
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
File: a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa (raw, json)
Hash identifier: nTPAHs1GRacfSmDctXHweCELX504ivlDnIa7FZwIaOg=
Subject key identifier: 22:05:9B:93:F2:B5:3F:B3:C3:91:49:82:D9:96:7A:16:64:75:7B:BD
Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial: 010D0C9F4328584B95A78927E1A0F0AE3BD58B80
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 25773
IP address blocks: 2602:fd59::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:89:27:e1:a0:f0:ae:3b:d5:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=547b22f7-dd30-4859-8ca0-4a9b53240e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c7:19:f8:17:09:cd:66:cd:ca:b5:e0:a6:97:
52:98:1e:1c:38:8a:f7:71:5a:27:87:0e:ee:70:8f:
f5:c3:74:ab:d5:59:de:4a:93:37:bd:b5:93:45:16:
7e:9d:14:03:bf:f8:a8:85:32:d8:5a:45:0c:22:65:
49:b1:1b:b4:bc:e3:de:4d:29:84:d6:52:4a:13:a7:
f7:91:1b:4c:ec:76:80:83:56:cd:a6:08:75:5b:37:
da:77:a5:6a:b0:b4:03:24:86:af:31:f2:33:c9:18:
45:7d:c3:4c:67:d6:e3:19:c7:27:4c:f6:28:51:29:
b8:10:05:15:cb:91:db:db:be:09:1a:04:cf:c8:84:
ff:57:5d:26:32:ae:70:49:5c:54:ab:b9:89:7c:c3:
78:3e:3e:77:26:88:25:c5:e3:21:1e:3b:59:9d:b4:
16:33:cc:3c:fd:c7:a4:ab:d6:06:d4:08:07:a8:de:
57:a4:6d:1b:5f:20:5e:89:cd:f4:24:86:2e:c6:e7:
54:54:e1:ba:99:07:00:1b:ad:55:ba:d7:76:80:6c:
6b:a5:7c:8f:a0:e3:06:7f:63:03:7b:47:ac:05:a2:
73:eb:8c:fd:81:f0:eb:a7:91:d0:1a:ba:cd:5e:e7:
b4:46:94:ff:50:3b:94:fe:78:9f:15:13:76:27:4c:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:9B:93:F2:B5:3F:B3:C3:91:49:82:D9:96:7A:16:64:75:7B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
X509v3 Authority Key Identifier:
keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd59::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d4:36:b8:ab:aa:64:da:ee:9f:a2:62:21:f2:00:f4:a7:34:
01:55:d8:2a:7f:0d:9d:fe:d8:45:40:2e:ae:28:23:9d:79:5c:
a8:bd:6e:48:a5:19:54:5a:c5:5a:cc:b7:bb:fe:c1:b5:30:b3:
e0:e6:a9:14:d3:23:5e:59:f0:c3:e3:d2:b6:d7:82:e1:cf:51:
e1:99:5d:09:d2:25:09:fe:a6:e9:cf:5f:f6:06:4a:7a:30:e3:
ab:05:63:96:41:bf:01:a6:f7:13:e5:af:82:e5:da:11:5f:ff:
31:37:8c:e2:0a:df:57:ad:1d:b5:e4:2a:0f:5a:b0:28:1b:58:
ef:52:57:ee:bc:09:7f:52:bc:dd:b3:a9:8f:bb:92:d2:d9:e2:
23:05:b1:58:7f:40:66:f9:b8:6c:ec:df:da:26:60:ad:c8:6b:
3b:69:6a:55:80:08:e4:d8:ba:be:d9:be:a4:b0:c3:bc:5d:e1:
bc:e4:fd:ba:5c:47:d8:53:8e:22:0f:43:b1:c9:b5:ec:a0:4c:
d3:a4:a6:94:47:bc:e8:ff:4d:9b:5c:d2:ff:8a:89:4d:f3:f1:
91:b1:41:ee:78:2e:25:fa:81:28:6b:c2:5b:8f:ad:0a:f1:07:
c9:c7:43:a7:97:e7:fd:22:ad:8e:9a:85:18:5e:6d:6d:24:00:
b8:9f:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:53 2025 by rpki-client