
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed674d8a-6248-3588-b1e8-430477408621.roa
File: ed674d8a-6248-3588-b1e8-430477408621.roa (raw, json)
Hash identifier: +YHpVKFdxnzvz3ZgPBKNRvbjwiXwqA4bRn/k3WLr4nU=
Subject key identifier: 7F:A7:92:26:CA:1D:89:EF:0C:75:AA:48:B4:FB:48:D8:29:8F:37:33
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584B6E91F97DDD2A46C7E32D2F40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed674d8a-6248-3588-b1e8-430477408621.roa
Signing time: Mon 06 Oct 2025 13:00:41 +0000
ROA not before: Mon 06 Oct 2025 13:00:41 +0000
ROA not after: Sun 04 Jan 2026 14:00:41 +0000
asID: 397630
IP address blocks: 172.96.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6e:91:f9:7d:dd:2a:46:c7:e3:2d:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Oct 6 13:00:41 2025 GMT
Not After : Jan 4 14:00:41 2026 GMT
Subject: CN=2bc68122-3670-4cc3-876a-62ac6d779f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:40:24:dd:aa:24:23:92:5b:e2:ff:99:00:
45:75:cb:64:d4:1d:9e:d5:12:60:44:ed:06:b7:0b:
32:ba:2f:f1:97:17:63:f8:70:41:df:2a:e2:6f:82:
56:ba:88:8f:18:6b:86:08:ff:45:29:bf:1a:f1:01:
09:0d:ba:e0:4d:0f:02:20:0d:c3:7e:14:74:af:72:
45:c5:11:f0:f4:2b:a3:07:7b:37:58:ba:ec:b9:5c:
14:87:72:2b:46:ed:24:56:de:0b:e1:7f:0f:22:5c:
c9:43:e6:30:af:51:c9:73:7c:2c:58:bb:66:1a:8a:
44:18:26:ca:95:5d:6f:49:33:bf:42:77:f7:96:25:
db:68:a0:9c:ab:28:a1:4f:df:41:be:38:51:3e:eb:
d0:de:ee:62:e4:61:5a:0b:8d:fb:73:16:00:dd:c1:
e4:94:3d:11:f2:5f:42:ec:1e:77:c7:e5:c2:44:80:
c6:bf:47:b0:36:89:ba:2e:9e:8b:68:d5:e2:6c:99:
50:65:61:1c:c6:f0:56:c1:a3:6c:59:41:14:87:1a:
53:cf:99:c1:07:d2:96:f9:6f:3d:49:15:79:fe:b9:
ba:97:69:9d:72:79:c7:9c:a4:4b:9c:d7:58:80:76:
07:0a:30:02:a0:5e:b6:71:ad:54:ee:c1:e2:2c:31:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A7:92:26:CA:1D:89:EF:0C:75:AA:48:B4:FB:48:D8:29:8F:37:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed674d8a-6248-3588-b1e8-430477408621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:06:7a:27:d6:05:5c:c8:84:85:bb:d8:e4:57:b9:92:18:dc:
8a:85:30:da:39:f9:b6:35:58:18:6d:92:78:a9:9f:40:75:51:
18:b2:99:3d:22:26:ca:8d:9e:96:19:24:06:de:b9:db:bc:c2:
0e:34:50:8c:32:0c:e7:33:f2:4e:66:c1:9a:04:57:1d:a4:be:
fa:f2:8c:0c:56:aa:77:19:43:12:2b:67:d0:be:e3:a1:12:e7:
a3:e0:19:c9:16:3f:18:e3:62:a3:c7:a5:56:44:fc:a3:f5:f0:
99:cd:de:68:8a:63:f6:aa:d0:24:a3:33:e5:fd:e0:19:fd:33:
63:af:0b:e6:cd:e6:ad:67:dc:46:2a:a3:b4:eb:69:94:74:91:
38:a5:f1:6c:e6:74:ba:af:72:e4:f1:fe:73:16:d1:43:c5:4d:
24:ea:49:37:59:a5:4f:bf:35:0b:0e:2e:b4:f6:fb:d4:40:a2:
26:da:26:e9:5e:96:bd:52:8d:b3:82:be:95:9c:7b:40:ed:48:
f3:fd:4d:7d:01:8a:d1:b3:66:51:7c:2f:f8:ef:7a:16:9d:d5:
38:ec:d8:65:6c:99:a0:c4:49:97:e8:09:81:72:7c:28:92:6f:
b5:c4:c7:05:ab:c8:ff:d7:f2:0a:4d:4d:a7:f4:6a:f5:60:51:
31:22:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:32 2025 by rpki-client