
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
File: 60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa (raw, json)
Hash identifier: UBXn3w4nmXHUUKePFeVTtJU9CQNXwAe3tq+78weTSJ8=
Subject key identifier: F4:7A:49:D8:AA:D0:0B:02:3F:5F:F1:9E:76:BD:79:0C:0B:37:1D:E0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584AE19715D859373A732AD4B080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
Signing time: Sun 17 Aug 2025 01:00:32 +0000
ROA not before: Sun 17 Aug 2025 01:00:32 +0000
ROA not after: Sat 15 Nov 2025 02:00:32 +0000
asID: 36522
IP address blocks: 204.101.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e1:97:15:d8:59:37:3a:73:2a:d4:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Aug 17 01:00:32 2025 GMT
Not After : Nov 15 02:00:32 2025 GMT
Subject: CN=3ac3cd90-5fcf-464b-89df-b60cfb649fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:78:c7:c1:29:c8:30:5c:55:27:0f:48:9b:
63:71:21:51:89:51:33:cb:e2:43:97:68:09:79:b9:
31:ca:a2:fc:5d:02:54:fb:51:5e:65:9b:b6:f8:3c:
a9:3b:01:0a:09:7e:ee:f1:d0:74:1f:7f:cd:f5:54:
aa:48:73:15:c6:81:94:07:9e:69:ee:ca:7b:31:dc:
7d:f4:d1:7b:da:22:8f:ad:a4:6b:d8:6f:c4:61:46:
d9:10:56:00:60:8e:93:aa:ea:79:fb:00:37:ff:bf:
ac:73:3e:e1:69:d8:c1:2e:de:ec:36:4e:8c:de:fc:
c2:e7:3c:af:fa:9a:74:8a:cb:0e:6a:1b:34:f1:f8:
76:40:96:9d:3c:88:0c:4e:97:4f:20:f4:c6:c1:10:
19:e3:f1:f4:31:13:f0:17:f4:9e:ac:06:21:20:dc:
2a:0f:4a:d1:3b:f4:9b:3f:db:73:19:4d:68:a6:07:
52:af:6a:a0:4f:82:85:af:c4:7b:2e:5d:0e:61:c6:
a3:12:e6:1b:db:c1:0d:70:27:89:48:ef:52:1f:b4:
db:f1:3c:a5:83:12:16:fd:08:e5:9f:38:2b:70:60:
a0:91:27:3e:23:17:2e:e5:c6:37:a5:75:b7:d2:09:
2d:93:d9:ae:9a:01:92:4f:6f:71:4f:6e:65:74:68:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:49:D8:AA:D0:0B:02:3F:5F:F1:9E:76:BD:79:0C:0B:37:1D:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:63:34:3b:72:e5:2f:7d:47:1c:14:eb:f4:1b:fe:f5:c3:aa:
f6:79:80:d6:09:5a:e4:1e:5b:f5:45:b2:82:3e:06:e1:24:b4:
94:a3:6e:01:80:71:26:a9:75:21:1c:be:1d:8b:4d:25:48:bb:
6c:55:a6:38:5b:7a:3a:ea:12:92:68:63:6b:34:67:94:09:88:
f1:0a:fb:da:15:6c:ee:13:02:3e:34:7e:7a:ea:1e:69:57:bb:
56:82:72:08:26:51:83:25:b6:cd:53:39:e4:60:28:72:1b:19:
7d:da:c6:17:23:93:37:33:2f:47:8f:3b:28:88:d2:d5:5a:4c:
04:19:d8:ff:6b:85:f4:d4:a0:cf:06:15:0a:b4:60:04:54:d8:
d7:9f:b7:93:6b:14:8d:ad:a3:1b:08:b1:6e:64:3f:0a:d3:92:
19:8d:b4:bb:c3:39:f7:54:37:8c:a9:19:a4:c3:d4:cc:20:1b:
8c:d1:be:f0:b0:e3:fd:c7:30:8c:0c:f0:98:ed:94:c6:ae:0a:
e1:74:54:5d:74:78:53:4d:be:33:46:e4:d4:87:ef:68:da:ca:
c0:75:79:59:f3:33:ef:42:3b:d9:e1:bc:24:bc:17:f3:76:ed:
36:26:85:83:75:3e:0a:53:07:ac:d5:6e:0d:59:2f:63:d7:43:
45:48:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:38:45 2025 by rpki-client