
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa
File: 3a85bc02-c232-32a4-afa5-874e560f0fe1.roa (raw, json)
Hash identifier: Nsc7QQJOZE7vjTSARxKrwDQrEvMCXUXHpMVD9ARmKlg=
Subject key identifier: 52:CD:E8:17:04:3E:3F:73:29:05:8B:D3:A4:5C:FE:A3:BE:09:61:CE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B1C3725AAE65C6E2437A46F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa
Signing time: Sun 07 Sep 2025 01:00:33 +0000
ROA not before: Sun 07 Sep 2025 01:00:33 +0000
ROA not after: Sat 06 Dec 2025 02:00:33 +0000
asID: 6167
IP address blocks: 2600:1004:a040::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1c:37:25:aa:e6:5c:6e:24:37:a4:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Dec 6 02:00:33 2025 GMT
Subject: CN=9e87c938-748e-4856-bf10-0336cc3b25bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:e9:28:7e:b8:df:05:5d:b4:45:4d:fd:f6:
ae:5a:e5:67:09:5e:da:7e:5a:6f:90:7c:09:6d:0a:
97:32:34:8d:fb:ef:ce:d8:9a:00:ab:b0:27:ce:b5:
f4:d6:b4:65:fb:86:57:48:26:f6:89:3b:70:62:b2:
90:fd:bc:6a:f7:1b:06:8b:de:c4:b4:04:e3:e1:99:
a5:7f:83:19:35:e6:55:be:2c:7f:fb:dd:74:4f:72:
f7:8e:38:71:97:94:73:a5:92:a1:1a:47:09:3c:10:
bf:58:09:01:41:3d:c5:46:55:36:f3:1c:f9:a9:1b:
ab:aa:34:e8:85:54:59:f5:5e:60:86:24:41:ff:e1:
ab:bc:99:68:6d:a4:d8:73:4c:c3:58:da:fa:2a:ae:
97:19:a1:00:87:75:b3:15:04:60:96:dd:8e:5c:84:
98:4c:97:c4:c1:49:b5:fc:c3:e3:84:10:f1:12:56:
46:7d:e7:48:4a:19:0d:73:16:f5:c8:02:ac:07:97:
31:54:98:38:11:ea:c1:a4:1c:0a:cf:c9:aa:3e:3b:
94:ef:51:22:a7:2a:31:9f:c1:7d:f0:19:39:6a:da:
48:78:60:34:e3:59:02:29:55:b4:ff:ed:2d:a4:18:
58:5d:17:4e:02:99:ce:c5:50:80:e2:b6:e0:96:87:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CD:E8:17:04:3E:3F:73:29:05:8B:D3:A4:5C:FE:A3:BE:09:61:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1004:a040::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:59:b7:51:a2:c6:8d:71:74:4f:e6:0b:59:50:a3:00:bc:ce:
ac:f4:4d:49:30:76:59:ff:fc:95:7e:2b:32:71:c4:2b:50:7c:
9f:fb:dc:9e:7f:de:b6:9a:51:55:fe:3e:bb:23:a9:5c:b9:59:
00:79:a1:0a:69:0e:54:7b:52:dc:64:96:65:41:7b:0b:01:77:
35:b8:e2:a2:40:13:d0:fa:2c:09:bd:a8:4b:8c:b5:c7:27:fd:
07:00:c0:f7:a1:5b:24:73:21:c9:28:f2:d0:b0:55:87:35:6f:
de:cf:db:5c:62:48:2b:75:6d:15:0f:0c:10:e7:03:4c:44:8c:
b3:30:3f:7e:9c:14:71:73:be:46:6d:c2:9c:33:cd:03:1d:5d:
ae:88:f8:0c:e6:a7:83:95:f5:28:ed:51:d2:51:51:bc:c8:00:
00:f4:bd:ce:18:bc:3e:83:84:40:9d:e7:02:53:72:12:b4:b4:
3b:29:c5:24:08:7b:4c:5a:24:93:33:fb:c7:24:bf:c0:18:06:
22:23:fb:d7:fd:24:da:7e:c1:ce:ff:8c:06:f0:a2:54:30:94:
fe:31:da:ca:6f:af:45:75:85:45:64:f1:59:68:90:c6:9e:65:
37:7a:ac:fe:53:f9:cc:b7:32:f9:9b:ba:dc:09:a4:03:a8:0a:
91:97:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:28 2025 by rpki-client