
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ca8f6dbc-0f9f-3c23-9268-d32dc161c8ac.roa
File: ca8f6dbc-0f9f-3c23-9268-d32dc161c8ac.roa (raw, json)
Hash identifier: 8JYYHdy67a7ZE00EKX4WggdS7Bs2ODxVG5ZMwzhKBr4=
Subject key identifier: C4:84:D3:CC:D9:55:AA:9B:9E:CB:15:65:5D:C5:EC:05:DB:35:B7:A0
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F4328584B41E716C4CCCA93BAB0930300
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ca8f6dbc-0f9f-3c23-9268-d32dc161c8ac.roa
Signing time: Sat 20 Sep 2025 13:00:41 +0000
ROA not before: Sat 20 Sep 2025 13:00:41 +0000
ROA not after: Fri 19 Dec 2025 14:00:41 +0000
asID: 5645
IP address blocks: 104.246.128.0/17 maxlen: 17
104.246.128.0/20 maxlen: 20
104.246.144.0/22 maxlen: 22
104.246.148.0/24 maxlen: 24
104.246.149.0/24 maxlen: 24
104.246.150.0/23 maxlen: 23
104.246.152.0/21 maxlen: 21
104.246.160.0/22 maxlen: 22
104.246.164.0/22 maxlen: 22
104.246.168.0/23 maxlen: 23
104.246.170.0/23 maxlen: 23
104.246.174.0/24 maxlen: 24
104.246.192.0/20 maxlen: 20
104.246.208.0/20 maxlen: 20
104.246.224.0/20 maxlen: 20
104.246.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:41:e7:16:c4:cc:ca:93:ba:b0:93:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Sep 20 13:00:41 2025 GMT
Not After : Dec 19 14:00:41 2025 GMT
Subject: CN=d12d5036-3422-438f-84c7-e30bbcefe875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:50:58:71:e8:5c:bc:3a:e3:04:4a:f1:df:
d1:74:d6:0d:05:16:eb:f6:78:f8:fd:60:af:d4:b1:
c1:f5:19:68:d9:9b:37:95:c5:0e:03:80:d5:18:1b:
39:0a:11:86:56:e6:98:ba:5a:52:23:b2:bc:ab:0d:
73:cc:ad:d2:d9:f0:68:99:16:da:c1:51:81:ba:a7:
4c:98:2b:57:e9:16:92:ef:85:43:56:8e:73:98:f1:
14:56:a1:26:e1:e2:d9:bf:04:0f:6f:35:8d:8d:51:
8a:aa:08:83:8e:7e:83:fd:57:88:eb:49:4a:00:8f:
a4:08:e0:fb:48:8c:3e:5b:94:aa:6b:fe:16:40:1e:
c5:61:2f:19:3d:60:22:c4:e1:4a:30:d1:0e:8f:a8:
ce:a1:23:8f:e3:7c:20:db:02:78:83:1e:12:bf:5a:
dc:46:f8:35:fc:92:3a:46:7c:40:4f:53:0d:31:22:
a9:2d:09:81:8f:80:9f:05:35:bd:98:44:0d:41:7d:
2b:f6:b9:9e:09:85:89:89:35:61:04:71:f6:24:f4:
4b:06:85:b0:0f:56:dc:f6:77:79:36:2e:45:00:eb:
d9:4b:67:a0:aa:51:c6:c1:b2:81:70:a8:97:a2:f9:
2b:67:bf:0d:d2:e6:f1:a7:15:b4:a5:3d:0b:24:38:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:D3:CC:D9:55:AA:9B:9E:CB:15:65:5D:C5:EC:05:DB:35:B7:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ca8f6dbc-0f9f-3c23-9268-d32dc161c8ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
104.246.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:51:88:d4:49:93:13:27:57:21:47:d7:0b:57:e0:44:6e:7e:
7b:f5:47:d1:5a:db:95:f5:13:3e:8e:bb:84:0e:b8:30:14:75:
e9:41:23:3b:ba:57:b8:03:32:f5:d9:5f:5c:e0:e4:cb:e6:25:
db:1d:ca:c6:6e:76:b5:83:c9:e4:4c:76:1b:5b:92:23:a7:83:
9a:9d:66:c4:b5:fe:42:0d:32:eb:1a:17:51:4e:b7:30:c0:cf:
45:5d:96:f4:09:ce:54:a9:d6:4e:0d:3c:8c:fd:5e:ea:32:5e:
8d:78:19:d5:e6:c4:c6:1b:ee:4d:78:5d:df:c0:56:3f:28:cd:
04:47:f6:2a:22:20:52:da:5e:b9:bf:3f:39:be:ee:93:62:7e:
f9:2c:b4:3c:e9:be:c9:29:f3:b1:43:2d:8e:a9:4f:98:03:09:
fd:28:db:71:db:6a:74:2b:8c:7c:b2:87:ab:70:28:37:4d:91:
a6:6c:13:e7:14:fd:12:3e:ef:4e:50:b0:7f:d9:d4:c5:84:d6:
98:bb:28:b3:26:56:20:26:18:c3:16:2b:3d:40:00:ab:aa:25:
18:81:28:fc:c4:32:c4:ef:f8:ad:e7:d8:bd:1e:0e:26:1e:61:
74:8c:35:17:f2:d3:13:10:20:1f:3c:26:78:fe:af:c9:4b:e7:
cd:5a:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:36:17 2025 by rpki-client