
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa
File: 3380adc5-3344-3ade-bd94-ce7bb7300997.roa (raw, json)
Hash identifier: A+cafBbeLMrHqN3jvPQrW1jls8OtBZOyjtIqeizQ0EU=
Subject key identifier: BF:C9:59:18:23:36:E8:B0:52:A7:8B:47:22:0E:B1:97:68:1E:8D:4D
Certificate issuer: /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial: 010D0C9F4328584BA93253CDE97E136E43594800
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 0
IP address blocks: 206.53.170.0/24 maxlen: 24
2606:a980:0:3::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:53:cd:e9:7e:13:6e:43:59:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=78fec550-6b0b-40e8-b726-2266c3fa501b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:99:12:2d:89:2f:78:a1:1f:5b:a2:e2:94:
95:4c:c2:0c:ab:c4:6f:4d:85:01:4e:e4:71:f5:35:
7d:7b:65:e5:67:f0:b1:d2:42:1c:dc:99:a0:ec:bb:
09:43:03:2a:6d:8b:f7:09:bf:9b:bc:d6:4f:c2:5a:
bd:69:22:0f:b8:44:64:5d:a2:a3:fb:f5:92:f3:67:
e5:53:25:19:ad:d9:31:46:d1:9e:b1:2e:df:38:c3:
02:6c:67:3e:5d:d3:38:0e:ed:e9:d9:74:65:f4:95:
05:8a:4a:96:c5:2c:67:94:61:8b:d5:62:6c:4d:72:
a3:69:b2:e4:30:2b:8f:2a:0d:be:97:9e:d3:38:c2:
0f:93:bf:4c:76:0a:9d:e5:69:17:2f:87:db:a0:2a:
fa:ea:95:3d:35:06:68:ce:c8:99:9a:6e:81:1a:d9:
47:b9:49:68:39:ef:21:a9:00:2e:2c:0e:df:2c:46:
59:76:e9:7c:5b:22:7c:bd:d4:92:0e:28:fb:e9:5c:
b7:3a:7b:16:81:b9:9d:73:6f:bd:a0:0d:c1:35:32:
14:aa:36:e0:db:8c:93:fe:61:c3:1c:39:1f:9a:68:
e8:72:5a:6d:2e:c3:e6:9a:51:9e:d2:5b:3c:a0:51:
36:04:98:8b:16:8d:9c:d3:59:5c:e8:0a:ef:76:fd:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:59:18:23:36:E8:B0:52:A7:8B:47:22:0E:B1:97:68:1E:8D:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
X509v3 Authority Key Identifier:
keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
sbgp-ipAddrBlock: critical
IPv4:
206.53.170.0/24
IPv6:
2606:a980:0:3::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:3d:4f:00:39:fe:15:4e:76:0a:df:ab:11:a3:ef:b4:dc:ac:
84:39:f1:ed:04:06:cb:58:b9:51:ed:c0:61:3e:a7:2c:d0:b3:
74:45:b5:ab:a9:8e:e4:cf:37:ed:99:bc:b4:9c:bc:fe:04:08:
43:5d:91:e5:4f:7e:d5:21:33:1f:d8:0a:3a:f2:7f:94:15:ea:
7f:1d:c0:0a:20:5f:5e:49:bf:d3:58:3a:8a:ca:3e:71:26:a5:
b2:17:2f:39:ca:6a:3a:e2:80:85:0c:13:eb:19:2c:08:28:2b:
3f:bc:59:ef:19:6d:14:3f:5d:eb:7d:eb:95:62:43:6f:b0:c7:
99:13:5a:0c:e5:62:d4:d4:1d:8c:a7:2f:0e:95:38:ff:b4:3c:
3f:11:70:5d:14:58:9b:d3:04:22:b5:85:cb:00:19:78:72:33:
6f:d5:af:26:1c:29:af:50:fe:32:d2:cf:da:b0:6a:10:d1:c5:
7c:1a:52:6c:4c:a9:d2:56:44:5b:98:79:08:35:d2:55:52:84:
ca:d9:cf:a0:03:25:6f:0f:8f:3f:31:27:97:b4:ea:9d:b2:46:
3f:96:33:eb:74:b4:a4:30:ff:02:b0:81:cd:98:8d:cb:ef:54:
00:0e:d5:9b:52:da:ab:15:90:47:fa:5b:ec:2e:c9:0f:ce:e0:
b3:e4:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:17:21 2025 by rpki-client