
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa
File: 24c532a6-6f34-3db1-ab5e-d5bece943a35.roa (raw, json)
Hash identifier: 34usDqZpTbYjmL1WCrVU8AFi9ecU+UBlCWY3yvu52Og=
Subject key identifier: 0D:B0:E1:3F:06:88:9B:0F:5D:68:07:32:F2:F1:DF:EA:EB:01:46:0D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BBA1059C95C1EDECFCDA2BBE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa
Signing time: Sun 02 Nov 2025 14:00:38 +0000
ROA not before: Sun 02 Nov 2025 14:00:38 +0000
ROA not after: Sat 31 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 216.108.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ba:10:59:c9:5c:1e:de:cf:cd:a2:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 2 14:00:38 2025 GMT
Not After : Jan 31 14:00:38 2026 GMT
Subject: CN=b026d408-79e6-4b5c-b999-f444a474e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:e1:d9:71:2f:95:35:5a:9c:7f:e6:27:e4:
0a:68:d4:3c:0d:cf:5a:f9:f5:c4:92:fc:04:6e:48:
24:04:4b:36:97:58:fb:73:f1:da:44:35:12:2c:a9:
f5:55:a6:88:89:ca:85:a9:e0:3f:e5:b9:a8:83:86:
62:0e:5e:e1:d8:95:6a:1f:ee:0c:4d:2c:6c:d4:b8:
bf:a1:cf:e5:40:98:c8:33:83:60:74:5d:04:b0:31:
13:34:e0:69:23:c8:54:fa:97:2b:d8:3d:33:b0:af:
54:7b:3e:81:f3:58:9e:a3:7f:0b:c2:72:d0:14:d6:
6e:b4:5e:61:90:bf:c4:ed:42:02:40:7e:db:90:f1:
74:4e:82:c4:66:81:1d:16:4e:56:ab:b1:03:e6:9c:
97:cf:aa:df:4d:6b:de:d1:47:71:d7:6b:67:4b:7b:
f0:7f:62:45:54:64:f9:23:07:ae:e5:69:82:bc:ce:
d7:27:38:2a:a5:6b:83:31:a3:28:ed:e8:6a:dd:8a:
8d:ce:3b:97:10:ae:26:28:be:7d:bd:d1:40:a4:78:
d0:37:d7:fa:a1:c2:5b:55:03:ed:b8:f9:95:7f:c9:
3f:36:d7:1e:56:ed:1d:86:60:df:a0:43:b0:af:3c:
6a:81:b1:5d:5e:44:a6:b4:91:5a:5a:fe:e0:ad:ed:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:E1:3F:06:88:9B:0F:5D:68:07:32:F2:F1:DF:EA:EB:01:46:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
216.108.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:50:cd:e1:d8:01:42:2c:87:57:20:4e:c7:05:af:df:9e:85:
28:5f:90:07:82:66:2d:6c:3b:b1:2c:19:23:c5:73:56:cc:41:
71:db:4b:94:3f:db:3b:fa:9b:ee:7c:a1:06:0f:2e:46:30:b4:
f1:b7:ab:7d:3f:de:a5:14:64:f1:57:04:60:e9:ef:38:67:bf:
7b:42:e8:37:5a:8e:14:63:79:c1:d4:29:14:92:c9:0f:89:25:
20:0b:ba:d8:d4:f5:67:18:3d:94:51:ea:a9:eb:e5:5f:88:ba:
10:39:cc:a4:51:42:b2:f4:fd:e4:2b:b5:9f:ea:31:6c:24:85:
26:7d:99:f7:32:44:77:63:f0:3f:c0:ee:17:27:34:5b:d0:c3:
92:c3:62:1d:89:0b:c3:ed:b3:5e:b1:85:6d:28:db:9b:e9:14:
f6:85:04:35:23:b5:53:1c:7a:98:50:f1:cb:ce:2b:c8:0a:a5:
ae:0a:33:d1:bb:54:4a:20:28:b0:5f:1c:d3:d7:d9:71:b0:87:
3e:6a:61:55:bd:4d:59:9f:bd:34:5f:85:7d:9a:8f:13:8b:cf:
87:fa:d3:d9:a4:d6:38:f5:2a:01:80:94:b1:f0:44:d6:7f:3c:
4d:cb:af:9e:a3:27:16:4a:4f:8b:ff:36:88:72:87:db:85:82:
48:c5:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:43:44 2025 by rpki-client