
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa
File: 9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa (raw, json)
Hash identifier: 2kIksVHhxVzM+KSxGzE0L0uKzUAzGL+8QvIgU18LnuI=
Subject key identifier: D3:26:F9:08:00:99:89:25:99:3D:D4:B5:AF:92:C5:9B:75:E3:15:25
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B84E793EE543CB322CE390BE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa
Signing time: Tue 14 Oct 2025 13:00:37 +0000
ROA not before: Tue 14 Oct 2025 13:00:37 +0000
ROA not after: Mon 12 Jan 2026 14:00:37 +0000
asID: 36624
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:84:e7:93:ee:54:3c:b3:22:ce:39:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 14 13:00:37 2025 GMT
Not After : Jan 12 14:00:37 2026 GMT
Subject: CN=5bc29593-55fd-476a-94f9-7b75f8fea51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:14:14:18:33:ce:c5:09:9f:04:49:67:4c:
ed:fb:7d:5d:e2:30:ab:e8:6a:5d:cf:06:83:3b:47:
24:7c:b7:f0:b2:d4:02:1f:c5:a4:72:ad:c9:43:e4:
95:0b:07:67:34:47:6a:c5:6d:2e:9e:a8:6a:1e:d0:
d3:cc:79:c4:ac:18:42:37:84:e9:d7:a5:63:2d:75:
70:21:c5:1a:fa:7a:02:cd:67:94:ae:53:e9:27:08:
fa:a4:7a:74:e2:04:4d:56:c2:c8:a4:4c:87:ef:16:
f2:09:16:d7:81:87:c1:2a:24:2f:f4:f5:ea:98:e6:
c8:c8:7c:07:1d:bb:d7:0a:8d:79:87:6a:24:80:6c:
05:45:b4:99:35:49:74:68:27:30:0b:a2:78:22:20:
84:f5:de:10:88:b5:ea:f3:c0:56:bc:0b:0a:69:8d:
1e:c2:bc:65:b9:f6:b1:83:b7:5d:71:aa:cc:3a:6b:
e6:f9:d4:4d:c7:f3:c8:89:1d:6a:22:d2:c8:3e:c2:
56:cb:a7:90:ff:2d:9d:c4:e5:2d:f7:cf:f7:50:0b:
e3:c9:2c:78:00:e3:ee:11:c6:0d:c1:1d:e2:ca:e3:
78:62:24:16:3c:9c:e1:ba:d7:c8:16:9c:15:b5:8e:
0a:9c:a7:99:48:c6:90:c8:8a:e5:3f:89:91:05:24:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:F9:08:00:99:89:25:99:3D:D4:B5:AF:92:C5:9B:75:E3:15:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:fd:ea:78:87:d1:ca:73:1b:25:46:94:87:a6:5b:23:3d:81:
58:c5:0f:c4:87:45:59:41:e3:4c:a1:33:df:21:9c:d0:92:09:
55:da:af:2a:bc:1b:df:0e:bc:c3:20:ea:d7:1c:7f:64:c9:82:
bb:7d:72:da:e8:14:a7:7b:92:c1:8c:09:e3:6c:e1:04:82:d0:
90:de:b3:cd:9a:71:6f:ca:28:82:56:72:c0:8c:d2:aa:f1:95:
9a:2a:ab:7b:9a:12:71:9d:65:64:0e:f6:cb:8f:be:96:f8:87:
49:95:96:19:48:67:1e:d4:09:16:17:ae:41:64:d8:7e:c9:04:
93:12:5a:5d:cc:f2:49:c2:b5:50:f7:95:bb:e8:37:36:3f:0b:
17:f1:72:90:a8:41:cd:a6:22:f1:b8:8a:4f:fe:7d:81:7d:d3:
a9:1d:4a:bf:40:f8:86:fb:d9:6f:9a:ec:ef:bf:50:22:12:0c:
b3:b5:e8:32:20:20:e5:6f:a0:2f:df:a4:fd:89:e5:89:f6:e4:
a7:48:f3:56:49:96:86:e9:90:94:d2:8d:7e:f4:70:97:17:15:
ca:5c:96:8e:f2:57:ff:e3:84:bc:3c:53:b3:cc:8a:5e:d2:63:
b4:21:05:d7:66:cb:4c:ba:21:14:40:e4:0f:ff:a4:b5:c4:5d:
c0:a0:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:05:57 2025 by rpki-client