
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
File: ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa (raw, json)
Hash identifier: oVo7OUViL8xtmiN2rtHqbSrUtmFCTqutbP62yaBGIVQ=
Subject key identifier: 2A:73:66:96:E5:3D:06:6F:F6:09:77:A2:3F:24:8C:92:A7:F0:52:94
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B64CCB1369ECC8FAA0CC71D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 30036
IP address blocks: 173.28.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cc:b1:36:9e:cc:8f:aa:0c:c7:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=79276694-5a56-49b9-b7a2-9bce9509910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:be:df:1c:0e:f0:b5:8f:a9:56:77:f9:95:
0d:88:e7:ae:cd:01:fd:08:18:cd:31:0f:06:d6:92:
b3:56:c1:d5:86:08:1b:e1:4d:1d:d2:f0:c2:8a:59:
d4:ab:52:64:67:19:a6:5c:6a:70:5b:00:d5:1b:ea:
91:2e:ae:d1:d8:01:06:17:94:26:5b:27:bb:d1:f3:
d6:68:aa:ac:d4:21:74:08:88:51:62:b5:b1:53:d8:
b4:94:6b:93:22:93:76:ef:85:8a:9d:a2:23:68:72:
94:c1:14:22:2a:86:d3:ad:85:6a:59:b9:f2:5d:c8:
88:80:79:ac:d4:04:4f:31:c7:56:24:81:b8:d0:78:
44:57:93:b1:67:12:eb:be:85:1b:db:3a:c9:81:24:
5a:53:ea:29:1a:9b:54:fe:25:a8:eb:c2:bd:f9:de:
4a:c2:c8:ea:16:32:70:d2:35:e6:c3:3f:6f:a2:a7:
4b:be:68:23:02:be:15:f1:78:e5:c1:4d:2a:7f:91:
d6:0c:f5:00:68:fa:30:a5:55:dc:e7:5e:98:16:56:
06:75:cb:69:82:f9:5e:b4:15:62:17:70:20:7b:b0:
d9:69:07:72:2c:a2:de:10:50:3f:7b:58:38:2c:c7:
4a:29:89:9e:5e:97:72:6b:85:86:e0:93:ae:15:86:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:66:96:E5:3D:06:6F:F6:09:77:A2:3F:24:8C:92:A7:F0:52:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:07:c3:7b:e6:bf:31:8f:7c:7f:32:b6:79:85:bd:7e:b0:45:
0e:91:95:86:d6:ab:8d:ef:4a:a4:60:d6:fa:47:e5:90:d7:26:
5a:c3:eb:c7:7b:98:97:c2:56:57:b9:b6:be:2a:a3:99:90:2d:
60:3d:74:93:2f:01:ce:73:a9:fa:f7:43:77:49:30:be:90:c8:
f5:3d:db:27:eb:70:3e:fe:00:55:b1:62:e5:7a:01:d9:08:97:
83:b1:10:17:b2:fb:c4:8c:43:fd:23:0f:92:a3:dc:a4:11:c3:
c6:15:2d:2e:cc:23:69:09:29:dc:db:15:46:98:14:86:9e:38:
47:58:d0:81:60:ba:4a:ad:5e:2a:1d:bd:b9:01:f5:7e:c1:36:
31:f4:a4:c1:b2:cd:5c:25:c9:18:92:8f:e0:01:69:c9:6f:ac:
74:62:a5:d7:b4:86:1b:73:ec:e2:42:f0:95:75:0c:1d:32:74:
28:79:26:09:f6:e5:8e:8a:88:64:8e:1c:99:5c:cb:99:4c:45:
41:d3:a1:b1:8d:0e:78:e1:3a:ed:14:ea:80:33:d3:4d:b7:aa:
5e:6e:8e:46:a6:a9:51:ba:23:b7:4e:d4:94:8c:b0:9f:44:e2:
65:41:10:c5:da:f7:ed:2e:30:1c:7f:f5:c8:9a:2f:14:a6:4a:
9a:be:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:42:51 2025 by rpki-client