
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa
File: bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa (raw, json)
Hash identifier: 5MG2Tu5WEV55ewFPwGjLDrCn1AtLlv1C7vhag4SHpPI=
Subject key identifier: EF:16:14:02:68:65:27:E3:57:A0:6D:8B:BA:7C:FA:A4:6C:3E:B1:F9
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B84E7905779ADB05E6E60A140
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa
Signing time: Tue 14 Oct 2025 13:00:37 +0000
ROA not before: Tue 14 Oct 2025 13:00:37 +0000
ROA not after: Mon 12 Jan 2026 14:00:37 +0000
asID: 397212
IP address blocks: 2620:74:2a::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:84:e7:90:57:79:ad:b0:5e:6e:60:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 14 13:00:37 2025 GMT
Not After : Jan 12 14:00:37 2026 GMT
Subject: CN=6da58ff4-9075-454b-b7af-36f4051155cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:df:57:01:c5:35:c1:f5:73:ba:7e:59:83:
0f:69:c6:27:41:65:cf:ec:0c:08:b3:df:d8:b7:d8:
1f:95:d6:71:4a:92:ff:a6:05:b1:2d:5b:71:07:11:
5e:14:3a:87:46:f2:ed:3e:1b:59:eb:6a:6e:19:a4:
20:10:cf:d0:c6:35:d5:80:a0:9c:bc:5a:b2:49:c2:
8f:44:44:92:53:48:51:cc:e1:73:fd:51:e3:1a:16:
08:3d:e0:22:cc:d0:c2:3c:6e:09:5e:9a:e7:f9:5a:
51:77:d2:6e:84:93:80:29:7e:31:c8:bb:f3:f7:09:
45:4c:90:d0:b8:28:e5:da:a2:41:c8:31:7f:d5:e5:
e6:0e:42:11:06:23:34:c6:9d:e2:e0:50:44:f8:4d:
96:ee:31:5b:aa:68:89:58:56:0e:38:b6:a9:5d:05:
0d:e2:ef:f9:68:64:e0:ac:b9:a0:a0:51:41:14:d8:
cf:25:25:76:71:ea:9e:c0:02:b9:7a:fc:d4:8a:27:
ae:60:60:26:19:b6:87:7d:a8:30:3d:c8:56:af:e0:
c1:03:00:43:a1:87:15:92:f8:b2:96:38:06:75:67:
9c:5b:3c:41:92:f4:d6:66:52:9b:9a:11:fb:29:38:
53:48:86:2d:65:93:64:0b:bc:f1:f8:16:7f:d5:5c:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:14:02:68:65:27:E3:57:A0:6D:8B:BA:7C:FA:A4:6C:3E:B1:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:dd:07:fe:a4:f6:0b:1b:e5:39:9b:c8:97:c0:36:94:99:95:
d2:68:a9:d2:a0:0c:a0:27:d3:de:15:1e:de:fb:3c:cc:47:f9:
b8:a9:25:59:a8:56:63:a7:a6:6c:d2:10:f1:58:f4:24:a1:92:
23:91:51:aa:48:ec:7d:7b:45:b5:9f:93:f8:1c:5c:30:09:a8:
f4:6c:67:48:7d:76:d5:ab:3a:34:df:4f:6c:bf:40:51:34:1b:
fa:27:e1:4b:b0:92:74:7c:d6:dd:c2:4f:4b:d8:88:52:89:2d:
96:87:11:c5:6f:ff:0e:a1:49:b4:73:ed:6d:41:b5:9a:f4:ed:
5c:90:a1:c2:f8:a3:09:07:45:ee:c7:66:e0:d1:2a:4e:cf:67:
fe:3a:8f:56:90:5c:54:f5:c5:69:93:bc:06:8d:a9:72:e8:97:
66:33:69:1f:1f:0f:f9:03:1d:b8:97:8a:e6:71:0c:b1:96:72:
19:57:55:9a:a2:e1:c6:2e:f7:fa:e0:c6:e2:e4:2c:d8:c8:54:
ea:0a:36:d6:12:08:73:60:83:de:2c:94:28:e1:c5:f0:28:76:
e8:95:94:d0:55:68:e5:06:0c:7e:4d:dc:0a:0e:7e:65:8d:8e:
ff:16:f2:a5:1f:d6:72:8a:32:d3:f9:6f:4a:83:08:bc:65:96:
f3:42:a0:dc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55BXea2wXm5goUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
NmRhNThmZjQtOTA3NS00NTRiLWI3YWYtMzZmNDA1MTE1NWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBLfVwHFNcH1c7p+WYMPacYnQWXP7AwIs9/Y
t9gfldZxSpL/pgWxLVtxBxFeFDqHRvLtPhtZ62puGaQgEM/QxjXVgKCcvFqyScKP
RESSU0hRzOFz/VHjGhYIPeAizNDCPG4JXprn+VpRd9JuhJOAKX4xyLvz9wlFTJDQ
uCjl2qJByDF/1eXmDkIRBiM0xp3i4FBE+E2W7jFbqmiJWFYOOLapXQUN4u/5aGTg
rLmgoFFBFNjPJSV2ceqewAK5evzUiieuYGAmGbaHfagwPchWr+DBAwBDoYcVkviy
ljgGdWecWzxBkvTWZlKbmhH7KThTSIYtZZNkC7zx+BZ/1VweJQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO8WFAJoZSfjV6Bti7p8+qRsPrH5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI5OTkxZjEtNWZiZi0z
M2Y2LWE2YWItNDBiNjBiOTdiOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBh3Qf+pPYLG+U5m8iXwDaUmZXSaKnSoAygJ9Pe
FR7e+zzMR/m4qSVZqFZjp6Zs0hDxWPQkoZIjkVGqSOx9e0W1n5P4HFwwCaj0bGdI
fXbVqzo0309sv0BRNBv6J+FLsJJ0fNbdwk9L2IhSiS2WhxHFb/8OoUm0c+1tQbWa
9O1ckKHC+KMJB0Xux2bg0SpOz2f+Oo9WkFxU9cVpk7wGjaly6JdmM2kfHw/5Ax24
l4rmcQyxlnIZV1WaouHGLvf64Mbi5CzYyFTqCjbWEghzYIPeLJQo4cXwKHbolZTQ
VWjlBgx+TdwKDn5ljY7/FvKlH9ZyijLT+W9Kgwi8ZZbzQqDc
-----END CERTIFICATE-----
Generated at Wed Oct 29 11:51:06 2025 by rpki-client