
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
File: 3bca3994-29ef-3370-82e1-27cd8e63489e.roa (raw, json)
Hash identifier: eS4S2h1b9UF4GXq9A3OWUDH+HJFjpDzepaJUEO7vRT0=
Subject key identifier: CB:77:51:C0:EE:D9:E8:60:53:5D:1A:2B:8D:20:C8:82:67:B5:9F:C1
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F4328584ADA9BD32C4FACAF10BC332000
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
Signing time: Thu 14 Aug 2025 13:00:41 +0000
ROA not before: Thu 14 Aug 2025 13:00:41 +0000
ROA not after: Wed 12 Nov 2025 14:00:41 +0000
asID: 0
IP address blocks: 2602:fd10:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:da:9b:d3:2c:4f:ac:af:10:bc:33:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Aug 14 13:00:41 2025 GMT
Not After : Nov 12 14:00:41 2025 GMT
Subject: CN=28623858-6283-4923-9762-cf5cbbbd0127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:f9:a2:91:12:ed:c4:a9:ed:8c:c1:f4:0c:
28:8c:41:75:09:87:95:8b:00:d5:4c:ef:05:66:23:
e0:5b:fa:30:bd:b1:37:c4:98:44:80:50:93:29:ca:
e7:f5:d4:f8:64:8e:22:3b:a3:93:be:50:b4:70:97:
4e:67:ff:e8:1f:ad:22:26:a8:95:f1:0a:26:5d:5c:
bf:dd:c9:ac:d5:3c:e6:b6:34:97:52:78:60:2d:01:
1a:9e:a9:be:ae:8c:d6:6a:71:29:3e:4a:dd:e1:25:
d5:8f:3f:d0:ca:94:a0:b8:87:b0:28:22:72:76:b4:
9f:bf:57:af:88:80:90:b2:72:2a:23:14:41:70:81:
3d:a9:2a:b4:80:96:c2:81:2c:ee:c5:cd:ec:83:74:
a0:44:d5:c8:90:28:84:61:e3:9e:00:51:2f:97:8d:
f1:18:f9:cf:2f:a4:3d:4d:48:9a:72:12:0d:8e:be:
1d:76:12:13:d7:a8:07:c3:31:88:8d:88:74:cb:82:
2e:3e:24:fa:77:d7:55:2b:8f:68:91:6a:30:52:71:
ab:2f:1f:87:24:bb:4d:5b:b2:ce:72:17:81:1f:79:
c9:9e:4a:fd:0c:7a:08:db:ab:ba:27:38:4a:91:24:
91:17:39:14:79:05:18:00:6a:71:d9:c2:7b:4f:2c:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:77:51:C0:EE:D9:E8:60:53:5D:1A:2B:8D:20:C8:82:67:B5:9F:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ad:8b:59:a3:94:de:f3:47:2e:cd:8d:20:3a:fb:67:47:30:
21:df:0e:fe:0b:d4:1b:b4:17:40:ab:80:55:45:11:84:43:ad:
61:21:91:9a:55:06:0e:00:94:7e:19:cf:1a:b3:19:b3:0c:a9:
cd:d8:b4:42:4e:fc:29:6e:a4:63:34:6b:53:40:f0:3b:93:52:
d4:59:ad:c6:51:07:91:ad:85:8e:d6:f2:7b:ea:0c:4e:db:e7:
57:57:bd:9d:6a:52:b4:62:0b:76:86:ed:e2:dd:fe:0c:de:f3:
86:57:fc:c3:0b:35:bd:db:b3:bb:84:7b:a9:f4:c9:b0:1f:75:
d5:45:d9:f3:06:73:81:9d:3f:7e:77:e2:c7:52:a2:21:0b:30:
aa:9b:72:66:7b:a4:b6:f2:6c:8b:78:7b:79:9c:79:7f:ec:7c:
07:01:95:97:a0:a8:24:d2:0c:0f:fb:e0:a1:fe:44:a8:e8:35:
2e:44:f4:d8:64:b2:38:12:aa:13:25:57:d3:b5:45:e5:ca:12:
35:db:07:79:01:6e:b2:f6:3e:11:48:f9:5f:ef:2c:13:23:2d:
19:79:4e:0a:2d:d4:93:67:da:8d:56:09:20:f9:0e:17:e9:08:
f9:44:c9:c7:3a:d7:bc:72:87:07:99:c5:ae:d1:12:7b:7a:ef:
69:9c:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 03:11:08 2025 by rpki-client