
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa
File: 3d2f377f-1667-3064-a226-3cf473e49e64.roa (raw, json)
Hash identifier: LhWPawkgiT4lWbDoxZ95lLiXb5sA/Iv1LJhTtAZy0ys=
Subject key identifier: 24:66:CF:3C:58:1E:1E:0E:04:24:15:0B:E4:45:22:A4:FD:EE:98:05
Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial: 010D0C9F4328584BB02CFDE8AB1E48CAECC5B180
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa
Signing time: Thu 30 Oct 2025 01:00:30 +0000
ROA not before: Thu 30 Oct 2025 01:00:30 +0000
ROA not after: Wed 28 Jan 2026 02:00:30 +0000
asID: 376
IP address blocks: 2001:510:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b0:2c:fd:e8:ab:1e:48:ca:ec:c5:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
Validity
Not Before: Oct 30 01:00:30 2025 GMT
Not After : Jan 28 02:00:30 2026 GMT
Subject: CN=f3c0116b-c546-40e6-b312-df19a47b0026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:af:eb:b6:de:a3:77:c4:01:7f:35:67:cb:c2:
b7:7c:0b:7d:5c:cb:ce:3e:c9:3e:21:23:4e:30:86:
51:f2:28:f3:d5:8e:c9:7e:29:c5:c8:8c:fc:72:44:
52:a8:e6:9b:14:ca:4b:4c:c2:27:a1:a1:ca:33:35:
0a:2b:3b:8c:15:53:2e:c5:73:0c:20:00:35:ac:3c:
41:54:0c:2d:3b:e9:fa:f8:1f:24:ba:8c:7b:74:34:
9b:c7:f8:85:78:ec:c9:f9:8f:19:78:f0:52:b9:53:
ac:52:51:3c:95:23:4d:71:72:fa:fa:4f:0f:8e:d0:
9f:13:f2:8e:d0:9c:b5:d4:30:e1:8f:37:3e:c8:ca:
76:15:63:08:15:e3:46:3d:a4:21:91:49:90:fd:c6:
be:3a:99:87:a6:02:63:96:83:05:10:56:6c:26:a0:
0d:c5:45:ba:6e:39:ba:66:28:d0:61:2e:f0:7a:d0:
3b:1b:d5:0e:c5:06:39:ae:fb:f1:94:c3:a5:00:e9:
53:51:8d:bb:c9:d8:ac:13:00:20:d8:98:25:6e:56:
0e:04:78:74:5f:ec:8e:8c:7c:92:8d:ef:58:6c:a0:
62:b8:22:59:0a:8a:a2:d2:cc:72:34:a6:d1:ae:30:
f2:a7:00:95:7d:5b:ee:aa:3a:88:5b:14:6b:0e:8c:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:CF:3C:58:1E:1E:0E:04:24:15:0B:E4:45:22:A4:FD:EE:98:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
X509v3 Authority Key Identifier:
keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:510:108::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c0:c8:27:98:9d:8e:1c:71:2f:44:b4:37:1f:c7:b3:2a:ec:
28:c2:99:fd:a1:2b:25:59:bb:91:c2:07:9d:30:19:45:60:3d:
23:bd:57:6c:1d:86:1e:89:35:2a:ac:58:7d:f5:fe:0a:d9:30:
83:1e:bf:12:e8:96:81:a1:be:a9:db:f6:94:31:93:0e:fd:29:
a2:a7:89:da:33:20:2a:96:1f:3d:fa:43:05:0a:07:de:71:81:
86:fa:b7:31:70:23:0d:54:94:3a:79:12:27:87:52:28:14:f2:
d5:7e:98:3c:66:3e:44:e5:98:a5:bd:98:37:06:4d:84:12:b5:
93:40:49:b0:e5:87:0c:a2:da:95:a0:94:3b:0d:b3:56:0c:cb:
e3:78:cc:4e:5e:35:00:2c:13:c9:d7:7e:61:55:92:a5:61:c3:
18:26:46:74:20:fd:bc:cd:1b:14:6d:cb:91:b3:93:f2:f9:9b:
dc:b9:33:b8:b9:28:fc:43:64:8b:83:04:a5:ad:3f:02:75:18:
53:6c:3c:da:54:a5:05:86:db:4a:34:a6:86:98:cb:b1:12:6c:
da:ce:13:22:a2:ca:3a:78:71:d5:5a:24:b2:15:a3:9a:5a:24:
a5:c8:9d:1d:b7:25:47:d2:ae:9d:ee:07:45:dd:cb:10:a4:6c:
37:0d:b0:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuwLP3oqx5IyuzFsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0
OTA1MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk
ZjNjMDExNmItYzU0Ni00MGU2LWIzMTItZGYxOWE0N2IwMDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK/rtt6jd8QBfzVny8K3fAt9XMvOPsk+ISNO
MIZR8ijz1Y7JfinFyIz8ckRSqOabFMpLTMInoaHKMzUKKzuMFVMuxXMMIAA1rDxB
VAwtO+n6+B8kuox7dDSbx/iFeOzJ+Y8ZePBSuVOsUlE8lSNNcXL6+k8PjtCfE/KO
0Jy11DDhjzc+yMp2FWMIFeNGPaQhkUmQ/ca+OpmHpgJjloMFEFZsJqANxUW6bjm6
ZijQYS7wetA7G9UOxQY5rvvxlMOlAOlTUY27ydisEwAg2JglblYOBHh0X+yOjHyS
je9YbKBiuCJZCoqi0sxyNKbRrjDypwCVfVvuqjqIWxRrDoyOiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCRmzzxYHh4OBCQVC+RFIqT97pgFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5
ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvM2QyZjM3N2YtMTY2Ny0z
MDY0LWEyMjYtM2NmNDczZTQ5ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy
OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz
NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw
YjNmMzQ5MDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFEAEI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAADAyCeYnY4ccS9EtDcfx7Mq7CjCmf2hKyVZu5HCB50wGUVgPSO9
V2wdhh6JNSqsWH31/grZMIMevxLoloGhvqnb9pQxkw79KaKnidozICqWHz36QwUK
B95xgYb6tzFwIw1UlDp5EieHUigU8tV+mDxmPkTlmKW9mDcGTYQStZNASbDlhwyi
2pWglDsNs1YMy+N4zE5eNQAsE8nXfmFVkqVhwxgmRnQg/bzNGxRty5Gzk/L5m9y5
M7i5KPxDZIuDBKWtPwJ1GFNsPNpUpQWG20o0poaYy7ESbNrOEyKiyjp4cdVaJLIV
o5paJKXInR23JUfSrp3uB0XdyxCkbDcNsA8=
-----END CERTIFICATE-----
Generated at Mon Nov 3 14:31:12 2025 by rpki-client