
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa
File: 9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa (raw, json)
Hash identifier: UeU0Iv/pC60g1YQScmhdA5VIgVxN9cZMuGtiGh+s9p4=
Subject key identifier: 84:00:02:F7:E0:AC:8C:31:77:A6:C3:C6:D7:BE:66:C0:02:41:3D:68
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BAD625AABFADE24802CC73BD0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 33438
IP address blocks: 2001:57a:504::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:5a:ab:fa:de:24:80:2c:c7:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=84cd1fc8-f8f1-418b-867f-813e5caaea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:4a:11:0b:64:95:6a:d1:4b:61:10:42:a4:
fe:16:51:5c:6e:e1:1c:c1:cf:5e:7d:11:cd:01:bf:
04:89:2c:64:4e:fb:e2:d8:8e:e0:90:8b:60:f3:84:
d7:62:21:f8:ea:72:b9:ea:66:f5:b1:a2:93:d2:ab:
4a:df:e1:81:56:10:7d:85:4e:9b:c3:cb:2a:6e:fc:
29:17:3f:1c:54:83:01:69:58:5a:40:12:6e:84:5a:
ed:7d:05:35:b8:86:b9:4a:de:7b:5e:4f:ae:e8:a2:
7e:a6:05:30:01:4d:18:85:52:22:5e:62:9e:96:27:
4e:21:53:7f:04:fc:f8:e3:19:cc:47:fd:d7:5b:01:
d0:42:91:06:87:1e:22:10:6d:7b:66:57:c0:a2:1e:
9b:79:85:aa:a9:c8:20:d7:5d:91:b5:48:c4:6f:3e:
7d:f0:06:8b:2e:3d:45:03:07:9a:60:47:4d:23:32:
fd:bc:3d:22:80:f9:53:30:87:c3:ad:cd:46:9a:a0:
33:aa:64:64:4a:9b:3d:b7:35:c1:e0:b2:4a:e5:7f:
37:2d:15:c5:d7:43:05:13:98:3d:ba:63:0d:b6:4b:
66:62:ab:81:13:0f:a8:49:59:b8:69:c1:4f:51:03:
dd:d9:19:69:40:f1:5e:81:88:71:01:a1:d6:55:79:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:00:02:F7:E0:AC:8C:31:77:A6:C3:C6:D7:BE:66:C0:02:41:3D:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:57a:504::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:9e:21:d8:19:15:41:f9:57:a6:b8:03:a4:18:20:46:c6:94:
67:dd:05:c5:66:34:66:51:84:c0:4a:50:5f:26:8d:e3:19:71:
42:da:64:79:26:d3:71:a3:98:0d:41:7d:d9:74:36:5e:ba:b9:
98:94:0b:5d:22:c0:37:ab:98:b2:ea:04:6d:a6:aa:91:4a:15:
f4:9f:c1:4e:82:c9:e2:7f:21:92:d7:65:5e:28:b3:37:5b:7b:
1f:55:e7:ae:ea:17:20:93:9e:0d:bf:f1:62:f3:8e:d4:4e:80:
1a:0d:e9:55:10:7b:3d:92:e3:8b:6b:1e:80:5d:04:70:0e:e2:
34:f9:d3:98:7c:87:f1:a9:4a:27:50:95:2f:70:e0:37:c8:dd:
8f:d9:14:83:f7:99:26:f4:57:05:e2:0c:07:89:33:e2:31:2b:
4c:67:ac:b2:11:4c:07:ff:0e:f6:2a:97:fa:75:3c:92:06:29:
90:bb:90:7a:89:94:e9:79:7a:a6:68:d4:22:c2:ec:70:78:cf:
7e:08:94:bb:a1:37:a1:07:8a:a9:97:3f:ba:75:77:0b:a4:4c:
c6:f6:29:97:a6:42:a2:98:35:89:08:65:6e:e1:09:11:71:4a:
49:2f:42:e7:ea:06:7f:b8:a2:27:2e:bf:ec:e8:d7:8f:b1:7f:
5c:b9:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:45:00 2025 by rpki-client