
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa
File: 6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa (raw, json)
Hash identifier: j2NGTodA5rXkWxuv/sY2JIxBLgK0L9QCrBHIP6AErvs=
Subject key identifier: 25:E1:65:1D:59:78:09:F1:B6:1B:B3:9C:2E:97:0C:C2:F0:00:EB:B4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584AF0F15AE40FAC954D3C9C0AC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa
Signing time: Fri 22 Aug 2025 13:00:41 +0000
ROA not before: Fri 22 Aug 2025 13:00:41 +0000
ROA not after: Thu 20 Nov 2025 14:00:41 +0000
asID: 36626
IP address blocks: 2620:74:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f0:f1:5a:e4:0f:ac:95:4d:3c:9c:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 22 13:00:41 2025 GMT
Not After : Nov 20 14:00:41 2025 GMT
Subject: CN=87d4d98c-0d64-4668-a36f-149291e68917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:dd:0b:9e:15:b9:fc:1b:f9:af:69:de:c5:
05:52:15:ed:67:87:2e:c8:49:85:13:fe:c9:f5:f7:
51:37:1b:6e:30:c0:b5:d1:3c:0b:67:fa:08:e8:04:
0e:6a:d0:c3:06:a5:2f:8a:8b:c5:0d:8c:47:df:18:
bd:48:2c:73:ce:cf:3d:23:e2:a3:68:0a:b9:e2:e9:
13:2d:57:ee:3d:0a:14:11:9b:ea:1e:74:88:9a:50:
e2:0e:e9:d3:e4:da:22:4e:4a:f7:66:6d:c1:fc:b3:
7d:d6:c0:78:dc:ff:7c:c9:78:01:fc:e5:c3:57:72:
bc:38:4d:90:d3:4c:56:91:10:42:9e:33:d1:4e:95:
89:a2:a5:3d:65:55:a6:05:6b:aa:62:01:9a:a4:6a:
7a:eb:cc:2a:81:59:f1:ab:b2:84:fb:2d:58:46:0d:
7f:06:70:b0:8b:f4:9b:d1:63:3d:d8:3f:e1:35:bd:
39:04:1b:ff:bd:c0:20:e0:d9:5a:76:b7:d4:6c:4c:
e2:72:a9:1f:72:a6:99:53:80:c2:19:51:a2:75:8c:
64:90:58:da:74:43:40:b8:59:32:81:08:a1:3a:16:
13:fc:18:f5:9a:cc:8d:45:3b:e5:e7:a3:42:48:86:
2d:dc:a4:61:b3:fc:1e:bf:9d:5d:f6:f5:b4:be:72:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E1:65:1D:59:78:09:F1:B6:1B:B3:9C:2E:97:0C:C2:F0:00:EB:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:63:f6:51:1f:18:8c:40:38:a7:b0:26:60:ea:a1:08:62:75:
ed:1b:d5:2c:b4:40:cd:ce:95:b1:5c:33:97:36:eb:5d:a9:21:
68:f7:1a:d0:1b:38:fc:4e:4f:25:1f:36:04:fa:b1:8a:53:fc:
ca:2b:25:9f:fb:f8:1e:b0:55:8a:4b:ec:b2:2c:ce:de:53:96:
d6:fe:11:a8:a1:43:96:2b:51:0f:34:cd:01:28:42:c0:b1:02:
5c:c7:70:ed:9a:58:85:0c:99:5a:3d:c1:e7:f3:32:75:3a:ea:
aa:8e:02:ae:bf:35:28:ea:3b:53:2d:49:54:76:1a:bb:6a:93:
91:1a:dd:95:38:31:d9:f5:34:42:32:dc:70:52:c6:c6:3c:50:
04:4a:91:bf:a4:95:f6:67:ef:af:b5:af:7b:ed:37:c2:66:f2:
53:26:f3:30:a7:c5:02:aa:2c:7a:16:87:1e:d3:9c:5f:05:b7:
dc:5f:d3:86:5c:a7:0e:f8:45:cd:8f:05:7e:6b:9e:e4:6c:7b:
a2:fb:09:3e:d8:e9:1d:a1:ed:7c:08:26:4d:c9:a4:0f:f4:95:
52:bd:b7:cb:6a:56:94:02:bc:f4:01:c0:62:7d:cd:22:79:2e:
e2:ce:ad:58:b9:c9:bb:60:9f:7f:44:ed:9d:16:be:c9:3e:8d:
51:2d:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:03:11 2025 by rpki-client