
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa
File: dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa (raw, json)
Hash identifier: UCDTGdjLpJazSNPi0zHpJWQWCuuqiBczLimOkxqNuv0=
Subject key identifier: 9C:D4:44:46:6B:39:82:FA:9E:87:26:41:C2:D6:71:C1:55:56:F5:04
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584B4A4727B309341C37EB9E4620
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa
Signing time: Tue 23 Sep 2025 13:00:40 +0000
ROA not before: Tue 23 Sep 2025 13:00:40 +0000
ROA not after: Mon 22 Dec 2025 14:00:40 +0000
asID: 3356
IP address blocks: 204.104.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4a:47:27:b3:09:34:1c:37:eb:9e:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Sep 23 13:00:40 2025 GMT
Not After : Dec 22 14:00:40 2025 GMT
Subject: CN=0ab7bd1f-05cc-49b6-9765-be18df5a126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:7b:26:fd:5b:34:f7:0c:b4:68:c2:b7:cb:
4f:7b:48:17:ea:97:f4:b3:f6:ce:1b:92:60:0d:06:
96:3f:a3:f6:9c:7b:41:25:04:cc:f2:3c:64:22:f3:
18:80:0a:60:96:7b:44:58:30:d6:d7:81:93:0f:59:
36:c5:ef:5c:5f:a7:e3:ba:2b:49:94:9b:75:cc:4d:
98:a6:5c:c1:5b:7f:d3:be:1f:6d:1e:21:e4:93:09:
75:a4:ee:f3:b7:6f:a2:79:00:c8:e9:a1:c6:f2:97:
32:e8:c4:4e:57:e0:4c:ce:e7:b3:23:57:88:d7:dd:
63:d6:1e:01:7f:0f:9a:67:df:b1:45:5a:af:5c:e2:
b2:9b:6b:9f:cd:4e:ec:73:0e:e1:94:17:60:eb:73:
f1:f2:91:69:5e:92:16:61:04:8d:09:69:b5:af:a9:
fd:a1:96:3c:98:f8:2d:92:72:6e:83:24:3d:29:a4:
a6:5e:c5:9f:c1:d1:29:c4:47:c8:5f:90:43:5f:7d:
55:02:4e:1f:a2:df:59:89:b0:47:19:97:42:c1:19:
8a:65:ad:48:c6:31:ed:2d:84:51:06:80:80:69:31:
ed:ae:85:b8:ff:52:d4:9c:92:12:a9:13:f3:b2:d7:
0c:21:db:d9:60:e3:b9:70:8a:f0:67:e0:06:15:b4:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:44:46:6B:39:82:FA:9E:87:26:41:C2:D6:71:C1:55:56:F5:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.104.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:53:c3:36:52:32:8b:dd:2d:c8:63:30:b4:f8:61:a9:6b:ff:
ab:25:de:58:37:48:be:03:a9:f2:95:68:7f:a3:ca:71:b2:7c:
f5:79:14:b4:5e:99:da:fb:f2:66:4f:f3:1f:3f:b1:6f:62:d1:
32:62:9b:e5:0a:ac:84:d8:eb:3b:02:7b:bc:d7:f6:fe:a4:53:
73:ed:fd:d7:54:0b:dd:02:53:d2:4d:a2:1f:66:cb:d6:3b:a8:
34:6f:bc:6b:82:a4:cd:47:1b:c0:7e:15:3b:cd:2b:dc:46:1e:
05:db:b2:fa:be:49:e8:46:96:f9:03:34:d8:74:5e:84:fd:93:
ce:53:df:c0:44:08:e6:2c:10:35:af:91:58:50:cc:d9:94:15:
6f:38:63:03:42:d2:36:96:30:87:b5:a5:19:10:c9:90:4d:73:
d9:a0:ae:ce:a3:93:ca:06:c1:dd:6a:be:38:08:83:df:c5:ec:
9b:0d:bc:54:bc:91:c8:d2:6a:6b:54:3a:c7:2e:e6:0c:1a:44:
e9:81:26:50:f1:46:f8:b2:16:64:20:66:b6:cc:51:60:f7:79:
36:e4:80:03:5e:c4:f3:05:04:92:68:1b:7a:54:db:29:bf:63:
6e:fa:6d:94:1b:a2:20:e6:0c:a9:55:10:a0:38:10:26:3e:70:
55:c3:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:12:19 2025 by rpki-client