
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa
File: 9edc4827-e966-3f00-aa69-d796303beda2.roa (raw, json)
Hash identifier: LLgcyMD0IijG5GLtb0ypv6lssnrrymEyJafp/anCvh0=
Subject key identifier: 32:73:BA:25:85:F0:48:9F:9E:FE:EF:D1:96:10:A3:70:A1:AB:A1:E8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B0B76D7668F5926594115F500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa
Signing time: Mon 01 Sep 2025 01:00:33 +0000
ROA not before: Mon 01 Sep 2025 01:00:33 +0000
ROA not after: Sun 30 Nov 2025 02:00:33 +0000
asID: 30036
IP address blocks: 2604:2d81:1f80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0b:76:d7:66:8f:59:26:59:41:15:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 1 01:00:33 2025 GMT
Not After : Nov 30 02:00:33 2025 GMT
Subject: CN=39c25c72-d7cf-473d-ab78-fa1bc0a2412a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:53:78:38:73:5d:a8:56:e3:7e:6f:70:f8:
f9:cd:1d:da:c8:3c:b7:53:33:d1:bc:48:f3:86:96:
5c:59:fd:84:da:7f:c7:fb:f0:2b:e4:9c:00:15:80:
4f:79:28:40:f1:9c:f0:cd:b9:0b:3b:4c:82:9d:6f:
06:0f:35:37:23:ac:18:ed:27:79:37:ed:a7:3c:68:
9b:de:87:13:80:65:24:df:e7:06:57:61:e8:04:37:
c3:3d:59:f8:de:93:d0:62:be:de:b6:4d:f4:21:59:
95:a8:be:d1:4e:4d:4c:68:3a:b0:cd:86:3c:a7:d8:
9b:52:b6:dd:15:ab:69:b9:9b:15:b2:c1:20:42:98:
e0:81:77:5b:fc:7c:3e:5e:c9:82:5b:c0:55:03:10:
6a:35:b8:b4:1b:5a:59:59:ab:21:c6:73:80:68:9d:
ab:ac:5d:c0:5f:6b:ab:41:12:80:e6:73:b1:19:ee:
27:b7:25:0e:17:3d:b4:63:40:6e:8c:1a:e5:86:f1:
f3:88:a1:c9:39:46:e7:28:a9:2d:b0:c0:02:60:ce:
40:e5:02:2e:38:31:21:d8:88:d2:a9:dc:95:dd:91:
bf:27:7f:28:d3:b9:58:46:b4:d3:79:9c:3b:6d:8b:
92:75:b6:02:ec:a1:43:0b:37:b7:46:43:3c:cf:49:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:73:BA:25:85:F0:48:9F:9E:FE:EF:D1:96:10:A3:70:A1:AB:A1:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:1f80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4f:dd:77:d4:c5:ff:e9:d1:ab:45:6b:fc:26:7c:b4:ca:fc:
ad:ce:18:06:da:c2:fe:2a:99:d5:fc:b6:d9:b6:31:42:e2:cb:
c3:d2:91:b4:9a:95:55:ea:9a:2c:27:ca:1e:fa:4e:1d:6a:bc:
62:25:88:d6:eb:1f:d4:9a:8a:dc:1c:e6:ce:a1:0e:9e:c5:f5:
62:ab:97:d1:de:e5:f7:1e:8f:69:f4:7e:99:01:02:64:1f:fc:
f0:a0:07:30:a7:98:04:1c:ee:14:7d:04:a0:f6:2f:70:25:3e:
2e:ef:e7:e8:42:ad:a3:f4:f6:d9:3b:0a:82:e0:1a:66:3b:85:
a7:2b:80:c1:ee:ea:a2:bc:9e:ff:d3:29:3f:90:5f:16:cd:6a:
57:92:73:04:54:98:b2:0d:ba:60:bc:08:16:96:f5:4a:d8:73:
5c:ad:ff:53:a3:9c:b8:f7:24:ff:9f:8b:6c:a7:ce:46:f2:9d:
cc:4f:ce:e1:ab:58:b2:92:a0:a4:9e:e3:17:cd:a0:45:b3:cf:
49:30:41:ca:fd:24:42:b8:b3:26:b1:e4:41:2b:dc:6b:d1:90:
eb:48:41:30:1e:18:3f:34:c6:ed:8b:7d:de:e5:1e:7e:1a:31:
91:08:92:27:cd:c1:2f:26:52:3e:7e:47:f7:ce:c6:5a:a1:a4:
97:2b:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:54:24 2025 by rpki-client