
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa
File: b3253730-2bce-3ed6-b8ef-448c69deee6b.roa (raw, json)
Hash identifier: 5U8jbalrm6eDHtEn9HHUb8AjteMkjXpNH9MoIunhddg=
Subject key identifier: 64:E4:D2:ED:14:2F:CF:BF:53:C9:FA:0C:83:C4:74:74:07:EB:7A:22
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584B715CFDF7CB8EFCA631007020
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa
Signing time: Tue 07 Oct 2025 13:00:37 +0000
ROA not before: Tue 07 Oct 2025 13:00:37 +0000
ROA not after: Mon 05 Jan 2026 14:00:37 +0000
asID: 7029
IP address blocks: 2604:cb00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:71:5c:fd:f7:cb:8e:fc:a6:31:00:70:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 7 13:00:37 2025 GMT
Not After : Jan 5 14:00:37 2026 GMT
Subject: CN=3b0ed34e-317b-4e2b-9e90-6e8be10407a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:67:2d:8b:8f:1a:1d:2a:6a:66:a2:81:83:
7b:70:16:91:9b:85:b8:41:7a:4c:44:49:18:77:c0:
df:3f:fa:96:05:21:0c:83:1c:cf:bc:f0:23:de:fe:
d6:cd:48:79:e3:cf:5d:a7:52:d1:17:f0:24:c4:27:
c5:21:0d:46:e4:a0:5d:13:72:c5:68:0b:6d:77:d3:
66:4f:72:8b:3c:2a:cb:12:82:6e:74:4f:ad:bd:d6:
f2:b5:83:9c:07:38:43:00:c3:45:81:47:3d:21:4a:
8b:02:ad:e7:1c:97:26:90:8c:b1:ae:87:d4:a6:af:
13:c8:34:33:1e:c7:db:bf:10:93:65:f2:c5:65:99:
a7:da:26:6e:2c:cb:18:c4:3b:ae:af:a9:d6:24:28:
b2:c4:e0:d7:ea:37:56:0e:61:f6:3d:2d:20:df:8c:
bb:1d:66:25:fe:23:36:09:eb:d0:30:d2:8f:fb:4f:
b7:fe:e8:67:1d:79:7a:77:dc:34:95:9d:fb:34:a4:
05:c4:ab:d0:0a:bd:23:fb:2f:76:09:84:0d:e3:78:
7b:a5:be:86:05:87:74:fb:e0:7c:fe:4f:53:b3:a9:
de:31:6a:72:f8:cc:d1:fe:c0:ab:f1:c3:70:ee:62:
cc:82:48:48:9d:e9:62:9c:fb:df:b6:b8:40:1a:a0:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:D2:ED:14:2F:CF:BF:53:C9:FA:0C:83:C4:74:74:07:EB:7A:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:cc:6d:c7:cf:33:10:6a:0c:7e:94:25:40:f3:ef:80:96:a7:
4a:34:f1:7b:71:1a:5d:fa:86:47:11:32:0e:af:be:0f:28:b1:
64:b5:38:f8:de:f6:d3:a7:9b:62:d5:1a:99:12:e7:b5:30:b7:
d7:5a:9c:f5:f1:72:28:50:b1:96:cb:7f:3a:bf:0c:1c:3b:6f:
80:be:6c:2b:bd:82:60:d3:ee:b1:2a:d8:6a:f3:76:02:88:c2:
77:93:5a:a7:64:26:2e:be:14:e6:f1:a7:9b:90:9c:4d:19:c9:
61:d4:e3:83:05:f7:f5:c9:2f:a0:7a:20:95:e1:3d:42:68:ef:
0e:5a:df:f0:76:2f:85:46:b0:5e:07:33:8f:dc:26:9f:3e:50:
b8:d1:d9:bf:00:73:17:46:69:e8:f7:2c:a2:f9:5a:34:a9:87:
e2:ad:f0:9d:56:55:e4:15:ba:d2:dd:84:00:b7:f7:cb:0e:86:
49:c8:30:a8:3d:eb:9e:5a:9e:12:c3:2b:de:82:4a:c4:e1:85:
e1:35:6f:4b:1b:3f:ac:1e:99:3f:43:3e:0b:1b:95:79:a1:4d:
18:15:a9:89:a6:1c:b1:81:f5:af:bc:67:9e:f7:38:88:79:21:
4c:15:e7:d0:4e:0a:f7:66:67:25:b2:d1:85:da:4b:e3:fb:c5:
ec:c1:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:59:04 2025 by rpki-client