
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/37baabc5-3bde-35a5-ab43-e99b4632f040.roa
File: 37baabc5-3bde-35a5-ab43-e99b4632f040.roa (raw, json)
Hash identifier: j7hZ1k9csde7QEThdqDEJ4HfTLFyngNucX5B0LIYrn8=
Subject key identifier: 61:0D:28:B1:ED:7C:EE:67:23:23:43:0E:6D:43:B1:B5:D2:C4:ED:AE
Certificate issuer: /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
Certificate serial: 010D0C9F4328584AEB5BD337F70DAEBDFA1C4980
Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/37baabc5-3bde-35a5-ab43-e99b4632f040.roa
Signing time: Wed 20 Aug 2025 13:00:41 +0000
ROA not before: Wed 20 Aug 2025 13:00:41 +0000
ROA not after: Tue 18 Nov 2025 14:00:41 +0000
asID: 401647
IP address blocks: 2602:f66a::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:eb:5b:d3:37:f7:0d:ae:bd:fa:1c:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
Validity
Not Before: Aug 20 13:00:41 2025 GMT
Not After : Nov 18 14:00:41 2025 GMT
Subject: CN=bc1d220c-cdb9-46b6-b933-d7b894a36228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:96:36:59:27:49:82:1b:17:ba:eb:43:42:
56:99:c4:f8:38:18:61:e4:a1:9c:82:c2:4f:d8:a5:
cc:fd:c8:89:6c:0b:a9:09:18:17:34:7b:4a:7e:ba:
8e:69:3f:16:34:35:b0:0b:0b:2c:eb:7f:50:be:9f:
6e:30:80:1f:1a:32:1d:31:16:dd:7b:05:02:47:11:
eb:83:fb:fd:37:1a:c3:6c:f7:b3:7f:b2:21:37:06:
6e:f4:2e:2b:47:b6:da:06:c7:72:c0:f3:fc:42:a6:
85:39:a0:71:6d:1c:92:6a:2c:7d:09:2c:c8:15:2f:
24:5d:f3:53:c5:15:50:c1:e9:ae:c5:7f:e6:79:24:
71:e2:18:53:e1:96:17:46:d0:8c:5d:fd:ea:6b:66:
b5:a4:17:5c:ae:48:65:6d:a2:ae:a1:ae:87:2a:d6:
03:8b:d2:1c:60:c9:0c:0b:40:26:11:73:2d:06:19:
05:e6:80:78:41:49:52:0a:71:9b:5c:b7:97:ed:4b:
43:e8:8f:19:4e:3d:bc:dc:30:48:96:43:66:f9:2e:
5b:54:75:f3:9f:25:dc:84:f2:f3:56:5a:03:6b:77:
c0:8d:c2:70:fc:45:7c:f3:ad:7c:85:59:40:f1:95:
a1:01:fe:69:59:b4:81:c7:35:e2:1c:74:f9:ea:fb:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0D:28:B1:ED:7C:EE:67:23:23:43:0E:6D:43:B1:B5:D2:C4:ED:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/37baabc5-3bde-35a5-ab43-e99b4632f040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl
X509v3 Authority Key Identifier:
keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f66a::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:9e:d8:e4:2d:06:d6:ac:aa:80:2f:91:d2:47:c8:a0:ca:ed:
3b:d1:65:59:3c:f8:28:85:1e:a1:8e:3f:2a:0b:86:e4:18:c1:
f6:31:ef:6e:31:61:a4:9e:98:07:91:39:59:64:bc:f2:c9:75:
b1:d5:bf:e3:20:fa:6e:fd:24:f2:b9:ba:52:5e:30:45:67:18:
c0:e1:bb:c2:3b:92:ab:f9:91:68:7f:c2:83:32:8b:33:e3:25:
52:12:9b:61:d6:86:a9:94:0c:ba:11:91:67:0c:78:d7:7b:10:
e4:bd:c0:84:a0:e3:9b:a4:90:3d:dc:67:69:4a:d2:c7:da:23:
76:22:75:dd:01:54:34:56:35:18:c1:fb:c8:42:1e:5b:b8:09:
39:57:10:44:bd:bf:29:75:2e:9d:ae:42:54:24:42:e5:2e:f6:
0a:56:b9:15:df:6a:0e:33:6e:fb:55:1e:2a:84:2a:e3:9f:d8:
45:9f:d6:f3:27:29:fc:d6:bd:3f:7f:31:50:b2:4d:9b:66:e8:
34:69:8c:9c:81:e4:db:02:d5:ac:2f:2f:73:39:d1:cb:e7:72:
d5:7f:a8:99:41:22:c3:0f:07:8d:10:99:b8:c7:54:71:0a:6f:
3e:f0:27:30:89:40:08:93:03:e4:fd:70:1c:ce:b1:75:36:0b:
60:af:68:30
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErrW9M39w2uvfocSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2Zl
MDRkMB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk
YmMxZDIyMGMtY2RiOS00NmI2LWI5MzMtZDdiODk0YTM2MjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly6WNlknSYIbF7rrQ0JWmcT4OBhh5KGcgsJP
2KXM/ciJbAupCRgXNHtKfrqOaT8WNDWwCwss639Qvp9uMIAfGjIdMRbdewUCRxHr
g/v9NxrDbPezf7IhNwZu9C4rR7baBsdywPP8QqaFOaBxbRySaix9CSzIFS8kXfNT
xRVQwemuxX/meSRx4hhT4ZYXRtCMXf3qa2a1pBdcrkhlbaKuoa6HKtYDi9IcYMkM
C0AmEXMtBhkF5oB4QUlSCnGbXLeX7UtD6I8ZTj283DBIlkNm+S5bVHXznyXchPLz
VloDa3fAjcJw/EV88618hVlA8ZWhAf5pWbSBxzXiHHT56vsE6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGENKLHtfO5nIyNDDm1DsbXSxO2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3
YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvMzdiYWFiYzUtM2JkZS0z
NWE1LWFiNDMtZTk5YjQ2MzJmMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmYzN2JmNjgtNjdlNy00ZTY3LWEw
OTMtYzg4YTNkN2ZlMDRkLzZmMzdiZjY4LTY3ZTctNGU2Ny1hMDkzLWM4OGEzZDdm
ZTA0ZC5jcmwwHwYDVR0jBBgwFoAUKE/PkpbIsL6mmdN/BrN+mjnqi7EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhh
M2Q3ZmUwNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2agAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHp7Y5C0G1qyqgC+R0kfIoMrtO9FlWTz4KIUeoY4/KguG5BjB9jHv
bjFhpJ6YB5E5WWS88sl1sdW/4yD6bv0k8rm6Ul4wRWcYwOG7wjuSq/mRaH/CgzKL
M+MlUhKbYdaGqZQMuhGRZwx413sQ5L3AhKDjm6SQPdxnaUrSx9ojdiJ13QFUNFY1
GMH7yEIeW7gJOVcQRL2/KXUuna5CVCRC5S72Cla5Fd9qDjNu+1UeKoQq45/YRZ/W
8ycp/Na9P38xULJNm2boNGmMnIHk2wLVrC8vcznRy+dy1X+omUEiww8HjRCZuMdU
cQpvPvAnMIlACJMD5P1wHM6xdTYLYK9oMA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:32:35 2025 by rpki-client