
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa
File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json)
Hash identifier: MYoiEXG4+mMCki7j/dymOrPfZBLnskO0aUJW31Ubj/E=
Subject key identifier: 4B:0E:8A:53:EA:25:15:15:4E:AE:C1:B0:64:92:69:5D:2A:2D:26:C4
Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc
Certificate serial: 010D0C9F4328584A9E962060FFEF0ED971B76F80
Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa
Signing time: Thu 24 Jul 2025 01:00:50 +0000
ROA not before: Thu 24 Jul 2025 01:00:50 +0000
ROA not after: Wed 22 Oct 2025 01:00:50 +0000
asID: 398191
IP address blocks: 2607:c7c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9e:96:20:60:ff:ef:0e:d9:71:b7:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc
Validity
Not Before: Jul 24 01:00:50 2025 GMT
Not After : Oct 22 01:00:50 2025 GMT
Subject: CN=02b49625-e5cf-425d-9b70-a279f85d5b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:fd:b8:7f:32:be:c1:30:fd:fe:df:05:7c:
81:63:fb:73:f0:d8:22:f6:bd:1b:98:f6:b4:c5:b9:
86:59:21:76:8a:39:5e:45:7f:b7:a4:5b:2e:d5:76:
52:9b:49:28:65:0b:a8:a9:78:2a:23:6a:7f:9f:15:
26:86:9e:70:5a:25:e6:a2:8f:b5:27:76:9c:88:06:
f6:54:e7:dd:23:ae:71:1c:cb:b9:cc:62:aa:25:3a:
62:a2:6f:78:dd:d6:a1:66:c3:4e:93:b7:fb:4e:e5:
24:da:8d:02:52:64:84:e9:54:58:b1:b8:c0:71:29:
1d:56:c5:51:32:22:36:0d:b6:73:6f:09:0d:3b:f1:
c3:75:ff:dc:c5:de:3c:8d:93:05:c0:e5:84:22:79:
2c:43:f8:b5:34:0d:77:5a:70:a5:42:eb:b2:70:58:
63:19:a5:5e:96:34:cb:e3:a7:d0:2f:8d:b8:df:a2:
d5:0d:c4:83:96:74:a6:e6:b0:d0:98:57:81:dc:11:
98:13:87:aa:36:81:56:6e:53:2c:01:1c:6e:0e:e9:
72:db:c7:b0:f8:6d:9c:ef:32:9a:54:f6:d4:d8:64:
c8:c2:99:07:7f:ca:d5:17:fe:24:12:af:73:32:e4:
7b:6c:4d:3b:14:b3:f3:fd:c8:92:f1:34:c5:52:d1:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0E:8A:53:EA:25:15:15:4E:AE:C1:B0:64:92:69:5D:2A:2D:26:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl
X509v3 Authority Key Identifier:
keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:c7c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ac:0f:92:36:dc:87:5f:e9:a4:d6:bc:1d:cf:ed:6b:f6:b7:
62:94:aa:c1:db:e6:45:64:11:f3:ee:d8:d7:15:7d:d4:3c:1b:
d2:a1:86:a5:63:a5:7c:7a:fb:30:1c:f3:6e:38:82:6e:b5:59:
81:50:08:13:40:2e:ca:9c:65:97:8d:39:f6:c2:43:88:d1:30:
1e:26:14:45:6e:b5:8a:32:6e:c4:e6:19:b5:b0:67:4c:5a:e5:
50:af:11:8f:f8:b8:e6:13:ca:f2:77:7b:e3:eb:6f:5a:c5:19:
13:df:45:f8:e1:27:68:30:58:b0:4e:a0:fd:1a:cd:06:cf:56:
1a:f9:92:3d:70:79:e8:b8:7e:eb:fa:00:3d:0f:65:a4:98:e7:
38:04:dc:45:38:f1:d1:65:19:7a:eb:96:59:96:2b:50:2d:c0:
05:ad:9d:d2:bc:1a:81:b7:54:19:20:1b:ec:97:43:cb:32:d9:
f3:6a:ff:8a:a5:47:27:3c:76:94:b3:bb:c7:a6:f1:b0:7e:1f:
30:0a:63:c7:bb:1f:9c:8e:42:4c:61:78:f6:a4:68:bf:c1:85:
57:ef:5d:6f:e5:84:89:54:5f:3b:30:06:79:81:0d:31:a1:37:
99:c7:b0:ec:66:42:45:b5:38:57:c0:61:71:e0:d0:94:67:e7:
54:7a:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:53 2025 by rpki-client