
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa
File: 064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa (raw, json)
Hash identifier: dVf0/U0UwEzJGJ0cKgMKL0WU7aGv/A923KntS2zX0HU=
Subject key identifier: 3F:A3:CD:43:10:D0:EF:78:81:79:25:28:3A:A8:F9:DB:02:C9:93:8A
Certificate issuer: /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial: 010D0C9F4328584BA2378E1E40528B7057E49680
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa
Signing time: Sat 25 Oct 2025 01:00:31 +0000
ROA not before: Sat 25 Oct 2025 01:00:31 +0000
ROA not after: Fri 23 Jan 2026 02:00:31 +0000
asID: 5400
IP address blocks: 2606:f100:dc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a2:37:8e:1e:40:52:8b:70:57:e4:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Validity
Not Before: Oct 25 01:00:31 2025 GMT
Not After : Jan 23 02:00:31 2026 GMT
Subject: CN=1d729395-80e8-4edc-b6c3-62674b558884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d7:de:a4:2b:79:34:fd:61:6c:dc:f9:37:85:
4d:73:6d:ee:fb:9f:60:6b:0f:b1:f0:be:8c:63:4d:
4c:4f:71:94:d3:d8:42:08:39:00:bc:dd:c0:34:e7:
23:11:24:f5:27:ce:cc:8a:eb:cb:bf:ec:20:d1:32:
40:0c:cd:9e:76:c9:16:2a:94:6a:a8:33:af:be:92:
39:75:f3:b6:47:ad:5e:e5:4a:57:45:7f:39:77:64:
55:d1:75:57:45:0b:ff:aa:64:96:0b:41:c6:23:5d:
a2:b6:47:7b:85:df:5d:25:ac:d2:09:f9:e7:8f:a4:
6f:8d:d2:dd:ff:e5:04:e8:af:07:dc:fa:7b:bf:48:
b7:4d:aa:45:3e:15:4a:bf:87:6e:cd:24:98:b5:23:
f5:1a:3a:58:f4:6b:42:40:a2:0f:7b:4a:01:ea:7c:
d2:14:ea:d9:18:c7:4d:4c:0b:e6:7e:64:e4:fa:e4:
e8:eb:f5:c2:67:ed:c7:ca:50:c1:ea:92:b2:38:c2:
5a:eb:3f:db:2e:e0:98:42:96:4f:ea:66:49:b4:69:
c3:bf:82:a5:be:06:69:f7:31:7d:ab:f1:22:e5:32:
d4:00:a0:ed:11:23:95:0f:19:78:ac:33:fc:9e:12:
5b:39:f9:e4:3e:b6:88:35:72:e6:20:14:5a:46:ad:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:CD:43:10:D0:EF:78:81:79:25:28:3A:A8:F9:DB:02:C9:93:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
X509v3 Authority Key Identifier:
keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f100:dc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f7:5c:c0:e0:cc:59:50:0d:85:f4:3b:89:e4:d7:1e:3e:9d:
82:36:c2:dd:fa:64:45:51:51:6a:32:18:3e:70:75:5e:7f:22:
e4:02:10:6d:f5:bf:93:31:1f:76:2d:57:b1:c0:54:12:94:25:
73:92:cf:c9:ae:1c:8f:17:d8:28:ed:9a:f1:25:a8:e5:11:3f:
4e:1e:29:d4:d5:38:26:50:76:26:19:fe:08:d1:07:07:17:ac:
71:6b:3c:33:40:04:3f:c2:42:b4:2f:ce:a0:b5:d2:67:55:7d:
7e:a8:39:86:23:80:d9:c7:c0:8b:a6:55:83:3e:9f:16:e8:da:
bc:9b:4e:50:11:bd:24:c8:6e:db:5b:62:77:00:9b:66:84:09:
96:56:84:db:0e:cf:ae:e3:45:61:4a:23:34:b4:a9:f1:74:71:
a4:8a:37:36:92:44:da:27:cf:32:c2:3f:ef:8e:48:b8:4c:2a:
0d:92:67:e3:a9:a6:59:c5:dc:97:0c:46:84:1f:55:fd:b9:9f:
f9:07:e9:7d:2c:fc:e6:54:68:f0:39:6c:05:8f:2e:f6:7b:5d:
7a:c3:53:06:9a:4f:a4:22:d6:98:0a:b8:b4:29:56:fc:6d:41:
90:bb:06:a6:1a:27:27:ef:2a:ac:b9:12:b9:60:5a:0b:2d:29:
a8:6b:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:49 2025 by rpki-client