
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/007d43ed-825a-3a20-866f-2271b4ef3c0d.roa
File: 007d43ed-825a-3a20-866f-2271b4ef3c0d.roa (raw, json)
Hash identifier: sPaNO4wgaVzkktnoK7GGHoJV3UZhtx0l+B+MnSKosTU=
Subject key identifier: 54:9C:6B:B6:D9:78:18:D8:CC:C5:47:EF:89:7E:88:4D:14:1F:18:A8
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584BC56022EFB4E1B152A36C4480
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/007d43ed-825a-3a20-866f-2271b4ef3c0d.roa
Signing time: Thu 06 Nov 2025 15:15:39 +0000
ROA not before: Thu 06 Nov 2025 15:15:39 +0000
ROA not after: Wed 04 Feb 2026 15:15:39 +0000
asID: 40850
IP address blocks: 104.140.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:60:22:ef:b4:e1:b1:52:a3:6c:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Nov 6 15:15:39 2025 GMT
Not After : Feb 4 15:15:39 2026 GMT
Subject: CN=25e4d87f-0f61-4de5-a684-1763ea1d2243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:bc:b7:fe:f1:37:8d:29:d6:f9:38:fd:f3:
44:b3:d9:44:9d:7e:12:4e:26:84:19:f2:29:57:87:
72:29:cb:56:fb:59:56:67:3b:89:0d:57:ec:1a:a8:
0d:ef:75:85:fa:a7:ab:de:15:fc:8d:da:b0:18:fe:
45:3a:3c:ec:45:a3:fc:80:71:73:d1:c6:41:d8:bb:
b1:af:36:49:f1:ba:08:c3:a7:05:c2:f6:25:8b:27:
bb:4c:3f:88:d5:65:c7:e4:09:61:21:67:de:08:9a:
7f:60:46:33:f5:51:1a:62:da:d7:aa:28:44:69:88:
3e:42:21:ee:6e:c4:14:2d:6a:52:ba:0a:d5:64:ed:
59:a3:16:0f:7f:ed:03:8c:5e:72:bd:5e:da:a3:6c:
e7:91:ae:42:81:a7:c8:f7:ef:3c:f4:5c:7f:e3:98:
bc:b6:ca:72:6f:a3:3a:6e:e2:b6:bd:b2:44:3f:ac:
65:70:16:b1:8c:9a:fb:1d:3d:4f:e3:7a:48:d9:49:
5d:99:ff:9b:6f:9a:48:1b:c0:3b:c0:94:b6:31:a9:
0f:19:32:9f:d5:37:4c:0c:11:c3:a3:da:1c:2e:5b:
40:56:42:90:16:33:44:de:de:8b:93:9a:57:3a:ea:
62:cf:e9:da:d6:74:1c:2b:2e:d3:47:e7:cc:e1:53:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9C:6B:B6:D9:78:18:D8:CC:C5:47:EF:89:7E:88:4D:14:1F:18:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/007d43ed-825a-3a20-866f-2271b4ef3c0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
104.140.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f3:c4:d2:49:3d:78:6d:96:97:9e:b3:aa:40:f5:e0:64:6b:
ab:de:ab:51:97:af:f7:2a:66:5b:1c:30:20:cd:6f:94:05:00:
bd:52:f0:27:1e:d2:f6:3b:86:4f:e4:5b:b4:33:b0:4a:28:c4:
29:82:c4:a9:4e:50:c4:8d:78:cc:65:86:9e:d8:c5:92:f7:00:
c3:46:af:97:6f:ad:ed:39:40:f6:ba:e1:b7:0c:f4:cb:0d:39:
21:04:02:bf:19:ec:ea:a1:a2:33:dd:05:63:e3:0a:8b:9c:de:
2b:ec:0e:01:e0:c2:8e:62:4e:81:ad:57:7e:d0:96:64:2e:48:
a5:96:25:fd:bf:87:12:c5:67:cf:d6:b4:48:f8:d0:17:f7:11:
5e:c4:7e:51:fd:88:9b:6c:f9:23:92:05:12:1d:62:15:36:6b:
34:9d:6f:d0:a8:5c:15:4c:ea:86:3f:60:cd:1e:0a:4e:1b:03:
a6:20:22:d6:69:90:77:bd:51:c8:a2:06:fa:1b:86:de:e0:06:
e3:e2:c9:86:ec:bc:56:33:e4:fb:8b:50:fd:6b:19:ab:7d:ad:
d6:8f:3a:9c:6e:6f:24:d9:67:c9:6f:50:a5:3d:95:57:1a:61:
54:b7:3e:08:5d:91:d9:70:f5:39:e4:75:9e:05:53:42:d6:60:
a1:13:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 07:29:41 2025 by rpki-client