:7e:7a:
88:f7:b0:75:f7:7b:62:67:9e:1c:ea:3e:87:0f:22:
74:62:9b:c1:61:ce:99:c0:c5:e9:29:2a:c5:54:ad:
30:0b:e8:e1:b0:6f:69:8f:be:54:35:e9:70:b5:99:
b8:12:5f:39:85:b4:28:5a:aa:b9:14:16:49:c7:b6:
6c:8a:4b:64:86:18:5c:90:90:13:7b:1e:0b:c3:23:
bf:d1:a0:21:2d:9d:3c:4a:72:0e:39:63:8d:78:0f:
a5:c4:81:b6:18:4c:c2:be:10:9e:e4:90:8d:81:5c:
74:5b:06:1f:27:9f:08:b0:74:37:28:b0:0e:84:2f:
76:03:00:43:a2:ba:b5:ae:a5:b0:65:a3:03:eb:b0:
8a:b3:99:64:f0:0c:0b:74:bd:85:4e:be:e7:63:53:
4c:72:79:b9:3a:31:23:80:0c:89:9c:09:d6:87:ad:
51:52:9c:45:26:30:32:03:44:39:75:db:9e:fe:9c:
25:de:69:3f:91:00:e3:d9:fa:4b:9a:47:6a:bc:25:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:79:33:6A:76:D5:89:D1:F2:FB:2B:F1:93:C4:A3:7D:9C:16:96:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:95:2b:d9:46:32:8c:f0:c6:ef:55:70:45:73:4e:92:1b:77:
a4:96:17:fb:14:7c:21:d5:78:ad:ac:d8:db:9b:eb:a8:49:d3:
00:e3:07:9f:4d:9f:24:42:ee:7b:d9:6d:8a:1a:7d:c9:f3:7e:
11:ce:9b:53:18:8b:bb:1e:68:e4:28:4c:a3:c8:cf:3a:e2:b9:
97:d4:13:41:9b:c8:8e:08:e2:9a:9e:ff:e2:4e:c3:dd:3a:ff:
e8:a1:2c:9f:76:5c:1f:ac:12:36:ca:43:08:a2:6d:97:f6:13:
bd:53:da:07:32:44:6a:10:d9:61:47:51:da:cf:66:6f:f4:7f:
57:6a:f6:e0:ed:20:64:33:f4:81:fe:7f:85:9a:5d:2e:1a:b0:
5d:27:2c:b7:84:b9:53:d7:af:05:55:f6:45:7d:8c:8b:d6:6f:
ba:c8:0f:82:f0:a2:38:ee:cf:fe:69:ea:69:b7:df:b6:fb:5e:
15:10:64:39:43:14:bb:44:b5:13:60:66:a5:11:65:18:bf:5b:
e3:bd:fa:fb:c9:a2:cf:ea:fb:8f:72:70:d2:a6:76:49:2c:c9:
b4:b1:ad:cd:db:8c:e9:a4:ab:27:fc:e7:fe:13:57:19:0c:b6:
92:36:af:ea:c1:be:af:f0:b1:27:4b:89:3a:d5:30:ff:77:c4:
04:6a:98:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:52:15 2025 by rpki-client