
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa
File: 3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa (raw, json)
Hash identifier: 5W3rIY/OYmipqpSXM8MiR+V1BnwiGKcmHZyqSXy25Bw=
Subject key identifier: 90:66:B9:40:70:AB:B3:0E:DD:C3:0C:C0:51:13:1E:B2:9E:70:70:E7
Certificate issuer: /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial: 010D0C9F4328584B2CF6E4CE153467973616E5A0
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa
Signing time: Sat 13 Sep 2025 01:00:33 +0000
ROA not before: Sat 13 Sep 2025 01:00:33 +0000
ROA not after: Fri 12 Dec 2025 02:00:33 +0000
asID: 945
IP address blocks: 2001:4858:aaaf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2c:f6:e4:ce:15:34:67:97:36:16:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Validity
Not Before: Sep 13 01:00:33 2025 GMT
Not After : Dec 12 02:00:33 2025 GMT
Subject: CN=e1e72854-b28f-4dd5-bbfc-f112528b71a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:da:10:62:fc:2b:d0:14:3b:cb:59:9c:49:
77:05:90:c6:0b:85:44:01:da:e8:71:e0:71:c4:92:
e3:54:ad:98:01:f4:d8:6a:b5:dd:d6:76:83:96:f8:
f3:06:88:8f:ff:f6:19:a7:4a:d6:fd:32:61:11:2d:
f0:2b:27:02:7b:18:53:e6:1c:a4:48:f5:10:86:93:
b0:9d:2d:7d:f5:5f:ef:c9:78:da:72:16:80:9c:38:
3e:2e:c7:8b:6a:2d:84:37:0c:90:53:44:48:31:55:
73:34:3f:a7:80:e7:05:88:75:d0:7c:53:64:41:f7:
b5:5a:93:8b:93:1b:80:18:73:4d:d1:4a:c2:2b:2d:
1a:0c:d5:3e:47:46:06:05:ea:cd:2b:3b:cf:41:01:
ec:60:2c:d4:b0:6e:b2:54:73:c1:47:18:a9:34:09:
f0:fd:9b:cb:f3:bc:0f:b0:70:bd:c8:7f:d4:3f:bd:
92:38:22:3b:49:d7:50:60:d7:ab:6f:58:af:69:76:
88:ef:17:82:e9:ab:6c:a0:f0:b5:fc:18:41:28:1f:
16:d8:d9:c9:0a:43:63:a2:8a:8d:32:61:4e:7e:64:
d7:4f:a8:ad:cb:46:3d:4c:3e:d7:77:7c:a4:f8:51:
6e:e4:c7:e5:c4:e8:1d:bd:eb:52:3b:9d:7c:e1:5d:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:B9:40:70:AB:B3:0E:DD:C3:0C:C0:51:13:1E:B2:9E:70:70:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
X509v3 Authority Key Identifier:
keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4858:aaaf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8f:bb:4e:51:87:06:eb:0d:24:90:95:5d:96:44:f6:49:6c:
c2:89:f6:88:54:c9:2e:3b:cf:1e:98:3e:5a:0b:b2:a0:41:2a:
56:f3:72:10:3f:da:9c:45:6a:d6:68:f4:a7:ff:07:2f:ca:e0:
00:d2:99:6d:fb:3c:37:1a:a9:bb:31:f7:f0:fb:77:61:7d:d5:
36:e9:c4:9e:46:f5:f9:5b:fc:dd:a5:d0:6e:a1:90:5f:45:af:
91:0f:39:30:7a:b0:29:1d:f1:a0:b3:94:85:68:5a:87:f1:1f:
b3:1e:d2:5e:0f:96:05:f7:5e:78:44:42:82:b8:4e:54:b8:6e:
98:98:8a:01:33:bb:f4:40:f0:3c:7a:95:f8:17:8b:a1:df:82:
b4:35:40:67:18:fe:e5:73:f1:2b:2e:44:96:97:24:9f:35:1c:
65:1f:ec:aa:e0:28:05:7e:9e:22:f4:09:86:6f:68:bf:e7:db:
95:7b:15:48:a7:64:b3:73:29:16:7e:d2:0a:95:e9:fd:40:b0:
c6:dc:b8:4b:c4:79:c0:a8:3a:7f:2e:bc:d7:31:f4:e2:87:0a:
15:60:fc:38:6a:fd:13:75:e8:db:e6:90:dc:0e:58:77:32:47:
fb:0b:30:2b:45:cf:4d:0e:a7:b3:dc:08:26:ec:46:15:71:4a:
ad:2e:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:21:15 2025 by rpki-client