
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
File: df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json)
Hash identifier: s5Yw8gpb06emq1MujCFolKXF73+Kv1Y2XgDaz1h0XmQ=
Subject key identifier: CE:0D:64:9C:94:14:1F:39:19:FD:26:54:FC:3D:7F:03:D1:F8:9C:32
Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial: 010D0C9F4328584E5D14B19F9A17A6676DC8F900
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
Signing time: Thu 02 Jul 2026 09:00:12 +0000
ROA not before: Thu 02 Jul 2026 09:00:12 +0000
ROA not after: Wed 30 Sep 2026 09:00:12 +0000
asID: 53454
IP address blocks: 104.225.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:14:b1:9f:9a:17:a6:67:6d:c8:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Validity
Not Before: Jul 2 09:00:12 2026 GMT
Not After : Sep 30 09:00:12 2026 GMT
Subject: CN=6b09125c-eadf-4134-9fac-b0de7f91c50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:eb:5e:76:4f:9c:a0:55:bd:96:86:04:00:
5a:89:90:b6:67:fd:3c:49:88:0c:f0:33:c0:45:7c:
36:83:d1:1b:c4:b8:60:5a:83:62:ec:c2:50:78:e5:
59:6b:79:a6:16:e8:98:51:a7:32:aa:e2:0e:75:97:
24:88:f9:29:11:3f:a5:77:9a:73:a5:56:dd:46:ed:
0d:61:69:b5:32:af:3b:72:b9:1b:1c:aa:17:a3:b8:
ce:48:38:56:62:28:4b:16:19:aa:5d:8c:5d:3d:41:
cb:23:29:cb:8a:eb:2a:74:e1:74:7b:a0:e6:20:af:
bc:4b:fb:73:d4:95:e4:47:1e:22:4c:f6:60:60:8a:
1a:f0:a7:7d:6b:d5:cd:12:1f:a0:85:c8:57:ef:89:
cb:f2:01:69:18:3e:73:db:96:ef:75:e7:6e:45:cb:
4b:03:41:63:2e:24:74:45:42:11:65:17:69:04:a1:
d8:73:dd:b9:88:da:13:e0:71:76:e5:11:94:90:e4:
89:e7:c3:06:5c:0d:0a:52:00:4e:b7:e6:73:77:b9:
90:03:a9:5c:d8:11:d6:11:99:d4:a2:5a:9e:15:19:
3c:c7:bf:81:d4:07:2c:e3:94:9a:69:c9:a5:7d:90:
e1:52:a3:da:d1:dd:5d:36:82:83:64:a2:6a:63:34:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:64:9C:94:14:1F:39:19:FD:26:54:FC:3D:7F:03:D1:F8:9C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
X509v3 Authority Key Identifier:
keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
sbgp-ipAddrBlock: critical
IPv4:
104.225.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f0:93:39:67:f6:e0:ac:1c:a4:f5:85:06:82:85:06:68:58:
bf:dc:05:8c:17:0f:c5:10:d9:6e:8f:0d:3f:30:fc:ac:fc:e1:
34:93:ae:9a:e7:42:15:0e:18:c8:b0:30:e6:0a:57:e5:e0:56:
3a:fc:65:13:45:ce:5b:2f:21:60:e3:6b:ea:0d:c0:d6:aa:5b:
43:95:76:82:9b:f7:b4:bf:6b:79:88:05:1a:72:3f:2c:36:f1:
9f:e2:4e:61:c0:88:77:69:41:97:62:02:cc:79:2c:7f:44:af:
44:a5:43:cc:75:50:10:64:a0:96:e0:1d:05:9f:b5:e4:8c:6e:
79:fb:6f:f7:c1:70:93:a4:6d:b1:67:23:a6:a5:17:71:cf:16:
65:9c:b2:2f:49:a3:ad:3a:6d:54:a3:45:43:be:89:fc:31:94:
50:ed:c7:c8:55:61:ba:a7:c6:b8:49:c0:37:6e:07:a0:2a:b8:
c7:92:dc:08:45:3b:bd:22:ba:20:a4:9f:2c:ba:c1:5c:c8:63:
4b:8d:d2:66:4a:2a:1e:c2:37:d9:9e:78:3e:db:48:b3:71:53:
f0:70:5b:3b:0f:47:16:f2:da:69:1e:7b:18:44:ec:3d:ac:45:
32:85:86:7c:54:4c:cc:9e:2f:4f:0b:2c:3e:ab:a5:c4:df:a6:
12:35:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:08 2026 by rpki-client