
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa
File: b372c618-29ac-3017-85bd-3af6088fc97b.roa (raw, json)
Hash identifier: OKzXmTLJXWiPDWP4kFkp7U3hXpheD3eLZRT/P+eiIIM=
Subject key identifier: 7E:5B:45:57:B1:0D:19:9E:8C:46:70:44:47:33:92:D9:C5:89:80:48
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BB45D0B1E626721DE7A3D6700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 2604:2d80:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:0b:1e:62:67:21:de:7a:3d:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=2ae1a53a-7813-4cb2-8ced-a4231d9dde36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:07:a3:72:ab:86:5a:e4:11:4b:5d:1c:a1:
16:f6:b4:bf:6e:9f:d2:68:6b:56:7b:23:3a:44:9b:
5e:9a:9f:95:ee:90:48:c6:32:1c:67:43:80:fc:99:
26:4a:ef:f1:fb:ae:b0:c3:81:36:a1:44:29:e5:da:
9e:5a:e2:67:13:b9:06:fb:97:0e:7f:52:9f:1e:4d:
46:be:a0:3b:72:ce:f4:9a:ff:14:fa:cc:e5:a8:f8:
6f:b5:09:74:59:09:cf:91:1e:76:1a:b5:c8:5d:23:
44:5f:64:25:5a:f6:cc:30:ac:55:f6:86:1c:80:15:
6e:f8:10:ed:3e:bd:0a:6a:b8:53:bd:a5:04:b5:52:
18:60:6d:24:9d:32:c2:98:aa:05:cc:3a:e1:72:0d:
dc:42:4b:72:24:ab:3d:d0:03:93:be:fe:11:b0:04:
8e:59:c1:a2:1f:5c:d0:39:13:da:c2:61:cb:c1:5e:
60:eb:99:b4:a1:fa:6c:c7:8f:ad:17:f9:ec:62:b0:
30:44:44:48:46:d0:69:08:a0:a9:03:c5:aa:e0:e6:
fe:4f:d8:64:af:c9:72:20:79:72:be:bc:9e:d5:90:
db:cb:b3:bc:2c:01:8c:5b:00:4c:20:99:be:73:70:
de:70:45:15:f0:b2:69:8a:e5:74:d2:98:65:84:d5:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:45:57:B1:0D:19:9E:8C:46:70:44:47:33:92:D9:C5:89:80:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:8800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:91:f0:ff:a8:d1:da:5f:68:1c:42:11:e4:3e:f4:64:a8:17:
6a:5b:4e:ed:a7:bb:f4:93:3f:21:40:51:9f:e0:06:4c:89:73:
3c:6f:ec:b1:c5:da:1d:ee:b9:f2:fa:4d:51:5a:f3:c7:48:ed:
77:8c:4a:90:4f:04:ed:74:f3:8e:75:ba:1b:59:1a:0f:f7:4b:
d2:c1:fc:ff:b1:dc:1f:72:35:2d:c7:b3:9e:53:83:a6:e4:66:
76:a2:e1:a8:f7:38:00:0c:b3:eb:75:ae:ec:85:6f:68:ab:56:
99:43:64:5f:e7:88:bd:f6:10:fd:bd:30:8d:8e:a3:9f:8d:0d:
73:cd:f0:ce:c0:f6:59:77:15:65:b8:8f:1b:15:a4:56:9c:81:
8d:d5:b3:21:f2:73:c6:dc:88:44:20:11:b2:df:c5:b4:ee:72:
cf:e9:f2:9c:d2:00:57:ec:0c:4d:0f:aa:40:2a:85:f0:98:ed:
88:8f:c3:b5:3d:52:8d:7e:bc:b5:69:7f:5d:02:3a:34:b1:fe:
49:41:93:ed:88:3e:f4:91:df:ff:1f:fb:99:3f:de:b0:2d:bc:
62:df:d6:a2:4f:8b:ef:85:7f:a0:81:1f:de:b6:1b:86:48:af:
77:b4:03:a8:22:dd:5a:bd:1c:67:92:e2:9c:85:4c:28:c6:72:
93:d3:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:14:33 2025 by rpki-client