
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa
File: 4366a209-e4e8-3e21-8800-8ffe47ac5628.roa (raw, json)
Hash identifier: neMhz1bBzdYSNfAXXFA5EHcib54p3jPgvgaBuSyhMQQ=
Subject key identifier: 7E:CA:E9:0D:DB:AC:D4:BE:DA:66:FF:EA:61:6A:A1:62:5A:9E:E3:AB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB88D3BB12420BA8AA49AD180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 2606:4700:42c8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:3b:b1:24:20:ba:8a:a4:9a:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=99f19a58-bd47-4299-a2ba-4b7bb32983f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:c0:01:13:6b:c2:5e:aa:c7:91:bd:5c:64:
b0:71:61:33:38:85:73:e7:da:43:7b:fb:94:cd:73:
03:ab:f5:54:57:6d:8b:ea:17:30:16:cb:48:e7:c5:
39:a8:6c:97:38:ec:aa:6e:76:ae:ac:09:47:bb:cc:
25:83:e8:d7:1c:c8:b4:e0:1c:b0:0c:cd:b1:04:0b:
09:bd:e3:cf:68:2c:21:bf:9b:91:96:85:d2:db:2a:
ec:9a:78:ad:05:40:6d:a0:b9:94:78:7e:c5:fd:53:
39:eb:b0:4c:e3:62:21:8a:f8:77:85:2f:84:c1:d7:
7a:5f:56:7c:04:93:f8:68:95:84:95:b4:83:be:12:
af:51:31:66:f1:b4:88:3b:91:21:22:db:b1:89:0d:
36:a7:88:40:e8:50:6f:7c:aa:23:8a:07:cf:c4:bb:
1e:b5:79:9b:7c:b7:ad:52:be:31:d2:c6:95:d2:3e:
9f:33:15:36:42:83:91:fb:f1:17:38:34:1b:e5:95:
d7:16:03:0a:49:81:3c:b8:d6:10:46:31:37:c5:20:
89:8d:ae:13:cf:c4:b1:42:ae:cc:95:b5:19:53:e4:
c1:b5:d9:6e:55:05:a1:41:92:30:54:90:ba:9c:ee:
6b:ba:70:9f:ec:62:31:a0:b8:59:b3:b6:d9:d7:0b:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CA:E9:0D:DB:AC:D4:BE:DA:66:FF:EA:61:6A:A1:62:5A:9E:E3:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:42c8::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:52:c4:81:2e:89:0b:27:f9:48:d6:cc:a6:ce:e6:c3:ba:3c:
34:53:fe:f6:6a:d8:27:b6:9f:57:aa:2f:50:00:42:23:3c:0d:
c7:f6:73:d5:b4:01:a1:41:7e:2a:89:52:c9:14:4f:0e:a4:ec:
92:bc:cb:85:c0:a9:ba:05:1c:b6:11:25:4a:10:74:bb:72:19:
76:a2:d9:7e:77:5b:09:2c:b8:33:26:13:a6:9f:22:ff:03:8c:
f5:c8:0f:47:c3:11:32:c9:bd:26:2b:f9:5e:c4:ee:51:84:e5:
51:1e:3f:f6:6f:71:45:ce:9d:61:cd:dc:f5:ab:c1:d9:6d:bd:
a2:5d:ec:0a:b6:54:6e:a4:c3:4a:58:78:ea:68:08:5d:e3:78:
4b:c4:69:2c:98:03:93:37:a3:bf:7e:91:1d:3a:8c:7c:d8:13:
33:96:1a:56:18:b8:31:60:b0:6c:44:be:f8:ec:ca:a9:8c:29:
42:a5:c9:7e:a7:ff:11:54:0f:19:8b:8a:39:00:f3:6a:80:63:
56:86:e9:5b:f1:c7:1b:87:70:62:f5:50:24:d0:3c:b6:ef:f2:
6c:b5:f2:3d:87:8d:a0:41:bd:b0:85:1f:f8:33:27:88:21:1c:
de:c5:bb:b0:7e:8c:17:b2:7c:fa:71:34:79:5a:f0:c8:d3:f4:
a7:f7:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 04:23:09 2025 by rpki-client