
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1ab528d-c36f-37f6-807b-16f80973f512.roa
File: a1ab528d-c36f-37f6-807b-16f80973f512.roa (raw, json)
Hash identifier: 8YGrixgGoD4DgdicjRtigDLUtIPJUB9ywQsr9eg5Wo0=
Subject key identifier: 31:77:C6:B8:F0:1B:7F:BB:92:F5:A2:1C:A7:D5:63:29:73:EE:FF:46
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB192727FCA1715B74FF6C1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1ab528d-c36f-37f6-807b-16f80973f512.roa
Signing time: Thu 30 Oct 2025 13:00:38 +0000
ROA not before: Thu 30 Oct 2025 13:00:38 +0000
ROA not after: Wed 28 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 2606:4700::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:92:72:7f:ca:17:15:b7:4f:f6:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 30 13:00:38 2025 GMT
Not After : Jan 28 14:00:38 2026 GMT
Subject: CN=5b9872ba-993c-4187-96ec-ad3dcdc2b57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:aa:f9:dd:0c:1a:fe:a9:c2:a3:76:3b:c8:
77:ef:ed:ce:97:9b:04:d8:f8:45:d1:46:ba:7e:50:
48:42:16:b1:6b:04:cd:49:29:6b:78:fb:68:a9:78:
eb:60:38:f5:f9:3f:3d:9c:50:d9:69:2c:64:7c:44:
33:4c:45:f5:38:e9:8e:3a:2c:3a:5a:78:41:14:b5:
80:6b:08:50:cc:a0:55:24:f2:0e:89:0f:0f:d2:f4:
6f:40:72:e9:6d:99:e4:82:f6:4e:8f:dc:9b:87:0c:
53:f8:7f:ae:7a:95:5b:19:17:77:38:4c:47:a0:1b:
b1:22:7a:79:9a:de:28:45:03:1f:03:1c:c2:ac:40:
38:ab:62:d0:a7:a2:31:74:8b:5b:d7:af:c3:28:5b:
1b:6d:46:20:cc:ad:f5:3b:a4:0d:58:02:69:3a:1c:
2b:5d:83:99:38:78:71:b8:f3:8d:08:2d:64:c5:3b:
0c:c3:40:48:65:39:34:c7:54:f5:3f:11:8f:be:10:
f0:07:62:39:c8:01:19:b5:6a:65:6f:0a:1c:9c:51:
8f:e8:a7:e0:82:6a:2d:54:26:4e:3b:ec:76:d2:4f:
ff:dd:da:a6:90:22:3c:b9:98:00:2c:3c:a9:97:85:
09:b5:8f:23:95:4f:65:07:19:c9:3c:f8:e8:8d:5c:
eb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:C6:B8:F0:1B:7F:BB:92:F5:A2:1C:A7:D5:63:29:73:EE:FF:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1ab528d-c36f-37f6-807b-16f80973f512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:34:af:be:72:db:c5:22:11:46:26:97:8b:df:5f:4e:10:2d:
2f:05:68:1e:83:f2:ba:2b:49:fd:d0:0a:0e:57:a5:4d:e8:02:
1a:09:5e:f8:7b:3d:41:ec:69:06:6e:15:41:81:36:3f:47:3c:
b5:68:e4:1a:21:53:a2:d9:bb:ce:f8:b6:b4:84:68:11:b0:09:
07:59:ac:34:08:37:b7:a0:5d:49:12:30:47:de:1c:4f:96:ad:
4e:8b:eb:bd:7a:70:92:49:3a:6e:fe:cf:36:2a:01:dc:c6:fe:
24:90:95:f0:04:86:1c:91:96:8d:3f:a2:25:de:4b:b7:73:71:
73:a3:a5:99:ea:d4:39:41:40:e4:52:08:fa:31:b8:ca:a6:a7:
f5:79:ce:47:9f:01:90:a1:2c:a4:b9:b8:ec:94:f7:ab:54:73:
ff:2e:3b:d5:bd:73:66:2b:8e:f3:9d:50:6a:e7:13:eb:1e:35:
8d:cf:5b:8b:e2:d3:5c:5b:a2:49:9f:02:8f:68:e0:34:60:96:
54:ad:37:57:08:7f:13:e4:d0:60:33:3a:aa:08:0f:32:5f:db:
83:e7:24:47:fb:a4:f3:81:a8:8c:38:c5:b4:f5:82:d6:b1:1f:
ff:1f:07:67:7e:ee:54:1f:cc:0b:2b:57:f2:8d:a2:ca:37:ee:
37:8e:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:04 2025 by rpki-client