
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/39894d73-64d0-3b65-9ab8-4afaaf2d6123.roa
File: 39894d73-64d0-3b65-9ab8-4afaaf2d6123.roa (raw, json)
Hash identifier: bVLzZanGwn+tlPjaV2N5atpWSM4bvIQEXFKzXFZL7NQ=
Subject key identifier: D3:45:83:C1:D0:97:FC:E9:7F:44:27:B2:3A:9C:CC:CF:F8:EB:7E:9C
Certificate issuer: /CN=0432b247-64bf-4a12-bc99-32dbce58a455
Certificate serial: 010D0C9F4328584BB88D0DDA4D72FCCE3A443300
Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/39894d73-64d0-3b65-9ab8-4afaaf2d6123.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 14618
IP address blocks: 2620:104:2041::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:0d:da:4d:72:fc:ce:3a:44:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=d2f51bf6-8dbf-4287-9526-f6c6e034862a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:f2:6b:3a:8a:b7:f8:33:9a:90:7c:39:d0:
a9:75:b1:47:ce:14:6b:9b:b0:12:2a:b8:b5:dd:8b:
09:df:be:99:31:9c:96:c7:19:0a:75:d5:c3:b5:50:
54:af:53:70:98:42:da:a9:7e:09:e3:c9:42:98:21:
87:3a:c2:d6:d7:d8:89:dd:40:cc:aa:ac:b6:4f:0f:
db:53:c1:71:30:5f:82:c4:dd:1c:d4:03:fc:9c:8c:
98:23:e8:ab:46:83:ac:50:6e:1d:60:56:6d:23:ec:
d0:b1:60:17:7f:10:3f:61:34:d2:b7:fe:1a:91:21:
89:a1:36:83:54:f1:a5:26:4d:e8:27:88:68:13:0d:
85:eb:b8:18:b2:83:89:cc:d3:54:c5:12:7f:0b:ad:
99:9b:ac:23:d2:0c:20:3c:7e:36:8e:03:f9:b3:71:
55:1b:d9:99:b0:4c:a9:ea:e6:eb:7e:f8:a1:21:d2:
23:21:86:4e:a2:39:0c:2d:2f:2c:b6:1f:6a:ce:9e:
b1:33:83:ed:2a:c9:d5:c6:cc:cf:7e:18:43:93:dd:
92:aa:da:f1:04:4b:d1:12:bb:4e:b8:14:59:1f:18:
f0:a4:c0:8f:97:8a:be:a4:4e:44:c0:7f:18:81:1c:
b7:5c:7e:c5:56:7f:0a:c8:6c:fc:09:69:2c:7b:f7:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:83:C1:D0:97:FC:E9:7F:44:27:B2:3A:9C:CC:CF:F8:EB:7E:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/39894d73-64d0-3b65-9ab8-4afaaf2d6123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl
X509v3 Authority Key Identifier:
keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:104:2041::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:e9:44:5c:d8:a9:c1:c7:fe:0c:55:c8:5f:fe:d5:6c:8e:e5:
04:a3:b5:38:6d:90:c1:45:ab:1e:d4:18:5c:cd:05:41:92:ad:
55:fc:38:40:74:e1:87:91:b4:b4:c4:5b:91:5e:6b:dd:cf:02:
f2:06:90:9b:e7:c1:16:f2:67:22:f3:ce:6e:30:3d:83:56:9d:
26:1e:54:66:d2:27:c0:5f:9f:8f:92:74:01:c4:d6:6b:63:72:
a9:c1:2e:3b:a3:ee:c2:c2:c9:33:da:60:d9:42:78:f5:d0:5f:
c6:7b:0d:b1:84:45:85:31:29:ef:1f:d2:45:25:78:ce:82:e8:
5a:91:97:f8:71:b8:6d:fa:b4:ff:40:60:f3:f2:ae:5b:3f:5a:
dc:e0:34:90:03:d6:ca:6c:af:6c:20:ea:42:99:8c:68:b4:bf:
fe:64:e1:0a:40:a0:87:c3:49:3e:4c:f2:97:27:2a:b9:32:3a:
1d:5d:80:b4:da:cf:b6:7e:6f:50:93:da:25:8f:c8:b0:36:74:
a6:96:77:8f:ca:17:b6:81:e8:40:cd:d7:96:e2:de:3f:ca:83:
21:92:f0:b3:f6:e1:7d:2a:1b:9f:24:37:ba:b6:1a:5b:8a:9c:
9d:18:e7:07:20:2c:13:f0:a8:7a:af:f8:70:33:47:33:ba:7a:
80:19:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:00 2025 by rpki-client