
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/ef2aba87-c309-31f9-86c1-ed2b982a79c9.roa
File: ef2aba87-c309-31f9-86c1-ed2b982a79c9.roa (raw, json)
Hash identifier: EIcnhlo0PuiQ0cGfs0Asw1LPd2ckQMgTv8LJOQXSUrA=
Subject key identifier: C6:35:1D:64:D5:00:1A:7F:67:43:47:D8:46:78:BD:40:7B:E2:74:0A
Certificate issuer: /CN=0271d5a3-10cc-4189-b655-bb69b930abac
Certificate serial: 010D0C9F4328584BB45D2E67F7742005BAE9D880
Authority key identifier: 6E:1D:88:4C:97:6E:86:F0:8F:FF:E1:54:46:CB:DB:D6:63:97:BA:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/ef2aba87-c309-31f9-86c1-ed2b982a79c9.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 32638
IP address blocks: 209.42.96.0/19 maxlen: 24
2620:2f::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/0271d5a3-10cc-4189-b655-bb69b930abac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/0271d5a3-10cc-4189-b655-bb69b930abac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:2e:67:f7:74:20:05:ba:e9:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0271d5a3-10cc-4189-b655-bb69b930abac
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=3946b782-be5d-4a63-966f-676037aac7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:d4:4c:58:f7:81:2a:23:b8:c8:1e:68:63:
13:ca:83:8a:28:55:16:55:e5:b4:3a:d8:60:be:90:
0a:a4:f8:85:35:55:1b:75:94:6e:f2:5d:e8:66:45:
45:0c:f3:0f:9f:30:cb:51:6c:49:99:d0:ab:0e:40:
f4:7f:16:e5:e2:cf:16:ab:ef:97:3a:47:0b:69:f7:
b7:f3:67:ce:fd:e1:e7:fd:9b:75:63:d8:c8:b9:a2:
50:8a:ca:30:76:e1:88:80:d0:da:98:bb:42:44:d9:
69:d8:f0:9f:36:56:1b:6f:18:00:65:6d:da:40:84:
22:85:f4:6d:5b:0d:13:8c:29:5b:57:8b:7c:e6:8a:
7f:fc:e4:ba:60:53:d5:09:90:32:cf:07:9f:df:e6:
59:b5:d9:11:72:c6:04:36:4c:bd:86:69:93:9f:1b:
51:0f:46:04:58:7f:2d:b9:a0:a8:7d:5a:e4:67:d8:
f7:65:96:b5:08:b8:18:fe:06:ab:ba:02:df:46:8d:
fa:c1:e1:d7:77:f4:cc:cf:87:96:0b:d5:a6:bf:cb:
01:44:15:60:e3:77:1f:a9:e4:c2:1f:26:d8:0a:27:
1e:3b:60:a4:3b:92:1c:17:fc:b0:07:cc:c1:0f:82:
41:eb:0f:df:90:2d:01:f3:60:e0:be:57:5e:a3:04:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:35:1D:64:D5:00:1A:7F:67:43:47:D8:46:78:BD:40:7B:E2:74:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/ef2aba87-c309-31f9-86c1-ed2b982a79c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/0271d5a3-10cc-4189-b655-bb69b930abac.crl
X509v3 Authority Key Identifier:
keyid:6E:1D:88:4C:97:6E:86:F0:8F:FF:E1:54:46:CB:DB:D6:63:97:BA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac.cer
sbgp-ipAddrBlock: critical
IPv4:
209.42.96.0/19
IPv6:
2620:2f::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:10:50:8c:65:c0:9e:e1:ef:23:33:51:f7:9f:63:23:22:eb:
ff:a0:21:90:06:eb:f1:5d:52:48:18:60:3c:87:36:dc:bb:ab:
87:06:93:8a:62:4a:dc:32:83:47:8d:47:ef:70:c1:9f:36:7c:
be:ca:16:a0:c8:1a:aa:f1:d3:bf:d1:9a:d7:21:7b:93:96:78:
c1:16:81:84:af:92:69:5c:6d:56:3a:46:39:97:77:28:68:ba:
48:00:e6:99:99:c0:ba:b7:8d:43:de:3d:a7:0e:a3:16:3a:b0:
69:18:41:f2:6e:d1:aa:d5:06:05:da:7c:5a:38:55:98:b5:2a:
49:aa:5a:80:a8:e4:4f:bb:a9:49:0a:f0:b7:c6:6d:c3:ca:46:
1a:c2:85:f4:15:09:62:bf:8f:20:98:54:86:b2:f5:34:08:40:
b0:ce:93:f1:80:81:b9:f6:38:aa:4c:38:1a:a1:8d:28:03:34:
23:d6:5a:6c:22:61:19:44:0b:b6:d6:9f:be:71:0d:55:6a:a7:
e9:ef:06:bd:46:63:10:3a:d5:4b:a1:c2:32:d2:4d:5d:ce:fd:
0c:78:af:26:6d:96:aa:a5:57:d4:8f:e2:89:43:26:80:72:c5:
b0:1e:a6:79:6a:2c:8f:8e:b0:62:0b:2f:a1:6f:65:45:29:d5:
c4:f4:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:13 2025 by rpki-client