
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
File: 24b668fc-a509-3a42-8684-d6b7501ff35b.roa (raw, json)
Hash identifier: KcDVjEnEMJyPDz9DIMVL3ISbevoNETrfTxhQiCZ1HXA=
Subject key identifier: 0F:BF:DB:10:05:1C:44:CA:D4:4A:CC:2B:7A:F0:98:8A:24:09:FF:82
Certificate issuer: /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial: 010D0C9F4328584AC87654562EECA33DFBBCD000
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
Signing time: Fri 08 Aug 2025 01:00:33 +0000
ROA not before: Fri 08 Aug 2025 01:00:33 +0000
ROA not after: Thu 06 Nov 2025 02:00:33 +0000
asID: 398646
IP address blocks: 2602:fe6b::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:c8:76:54:56:2e:ec:a3:3d:fb:bc:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
Validity
Not Before: Aug 8 01:00:33 2025 GMT
Not After : Nov 6 02:00:33 2025 GMT
Subject: CN=c2f1993b-8390-463e-9157-3ab7e3949510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:57:b7:33:44:0f:4f:5d:f8:d1:32:d8:28:
4d:d5:4a:1a:3c:d4:85:35:db:4c:eb:80:c6:5b:68:
ad:18:6c:e1:71:5d:68:81:86:a7:96:e1:c5:62:83:
fe:a7:f0:16:56:cd:66:aa:e0:58:e8:32:ef:c0:4e:
fe:fc:77:3c:a4:3f:ca:40:14:40:9e:11:73:53:24:
19:ba:63:e2:01:07:0d:4e:4a:0a:e3:c1:85:a3:f7:
32:bb:a9:d4:73:ca:68:78:75:dc:6f:b8:0e:3b:de:
5c:2d:4b:cd:50:79:4a:12:25:97:1d:de:49:4f:78:
fe:d9:de:ba:9a:1b:b0:68:b5:34:e8:3d:af:13:8a:
b9:80:d0:55:a4:b9:65:1e:79:73:d3:c7:6b:da:68:
9e:0f:bd:c1:f8:a2:c0:2b:53:e5:f5:90:c6:1f:df:
77:22:2c:b2:32:57:13:7d:75:c7:61:b1:d3:b5:47:
c4:a7:c7:a7:ff:8c:a0:b3:be:82:dc:7a:22:06:75:
c1:54:d3:d9:c0:0f:ab:e4:4b:b0:e1:43:d3:6d:a9:
95:21:36:7c:14:65:02:44:13:95:42:cf:3a:ea:be:
2a:b6:8f:dd:e9:0e:cb:a7:99:f3:ea:3a:cc:6a:75:
ac:c7:c5:24:0e:98:a7:d7:74:c8:1f:be:1d:20:49:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:DB:10:05:1C:44:CA:D4:4A:CC:2B:7A:F0:98:8A:24:09:FF:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
X509v3 Authority Key Identifier:
keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fe6b::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:79:dd:5c:e3:ee:c8:26:f3:68:69:42:8d:04:d7:e5:60:39:
66:f9:eb:d5:a3:ef:9e:ff:6d:22:5c:75:07:3d:9f:f1:ca:94:
3e:61:29:05:3b:b6:a1:87:61:9d:f7:9c:eb:b6:1f:16:53:0d:
10:50:50:f0:78:d0:dd:7c:58:fd:15:4d:55:0b:88:4c:ff:86:
d3:ae:e3:86:83:1d:25:e1:0d:70:bd:49:fa:2f:38:55:c9:71:
b3:e5:2c:93:5f:8f:b7:9f:4e:a3:98:b4:27:66:8d:f2:95:aa:
c5:fd:17:e9:ac:81:fe:1c:c9:ce:60:32:f6:13:f2:27:17:63:
e6:81:cd:40:65:49:18:56:e6:5e:85:3c:62:d8:b2:d3:52:c2:
42:11:04:1f:f8:1c:34:48:d4:ea:fc:33:76:a1:7a:f6:e9:42:
30:4e:49:ca:16:03:1c:97:83:72:51:d4:7c:5c:c1:aa:d5:7b:
aa:81:21:22:01:38:2b:9f:bf:4c:7d:d8:ff:d6:07:dc:1d:a8:
58:83:4d:28:60:b6:7b:d8:be:6d:eb:ba:49:83:06:09:42:d2:
cb:ac:c1:67:f8:86:6d:95:ed:3b:7e:26:f6:a4:13:2f:2a:24:
be:16:84:13:e7:21:c0:fa:a4:ad:de:49:ee:7e:67:8a:c2:fd:
19:98:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:42:37 2025 by rpki-client