
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
File: 32fd2aed-084b-34c3-ad42-8399607ba2b0.roa (raw, json)
Hash identifier: FWU0i1kVybWcPK0FcKuKTHDiIhvTQPvEe2oBIXKQQHY=
Subject key identifier: 15:F3:76:34:45:1E:4A:85:E2:2A:2B:76:2B:A0:D9:92:1A:DF:24:EB
Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7
Certificate serial: 010D0C9F4328584AF256AA17D3EF567553BE0B38
Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
Signing time: Sat 23 Aug 2025 01:00:33 +0000
ROA not before: Sat 23 Aug 2025 01:00:33 +0000
ROA not after: Fri 21 Nov 2025 02:00:33 +0000
asID: 6341
IP address blocks: 156.76.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f2:56:aa:17:d3:ef:56:75:53:be:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7
Validity
Not Before: Aug 23 01:00:33 2025 GMT
Not After : Nov 21 02:00:33 2025 GMT
Subject: CN=f9a02e5d-39d5-4e35-8778-5632f08b4bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:71:33:7f:35:9c:36:4b:0f:1d:45:34:93:
69:7e:dd:c3:b4:97:8c:14:48:ed:7e:ac:32:e3:64:
b6:89:e1:b1:5b:53:4c:2a:be:4d:15:40:31:1e:c5:
b0:60:11:f9:56:9b:10:e6:fc:1d:da:dd:ab:b2:0e:
6d:0e:a6:9b:f1:e2:c5:fe:1b:b7:ef:73:6d:26:8c:
d5:08:f6:a7:19:7d:1f:cf:d7:76:82:03:63:d2:c7:
36:81:0c:eb:34:0b:fd:83:85:0a:4e:23:a2:6f:38:
66:46:4c:f3:27:7a:0c:c3:47:e6:99:90:1f:60:cc:
a4:27:df:56:6d:4f:05:32:79:fc:b9:64:a3:29:1d:
94:4f:df:d5:4c:0a:1b:f2:46:d5:75:ed:6b:44:27:
13:16:49:b6:4c:f7:b2:cd:42:92:55:66:2a:02:8f:
7c:3e:9e:aa:d7:ef:39:25:fb:34:98:de:9a:61:40:
8e:31:96:29:bf:c7:fc:06:28:05:64:c5:fd:23:bc:
c6:1c:dd:5c:2d:54:0e:2e:f1:14:b8:98:41:e3:ba:
8e:43:6c:84:40:be:d6:96:a4:22:48:f4:58:fd:ae:
27:84:c9:e9:e3:eb:16:a7:d1:65:d3:9d:d5:a0:30:
c9:27:94:c2:8a:2c:cb:cf:fb:42:a6:30:49:48:99:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:76:34:45:1E:4A:85:E2:2A:2B:76:2B:A0:D9:92:1A:DF:24:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
X509v3 Authority Key Identifier:
keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
sbgp-ipAddrBlock: critical
IPv4:
156.76.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:f3:b6:44:e5:44:9f:7a:3e:0c:ab:15:e6:97:2b:d6:c8:4d:
9b:16:f8:05:7d:61:77:7a:4b:c7:b4:63:72:fb:4a:ea:d7:fa:
43:a5:5c:b9:93:9c:23:24:2c:dd:3e:48:29:9a:95:ae:8e:48:
ad:81:0e:a3:10:8d:36:86:64:d3:02:f5:49:4c:c7:62:97:cf:
7e:98:fe:0d:d4:20:8b:e5:ae:91:9d:a1:11:9a:66:43:fb:8b:
35:1b:1a:17:1f:5c:1b:8c:4a:0e:34:6f:ff:c3:b1:d5:53:bb:
06:cf:c8:01:07:cd:e3:ad:d8:0b:2d:a0:4e:1b:e1:bf:1d:6f:
ed:7f:41:2d:43:97:81:4f:af:fd:9c:9c:c5:76:56:70:01:e9:
cc:c0:30:9a:76:b1:d7:29:d1:1c:13:59:19:9e:ec:02:d5:20:
bd:ec:30:f3:a2:27:47:b5:9b:63:c2:0b:1a:ca:8b:1d:41:17:
ed:32:dc:f3:ac:f5:a6:ce:28:7a:d1:94:12:ad:7c:59:2a:67:
84:19:7c:2e:5c:c2:0e:e6:15:b7:af:1c:91:52:c3:e0:17:b0:
df:80:2c:2c:30:92:0f:ca:80:be:78:37:27:52:4c:df:66:d3:
fd:dc:d9:b6:e8:ec:ca:75:36:a0:0c:54:01:d7:24:ea:14:81:
4c:62:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:08:03 2025 by rpki-client