
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa
File: 32f15bc9-1c3d-3499-9769-540df2da6c5e.roa (raw, json)
Hash identifier: RMuBogpzS1m1+FJ4H+RcM3qHvTqAQrbnMRi9zfKStIo=
Subject key identifier: 13:C0:CF:3F:A9:79:72:B7:D2:D4:77:3A:03:50:A0:C4:F8:EC:43:FB
Certificate issuer: /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial: 010D0C9F4328584BA2378DDA84B2FC955853E200
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa
Signing time: Sat 25 Oct 2025 01:00:31 +0000
ROA not before: Sat 25 Oct 2025 01:00:31 +0000
ROA not after: Fri 23 Jan 2026 02:00:31 +0000
asID: 5400
IP address blocks: 2606:f100:d400::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a2:37:8d:da:84:b2:fc:95:58:53:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Validity
Not Before: Oct 25 01:00:31 2025 GMT
Not After : Jan 23 02:00:31 2026 GMT
Subject: CN=483c5f1a-2e0e-4cba-a540-b15c7930be0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:22:9c:a5:12:2b:71:97:30:76:84:0c:b9:
54:14:40:66:c8:96:02:17:7d:31:34:ec:78:64:55:
41:9c:de:05:02:4e:2b:bc:ee:9b:eb:32:7d:8e:db:
29:2b:ac:35:97:51:30:cf:82:37:4e:83:f5:31:ae:
b2:b1:4e:ad:e9:d1:a9:0e:12:69:1e:f5:37:13:d8:
5a:6c:51:96:19:13:20:a9:2c:0c:b5:1c:a5:0f:d8:
19:a9:42:07:33:42:bc:b9:cd:8f:ba:65:3f:a2:8b:
af:9f:54:73:db:a7:65:de:c9:55:29:9d:78:ab:17:
e5:eb:2b:46:d3:48:77:09:fc:40:87:68:56:b8:89:
47:60:bb:1d:66:f5:9a:f0:c5:de:00:35:70:bd:a0:
58:b1:02:10:34:a4:76:59:41:18:90:1a:34:11:ff:
1d:c5:a0:5d:fe:63:ff:c0:0a:50:aa:6c:5d:a6:3b:
8f:d7:d4:fd:0c:a1:42:67:0a:bb:c6:e4:a7:79:c2:
c5:eb:17:82:9a:cf:13:f6:80:da:bd:c5:60:f0:a7:
90:bb:99:41:65:3d:83:27:17:9c:8a:b3:8e:4f:81:
1b:68:c9:5d:5e:39:19:2d:3b:f4:79:4f:b4:e3:29:
fc:d7:b0:ad:ca:90:50:8d:dd:fb:76:48:7d:7e:fd:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C0:CF:3F:A9:79:72:B7:D2:D4:77:3A:03:50:A0:C4:F8:EC:43:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
X509v3 Authority Key Identifier:
keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f100:d400::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:0d:0b:a7:84:b3:76:42:c1:2d:be:94:2b:84:4e:22:c5:b5:
64:9c:57:b8:92:79:07:00:da:c2:f8:c4:7e:7e:dc:3a:5a:01:
b6:fd:d0:9a:85:bd:33:75:39:f1:ca:88:20:50:e2:fc:29:b1:
d9:d4:d6:0c:6d:15:78:7a:e7:5a:a7:ec:01:61:2b:88:75:73:
52:cd:bc:b4:2e:6b:11:69:e3:da:dc:c7:32:ce:a3:c7:40:e1:
4f:23:46:7d:52:46:ac:fb:71:63:6c:79:af:91:6d:ac:e9:f0:
75:90:97:ea:e8:8d:1a:35:82:b8:d0:49:72:3f:a0:bc:3b:ab:
0a:02:6b:61:a2:f4:b9:f2:bf:11:ea:3a:90:26:38:54:3e:13:
4a:2a:8e:a6:0a:45:51:cf:30:01:70:29:15:fe:57:ac:0a:73:
b0:ad:02:8a:0e:00:60:d0:40:25:20:49:94:80:08:97:e3:80:
d9:ca:12:ba:a5:2d:0d:96:50:95:8b:38:57:f1:f0:dc:6e:20:
88:40:5c:51:4e:3e:b3:52:63:9c:64:4a:e0:3d:7b:f4:87:b6:
8d:3a:c8:70:a7:e9:c1:f4:78:51:11:6f:7f:cb:77:43:00:67:
1b:55:be:76:e6:53:86:40:76:8d:ec:00:d8:0b:3b:3f:ad:6c:
27:ad:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:44 2025 by rpki-client