
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa
File: 0859e3de-d7bd-3f51-b107-036347946467.roa (raw, json)
Hash identifier: l98mTWnaqcd5eGSweSWdz3/4Rdeld+W6YKG0O/iOK3I=
Subject key identifier: 1E:05:4F:8F:63:D2:AF:A4:B6:39:FD:A7:BC:FA:0D:2B:F4:8B:01:CF
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B48E1BC0FE7E562D41F3ABDE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa
Signing time: Tue 23 Sep 2025 01:00:33 +0000
ROA not before: Tue 23 Sep 2025 01:00:33 +0000
ROA not after: Mon 22 Dec 2025 02:00:33 +0000
asID: 396602
IP address blocks: 2620:74:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:48:e1:bc:0f:e7:e5:62:d4:1f:3a:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 23 01:00:33 2025 GMT
Not After : Dec 22 02:00:33 2025 GMT
Subject: CN=566287ff-1a14-41c4-8896-1f3c924ab0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:a2:bc:45:87:d4:73:0b:90:e4:35:e1:a1:
b6:17:cd:9c:eb:a0:15:fe:1d:64:80:43:eb:08:cb:
7d:fa:aa:f4:ca:47:33:f1:93:34:49:d7:cb:16:f5:
54:e9:3b:2a:59:fd:69:2b:78:bf:04:e0:29:dd:c7:
24:09:ed:e0:8c:2b:59:e7:61:b7:e4:63:ab:58:b5:
af:51:29:d6:dd:1f:61:ab:2f:26:24:ce:60:c2:f1:
2a:a7:d7:49:17:a4:4d:eb:23:a2:06:ce:aa:2b:56:
aa:40:d2:3c:54:e4:04:b6:36:5c:c9:7f:bc:e2:11:
9a:03:49:b2:c0:95:2e:fd:2c:b3:bf:63:a8:60:c5:
9a:fb:38:38:1f:22:c4:bd:a7:99:5a:29:61:f9:8b:
3a:ba:18:5a:15:06:a5:e2:4a:9d:bb:83:98:91:12:
f6:16:da:08:dd:11:76:70:0c:01:15:6e:26:a9:43:
8a:1a:d0:d9:d0:3f:70:81:a8:f6:4e:9d:69:45:a5:
2e:7b:92:01:41:84:e8:9a:53:e7:7e:f0:89:ba:6f:
47:61:4a:fb:9a:14:8b:dd:ed:55:6b:1b:05:61:63:
88:98:e6:ca:0a:a0:8e:c9:3b:a3:42:42:43:9c:a9:
6c:21:53:fe:a7:c3:45:70:c6:a7:01:81:62:0c:8a:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:4F:8F:63:D2:AF:A4:B6:39:FD:A7:BC:FA:0D:2B:F4:8B:01:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:44:24:73:95:ad:91:4c:b9:0d:d4:68:24:70:12:1c:1a:86:
51:5a:94:53:28:af:a7:c2:e1:b6:3b:af:16:17:5d:f5:4d:ae:
e8:9b:f8:b7:e9:8b:cf:54:4b:16:d4:0c:84:a9:57:0f:51:8f:
26:ee:4b:2d:80:99:a7:25:01:f9:e5:58:c2:5a:17:1f:38:33:
57:29:b1:a3:f1:e9:80:10:3d:12:0f:f5:85:70:75:2c:39:00:
a0:57:92:6d:e4:f5:cc:0c:b5:fb:c5:b2:0c:59:71:ef:9b:4c:
96:87:50:df:ba:5a:43:ed:d3:ed:1f:30:9b:03:92:00:86:e4:
f2:77:6a:31:19:e7:99:07:fe:6e:3c:05:ca:55:91:47:77:ee:
57:94:2a:bf:c4:1b:16:12:5e:33:2a:48:d1:a8:7e:f9:43:9e:
8b:63:67:bd:9d:ff:4d:48:c1:cc:59:88:91:ff:14:67:15:1f:
88:8f:a9:69:fa:80:cc:ec:94:d2:18:fe:b4:ce:b1:b3:a5:0f:
49:d4:8c:b2:2c:0e:cb:53:a9:12:f0:31:b5:18:1b:e5:95:bb:
ab:ba:bf:03:81:4b:ae:14:a4:02:80:55:31:bb:84:d6:55:cc:
a5:e8:3d:50:68:8e:f3:2c:cd:c2:87:ad:a7:05:0d:4e:b1:0f:
6b:1c:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:44:47 2025 by rpki-client