
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/87d71f1f-6031-3c07-a5be-87011997fac7.roa
File: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (raw, json)
Hash identifier: 2iN58G3AZvVlOrxEKyf5r6DukcCF7lIPW8iPw4fx9YA=
Subject key identifier: 35:5B:8A:4F:E8:7E:85:70:3C:11:D0:50:40:8D:AC:0F:80:42:47:1A
Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3
Certificate serial: 010D0C9F4328584B41E7179DACCAB93A482E3A00
Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/87d71f1f-6031-3c07-a5be-87011997fac7.roa
Signing time: Sat 20 Sep 2025 13:00:41 +0000
ROA not before: Sat 20 Sep 2025 13:00:41 +0000
ROA not after: Fri 19 Dec 2025 14:00:41 +0000
asID: 17050
IP address blocks: 2602:817:9000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:41:e7:17:9d:ac:ca:b9:3a:48:2e:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3
Validity
Not Before: Sep 20 13:00:41 2025 GMT
Not After : Dec 19 14:00:41 2025 GMT
Subject: CN=c346aba5-bbc5-4af3-90af-81c62b179c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:18:84:5d:31:8a:64:04:65:0b:0b:90:42:
c8:74:eb:c0:78:99:13:da:a1:00:61:7e:9a:9d:1a:
96:60:0c:1d:6a:ac:dc:65:fc:44:2c:e6:db:d2:e8:
27:c6:54:92:9b:da:fd:6c:e1:1d:7f:d6:b8:8d:23:
17:28:20:98:9c:70:1d:f0:3b:db:99:4e:6d:33:88:
c2:e5:7d:ed:21:5c:39:df:58:bc:52:79:4b:17:d6:
6b:33:68:bb:9a:5c:5e:48:7f:0f:e6:7f:17:14:61:
68:15:63:20:b4:a3:06:a7:d4:3e:35:3a:38:88:a4:
87:48:6a:4e:5d:f1:4e:d4:3f:31:6a:92:40:7f:87:
ee:62:37:c0:34:e6:ee:b0:d1:aa:c1:5c:e2:23:92:
a6:c2:de:a2:28:91:62:6b:d0:60:1b:c2:5e:fb:86:
c0:29:a9:de:fd:5a:05:37:3f:1c:ab:d4:f2:13:22:
67:13:05:25:55:d5:da:94:9d:ca:a4:f3:3c:c8:09:
7e:61:55:86:08:2c:cd:d2:5c:79:ed:51:c1:4b:fd:
d8:a9:ea:ae:33:36:a9:fe:10:9d:df:12:72:a2:02:
3c:45:84:b7:8a:0e:c0:fd:c6:9e:bd:96:f9:61:16:
3d:22:10:9d:3a:c7:0c:b9:2a:f1:64:66:ee:6e:1f:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5B:8A:4F:E8:7E:85:70:3C:11:D0:50:40:8D:AC:0F:80:42:47:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/87d71f1f-6031-3c07-a5be-87011997fac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl
X509v3 Authority Key Identifier:
keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:817:9000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:7b:2d:b1:79:37:b0:19:4a:66:81:b1:48:82:e3:16:f5:7a:
27:e1:2d:68:94:8e:07:85:da:ee:e3:13:54:ef:f9:69:38:3f:
c9:bb:5a:72:76:13:0c:32:32:b9:4e:10:bf:e9:6a:61:b4:20:
4e:bf:cf:56:f4:21:7c:d3:c3:47:91:e1:12:40:1c:e5:cf:86:
a2:53:ae:4e:0c:45:76:08:c5:f2:8a:68:a7:cd:56:bd:cd:ff:
18:a4:83:25:d6:c7:7c:3f:3d:e1:b3:b8:07:a7:ad:ed:3c:55:
d1:15:53:42:18:71:1e:37:73:47:06:65:0e:92:8b:95:b7:3c:
a7:50:8a:3a:99:71:a3:9e:bd:52:bc:96:29:75:dd:f3:8f:83:
b6:81:48:e1:03:e2:17:e9:6c:5d:7c:2c:55:94:2e:6c:16:72:
b3:19:da:bf:24:66:fc:63:01:32:ca:51:dc:2b:cc:8a:8c:0c:
de:96:11:4b:53:d0:53:24:82:2f:b1:09:9c:a7:d5:62:04:76:
33:a2:bd:a3:05:87:be:28:03:41:12:9f:31:d8:50:05:b2:10:
04:ab:cb:1c:65:37:64:08:65:f5:57:ce:4d:d5:d1:f1:53:59:
1f:36:ef:0a:16:6e:0c:b1:e9:b4:fa:29:19:46:2c:5f:85:5b:
f0:02:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 09:05:08 2025 by rpki-client