
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
File: 5d7525c2-10d9-322d-888c-c13bde0efc94.roa (raw, json)
Hash identifier: qn/SybZQS2T/y+HA2Esg6gJWH5qw6GhLLs0LQzMHkOU=
Subject key identifier: CC:D7:E8:87:C7:99:DF:F0:9B:3B:92:F7:27:D4:BA:D8:2F:E8:C0:B3
Certificate issuer: /CN=4a6ba250-5086-4d58-8336-494a05894bf9
Certificate serial: 010D0C9F4328584AFEE6A08BB932EFD1903D8BE0
Authority key identifier: CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
Signing time: Wed 27 Aug 2025 13:00:41 +0000
ROA not before: Wed 27 Aug 2025 13:00:41 +0000
ROA not after: Tue 25 Nov 2025 14:00:41 +0000
asID: 62809
IP address blocks: 23.128.144.0/24 maxlen: 24
23.128.145.0/24 maxlen: 24
23.128.146.0/24 maxlen: 24
23.128.147.0/24 maxlen: 24
104.152.136.0/22 maxlen: 24
104.244.20.0/22 maxlen: 24
130.51.4.0/22 maxlen: 24
162.222.28.0/22 maxlen: 24
162.251.124.0/22 maxlen: 24
199.184.14.0/23 maxlen: 24
199.202.232.0/23 maxlen: 24
2605:2a40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fe:e6:a0:8b:b9:32:ef:d1:90:3d:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6ba250-5086-4d58-8336-494a05894bf9
Validity
Not Before: Aug 27 13:00:41 2025 GMT
Not After : Nov 25 14:00:41 2025 GMT
Subject: CN=ab46d3cd-6d9f-4f67-9867-6524398cc6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:7b:63:0a:5b:4a:d0:f4:94:68:8e:f5:0b:
99:e7:cb:28:9a:5b:e9:d6:25:40:9f:2a:fd:99:96:
03:3a:2a:af:62:1b:92:93:3a:7a:5b:59:21:09:1d:
6c:52:17:ab:0f:5d:c7:89:d8:9e:d5:5d:59:c3:c1:
be:5c:fb:e1:ba:b6:d7:68:9a:dc:35:57:bc:0c:fb:
65:c5:90:96:23:0e:01:90:f9:11:1e:59:35:c4:3f:
6b:8b:6e:03:95:3b:13:f9:17:8d:33:74:ca:66:56:
74:6a:5c:fd:70:19:4c:c9:5c:a9:49:fc:78:9a:62:
af:e1:6f:6e:e4:5c:9c:1e:86:38:bb:fe:c0:04:07:
ff:a4:73:58:b0:93:a0:e5:04:9d:62:55:a4:06:5b:
a1:44:9a:1e:36:c3:bf:51:59:58:6b:4e:ba:2b:d7:
7e:30:03:a9:23:7e:8c:f6:6c:be:1a:c2:55:8e:99:
d4:db:bd:09:de:f4:7b:2f:29:90:6b:cf:e3:cd:0e:
5b:7b:66:47:89:ff:6a:97:3b:0c:1b:4b:af:cd:b0:
f4:f9:a7:1e:91:f9:68:73:e7:f3:fa:a9:35:d0:7e:
be:e2:00:e5:23:22:29:af:2e:e8:76:85:a7:be:b9:
00:11:9b:f9:4f:9e:d1:fb:ed:4e:88:08:1b:78:cc:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:E8:87:C7:99:DF:F0:9B:3B:92:F7:27:D4:BA:D8:2F:E8:C0:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl
X509v3 Authority Key Identifier:
keyid:CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.144.0/22
104.152.136.0/22
104.244.20.0/22
130.51.4.0/22
162.222.28.0/22
162.251.124.0/22
199.184.14.0/23
199.202.232.0/23
IPv6:
2605:2a40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:a3:0c:95:24:b9:e2:75:38:04:69:f0:5e:ed:36:7f:48:9e:
21:f8:7a:e2:6a:ff:df:c9:5d:79:2f:8e:b2:c8:86:76:f8:d4:
12:10:72:f6:52:b9:7c:0d:79:29:f3:a3:7e:ac:37:71:4b:ca:
44:4e:0a:ad:ee:ea:10:ec:e0:2d:1b:d7:7b:f8:78:a4:f2:8d:
8f:37:45:c6:eb:a4:2a:2d:fa:f8:c1:74:91:ad:2e:48:8d:20:
61:bb:d2:79:05:d9:ab:9f:f5:46:e8:10:69:f9:63:50:97:e7:
ac:61:22:41:52:8d:0d:a9:53:29:82:32:bf:19:d1:31:95:93:
2b:1f:c8:ad:95:db:12:cd:d5:9a:ac:34:65:e1:db:38:cc:bd:
ed:ea:0e:1a:a2:d3:d3:98:71:ce:d5:ba:c9:9a:f7:2a:2d:15:
bb:12:4c:ed:08:ae:56:c6:bb:90:67:d7:3b:03:84:8a:4a:0d:
67:79:a6:d8:18:7e:a6:9f:7e:35:99:08:ac:c9:f5:0e:41:28:
f0:c6:a7:32:11:2e:99:cf:9c:a8:5f:fc:b3:13:22:43:67:dc:
5c:f9:82:4b:80:b0:04:4f:1d:0c:2d:00:b6:cb:63:d2:5a:90:
2c:33:1a:a2:ab:8c:5f:f2:c1:4b:b2:cb:0f:b3:b1:3c:79:69:
a1:30:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:58:50 2025 by rpki-client