
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
File: 6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa (raw, json)
Hash identifier: WkTRCdXQF54/QvR0sfUNW0v4CnXuYxCrYAbWxf/5Dx0=
Subject key identifier: 29:30:FA:63:CC:6E:7A:A6:F2:D0:63:D5:FC:A2:0C:21:95:B6:A1:2D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B64CC8423FC2B8A229150AA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 30036
IP address blocks: 173.20.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cc:84:23:fc:2b:8a:22:91:50:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=f942d2e9-e399-4678-8ddc-c4f38fce7231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:58:20:23:a2:6d:5b:14:90:81:99:ce:68:
4a:7e:47:70:7e:b9:ff:e1:44:b0:db:4c:21:56:18:
3e:02:79:12:2e:cd:46:c2:3d:b2:0c:61:7f:b3:a9:
39:50:db:a2:98:1e:5c:79:46:e0:e8:9a:a6:c4:07:
a7:cf:65:02:0c:26:57:4b:87:c7:ea:b3:1c:c6:d8:
cc:0a:ef:81:c9:27:4c:ec:b2:9d:1e:46:87:e7:47:
6f:a6:37:c7:62:b8:3d:a5:7a:0f:94:8d:80:6b:b6:
bf:83:aa:60:f1:06:b2:99:9d:b2:2b:de:5d:73:ab:
c3:34:62:af:7c:1d:28:79:7a:e1:8e:08:a2:19:3b:
e4:f9:4d:c7:7b:89:c5:4d:55:0b:9f:03:e5:12:30:
dd:15:45:e2:05:f2:f3:61:96:ce:34:22:13:e6:fa:
16:a2:01:be:8e:62:eb:4b:ef:45:2a:86:03:9f:ba:
99:30:71:9b:c3:ac:ea:b1:5b:a0:24:b3:b7:b4:8e:
d2:dd:49:fe:5b:80:3a:3a:eb:c5:57:2a:0e:f4:d2:
69:61:ca:7b:af:2f:40:27:56:c1:bf:a6:8b:10:67:
40:d0:1b:bb:47:58:df:a2:cd:e6:73:c0:1b:40:c9:
8e:4d:0c:eb:ed:8a:83:c7:54:8a:fb:17:33:9e:7b:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:FA:63:CC:6E:7A:A6:F2:D0:63:D5:FC:A2:0C:21:95:B6:A1:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:27:75:69:ac:0a:36:b4:51:05:d1:d5:2f:13:64:b4:67:a5:
79:c0:dd:67:f4:57:6f:ec:71:d2:06:81:10:21:47:03:b7:9e:
9a:e1:24:f7:2d:4e:95:14:02:0b:09:11:13:1b:d5:0d:a9:53:
5c:94:20:0b:ca:4e:45:14:c7:35:e1:dc:9e:8c:67:40:60:15:
47:30:a9:27:fb:80:d8:74:05:5f:fb:8b:90:2c:13:a5:e6:35:
72:77:4a:ee:00:87:a1:a3:22:12:5a:75:b1:49:da:b4:67:c0:
8c:2f:b4:e3:44:b4:80:1b:30:53:9c:e0:35:47:33:75:22:4b:
09:f6:93:8e:2c:e8:81:a4:78:72:8c:ce:3d:c1:58:51:0b:a2:
1b:25:32:ac:85:72:b5:f5:b0:08:80:7a:d9:c2:8a:7b:b3:aa:
dd:a5:50:32:e9:d1:ff:7b:e5:a2:a2:0c:48:f0:98:44:97:43:
97:70:0a:ba:5c:59:18:c1:13:a4:ec:53:94:27:78:44:f7:f5:
0b:df:76:f8:34:41:83:38:c6:dd:e1:fe:d4:fb:ae:b1:e4:80:
6c:28:82:12:0f:25:20:49:71:ee:22:6c:60:09:9b:7a:63:f9:
92:73:fb:f6:f4:01:39:33:0b:43:62:26:2b:61:53:77:01:e8:
e0:a0:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:14:26 2025 by rpki-client