
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/e6d28505-b7fb-390f-8e44-e0df401bef2e.roa
File: e6d28505-b7fb-390f-8e44-e0df401bef2e.roa (raw, json)
Hash identifier: R2q/aWm3u7dMtVikhhQS9SnuNWyUK//84ilEwfFBFcs=
Subject key identifier: 09:1F:2B:B4:52:D6:94:5B:C7:5C:65:FF:85:9D:0F:37:12:C4:6E:79
Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a
Certificate serial: 010D0C9F4328584BAD625450995E2F1C7C59A6C0
Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/e6d28505-b7fb-390f-8e44-e0df401bef2e.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 393577
IP address blocks: 2602:f7c5::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:54:50:99:5e:2f:1c:7c:59:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=79ece96a-b395-4f93-8524-4fc8eda28e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:c8:d7:f9:df:b9:1e:01:fd:ae:f3:70:ba:
ac:0d:20:d3:af:1d:e5:f7:40:00:1e:51:80:b0:36:
db:fe:7d:11:69:46:22:4b:0f:5c:b2:67:14:1a:e9:
a5:4f:0d:1b:8a:01:7d:96:dc:a0:91:5a:fa:e7:7c:
fc:2a:0c:c1:55:15:b5:06:4f:bf:84:0d:5a:36:db:
a1:1b:d1:02:04:43:51:92:7a:65:0f:87:90:ed:09:
83:7a:31:2c:7a:f8:8c:4e:71:df:df:fb:8a:d7:dd:
6c:c4:10:87:ca:16:03:9d:63:ae:82:55:0b:ad:97:
69:4b:ca:3c:53:92:50:b6:e1:e5:01:64:e7:4a:5d:
5c:24:e0:8f:82:69:b2:af:d9:c7:65:bc:c6:0b:b0:
55:91:04:90:ba:78:58:25:2b:4b:54:43:96:01:d1:
cb:0f:a1:bb:5e:4e:b5:2e:d2:60:d7:1c:c8:db:f3:
b8:d3:28:05:61:fd:c5:3c:f1:83:bd:3a:a4:ca:76:
16:56:17:bd:02:33:c4:b6:19:83:f6:62:9e:ec:e9:
40:94:c8:9d:8a:0f:39:0b:de:ec:e3:7e:58:89:68:
8b:34:1e:0c:4f:78:16:9a:a1:c5:5d:5d:88:0f:23:
3c:8a:13:e3:72:cd:1f:f9:bf:61:2f:c9:4e:b8:bf:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:2B:B4:52:D6:94:5B:C7:5C:65:FF:85:9D:0F:37:12:C4:6E:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/e6d28505-b7fb-390f-8e44-e0df401bef2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl
X509v3 Authority Key Identifier:
keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f7c5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:37:20:40:b6:ef:aa:b9:59:63:08:b8:8b:89:87:3b:34:05:
a8:a7:d9:10:7d:53:09:21:73:98:dc:58:8a:a7:ce:61:46:d9:
80:5d:66:b9:cd:c9:e2:12:a8:4f:b1:12:4e:f1:7b:90:c6:5c:
79:e8:26:44:6d:56:03:a9:54:20:ba:a5:32:f9:8a:73:da:77:
e0:8a:db:c5:c9:ed:0c:85:a0:10:a6:3b:dd:10:7c:c7:96:77:
cd:d1:63:39:4d:b8:11:36:f7:35:fb:f9:af:3b:43:a2:7a:85:
94:bf:28:7b:4e:7a:65:9b:ca:c9:d9:5f:ab:95:bf:54:68:e9:
4a:e1:83:00:d6:99:5b:2c:84:78:87:e2:85:56:4e:eb:3c:08:
e6:cb:7e:20:1c:ff:98:d7:1e:d0:11:ea:cf:25:36:d3:54:05:
9e:2c:61:10:a2:39:78:e5:00:99:17:cd:ac:59:2e:c6:71:f1:
69:33:18:10:e8:d9:82:5e:a1:1e:13:e7:a5:fd:93:ef:8d:71:
3b:dc:41:81:bf:01:51:77:3d:9f:30:66:83:a0:b8:4d:26:c1:
09:a7:74:f2:2d:2a:31:a7:3f:64:42:c7:d4:84:a2:b6:53:cf:
d2:f5:86:f0:63:d2:94:48:c7:4c:3f:97:1c:2e:c9:65:cb:46:
a5:a4:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 04:59:00 2025 by rpki-client