
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa
File: 67048364-819f-3191-853f-4269ffe18a99.roa (raw, json)
Hash identifier: UE5VqhUriowvZPkqh8bZr0VKiVrn4CuvspUy9aVvlto=
Subject key identifier: 60:3B:18:9A:CA:D5:8B:89:FB:55:6F:F5:E2:D0:2C:48:3F:66:55:F0
Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a
Certificate serial: 010D0C9F4328584BAD62546427F46109475E0500
Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 53667
IP address blocks: 2602:f7c5::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:54:64:27:f4:61:09:47:5e:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=07ebe321-dd7f-4336-b02f-f75c7628dcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:16:4f:1f:41:fb:15:9f:0c:f3:9a:68:aa:
48:f0:7d:7c:85:fe:3c:d6:e1:ed:34:70:11:dd:96:
4d:1a:b1:57:66:12:b3:fa:62:13:dd:c4:1b:b3:f1:
14:7c:83:cc:36:6f:07:e5:c9:70:73:cf:31:14:ef:
b7:bb:87:8b:e8:19:38:9c:71:5c:e4:a3:d1:96:02:
47:4a:13:30:29:9d:5a:ec:d8:78:3f:8e:97:08:3e:
16:36:78:ee:37:76:6f:71:8e:a2:4e:b0:da:2d:3c:
4e:1e:f3:d7:fe:80:bc:fd:34:fd:df:47:76:88:59:
2e:1d:14:cc:c7:f2:a9:85:33:ca:b0:9a:08:21:1e:
ed:e7:57:8a:8d:2f:91:c3:bd:4c:11:86:cd:12:b2:
f5:9c:be:a8:eb:77:62:7a:2c:ef:5d:a1:66:ec:01:
c4:71:05:12:b7:a3:4d:8e:92:d7:93:66:a9:43:cb:
b9:95:26:1e:ea:24:0a:30:44:66:26:67:8f:65:06:
e0:dc:f7:3e:cd:cb:b7:85:d4:7c:95:f0:10:e8:a9:
05:dc:39:2a:51:0d:17:ec:86:ea:12:25:ec:9d:30:
60:f2:d5:03:e0:04:2a:58:be:07:ef:7d:1f:35:68:
66:91:1f:cd:87:4c:86:01:87:78:7a:68:db:1f:c4:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:18:9A:CA:D5:8B:89:FB:55:6F:F5:E2:D0:2C:48:3F:66:55:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl
X509v3 Authority Key Identifier:
keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f7c5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:2f:08:35:24:fb:5a:2e:04:8a:0a:86:a7:87:c8:84:f7:88:
27:3d:96:e5:2b:72:69:5b:c4:39:7e:0b:0e:9e:6b:0b:01:9f:
1a:09:2a:98:86:a7:e4:8d:4f:4c:ea:bc:59:d2:c8:43:7f:90:
ca:40:f5:4e:61:8f:46:90:e7:26:2c:3f:90:a8:2b:11:12:10:
c4:6e:b1:5b:7f:b5:45:81:01:23:6e:22:c8:3c:37:17:86:b9:
62:76:30:c4:a5:8c:3c:eb:99:b2:f3:70:90:3b:42:59:77:f4:
a5:1c:24:48:7f:22:07:9a:fd:24:1d:e2:79:be:93:da:d1:51:
b3:dc:58:f2:2d:89:77:d6:49:ff:a1:99:71:ba:91:be:1b:92:
a4:ca:22:fb:be:7d:12:39:50:06:a3:de:65:58:52:44:1e:c6:
79:06:21:57:b3:3f:a0:82:9a:56:d6:24:8b:a8:f4:98:8b:69:
8b:7f:ae:1e:3a:47:ed:b6:9f:18:22:51:7b:ed:df:c6:5b:f4:
8d:e2:79:28:2c:71:26:31:37:a9:ce:d0:1d:fe:da:83:f4:00:
87:6e:90:fd:ce:10:fe:74:f7:48:86:b1:8a:43:25:97:22:01:
eb:4f:cd:57:7f:1f:50:be:c6:af:28:ad:8c:7d:08:46:12:93:
8b:10:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:34:02 2025 by rpki-client