
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/32338cb2-3c70-397b-b8b5-73c63ad6e834.roa
File: 32338cb2-3c70-397b-b8b5-73c63ad6e834.roa (raw, json)
Hash identifier: 9/upOvFRwUAo3LYDZVtGutsovJp8o2QttRIduJwZUMA=
Subject key identifier: D0:89:20:5A:32:1E:F7:B9:F0:5C:BA:BC:1A:21:8E:99:E8:A7:E5:C6
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584B970CDCBB23578F3EC4F7E600
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/32338cb2-3c70-397b-b8b5-73c63ad6e834.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 10466
IP address blocks: 2001:468:1800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:dc:bb:23:57:8f:3e:c4:f7:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=2b0c6798-d364-44b1-8dbe-a612a80bd415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:43:7b:14:60:21:14:f4:1b:cf:2b:7f:e2:
c6:40:95:e8:a8:f1:e2:7b:fe:d6:23:a5:39:3d:73:
b9:32:8d:2f:a7:ee:e3:be:7b:2a:de:10:43:3a:9c:
92:08:15:63:6f:c8:a7:0b:9f:57:a8:92:05:1e:e3:
5e:87:6d:8b:85:49:9e:b3:be:ea:ec:86:16:cc:d0:
ef:5e:65:d6:42:0d:18:b9:42:e1:7e:11:30:d2:98:
da:9f:87:3e:de:fa:c2:c1:c4:32:62:98:9e:b7:47:
09:9a:fe:15:3a:63:1d:fc:c9:32:47:d9:f1:0b:9c:
1e:1f:4a:a8:04:8b:9c:79:bc:03:6a:dd:e0:67:53:
3a:48:5d:70:ff:85:4f:ce:af:8d:4d:ec:b2:62:59:
e9:33:1f:56:ce:5e:53:fd:c4:b2:24:a2:fd:25:1e:
1b:c6:f0:ec:1f:aa:9f:7c:b7:d0:18:40:1c:b1:8e:
1f:d0:34:dd:25:70:7c:ec:29:71:04:18:77:76:ce:
9f:dc:d3:99:d0:06:2d:be:41:53:ed:d8:2d:1c:6a:
d1:b0:f4:90:52:7b:61:c7:8d:4f:20:4d:d4:14:b5:
a4:df:fe:27:37:7a:bf:97:3d:4f:7e:73:e7:9b:7a:
c6:78:a3:65:3d:26:a3:6c:3a:76:8a:42:39:a9:44:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:20:5A:32:1E:F7:B9:F0:5C:BA:BC:1A:21:8E:99:E8:A7:E5:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/32338cb2-3c70-397b-b8b5-73c63ad6e834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:468:1800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:97:98:11:f6:fa:69:78:3e:e6:76:5c:b3:64:d2:92:18:de:
c8:35:b0:26:ac:7d:99:d7:fa:83:48:16:19:91:3c:7a:88:75:
61:32:a6:ac:b6:07:0a:f5:44:1c:d9:c4:b1:4b:cb:c2:da:bb:
84:c3:d6:57:b1:73:c1:67:4d:88:f4:de:13:6f:af:ee:2e:d7:
f1:36:39:6b:d8:51:26:3f:79:00:cf:13:60:3f:cb:1f:a1:bd:
92:00:f7:b2:c4:c8:e8:ba:14:24:5e:55:60:80:18:80:cf:17:
73:74:de:1e:9f:10:a0:75:a5:81:0a:e5:27:5a:d3:bb:de:1c:
16:08:5e:80:b1:51:7c:65:e9:8b:ef:f3:11:7a:fa:ab:28:78:
66:6e:f1:cb:43:f8:3f:68:ea:ec:da:74:c5:74:23:cf:c9:27:
16:6b:77:a2:e8:6b:a3:0a:61:20:fe:72:5c:b5:cf:91:c0:ca:
3a:db:00:0f:10:9f:0f:d9:f9:ca:b7:87:65:e1:77:f4:06:b1:
7d:7b:34:f6:02:41:ae:11:b4:16:c6:04:7b:bb:aa:0d:40:8c:
12:e1:ff:59:35:54:54:fc:db:d4:49:7b:fb:f3:a8:6d:f1:21:
c0:0d:72:d1:9d:9e:86:b1:0d:d5:70:45:99:d7:82:80:1c:55:
a3:b5:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:45 2025 by rpki-client