
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa
File: 3c0f3863-e6b0-3003-9543-cbcefd435650.roa (raw, json)
Hash identifier: h42jkxtUGGrwpvjorRVSpxKAPzqGX25dzK1pf/+ZSOQ=
Subject key identifier: 0D:DB:1B:5A:B5:3B:A7:5C:BC:28:82:42:EF:98:7C:1D:F1:A5:EE:39
Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial: 010D0C9F4328584BA667A654B99A69E4900A4400
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 2698
IP address blocks: 2610:130:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:a6:54:b9:9a:69:e4:90:0a:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=a0f41ee3-b965-4b55-ba90-e2bd9b15a584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:9f:8a:87:96:e2:6b:da:5d:fc:d3:a1:4c:
e5:10:d2:47:25:d1:61:de:59:48:6a:84:02:dc:fb:
f8:e6:f9:c3:e2:a6:d0:ea:0e:e3:12:b9:ce:75:1e:
68:b9:8b:3f:ee:1a:7d:1a:15:bf:89:bb:bf:cf:a1:
64:b4:62:ad:2f:a2:a7:ba:4f:81:91:50:19:27:7d:
00:0e:01:81:6d:2d:c5:ff:a0:cf:42:1f:6d:12:09:
1b:6a:3d:bb:0d:8c:ef:af:6e:a9:ba:14:8e:bc:f4:
53:4c:6e:91:a2:ad:3f:43:62:f2:20:27:7e:9a:82:
b5:63:1c:22:d3:61:64:0b:66:3d:dc:5e:15:46:53:
42:93:c3:45:34:eb:47:81:88:a2:54:44:c3:62:aa:
71:70:7b:a0:dc:c9:c6:4c:aa:60:c6:ca:48:fe:8f:
34:55:4a:90:15:8d:f4:71:6b:89:58:b5:5d:4d:9d:
2c:97:df:9d:93:72:17:b5:9b:be:1f:eb:68:f7:be:
4c:94:99:51:34:3e:22:69:50:a8:7f:b9:62:39:af:
dd:89:02:66:3c:5c:76:61:48:23:5b:87:48:5e:15:
3e:1f:51:a1:cd:ae:ac:6c:4b:ed:d8:19:58:c2:bf:
8a:20:b3:47:7a:3f:0a:47:1e:03:57:85:fc:18:34:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:1B:5A:B5:3B:A7:5C:BC:28:82:42:EF:98:7C:1D:F1:A5:EE:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
X509v3 Authority Key Identifier:
keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:130:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:91:cb:de:ec:27:cc:4b:21:1e:2a:26:f1:e6:1f:87:02:31:
3e:25:5f:4e:76:37:25:70:13:c5:80:fb:a8:95:db:e2:0e:c1:
52:9d:df:5b:b0:78:b5:bf:a5:64:94:61:65:1c:2f:3d:a3:23:
63:74:a8:53:5b:2e:f4:c0:80:5f:a9:f6:b0:e4:3c:1b:a1:9d:
6f:f1:9f:de:bc:5d:60:4c:31:91:b4:7a:59:d0:8b:87:d5:0c:
bd:da:8f:14:af:6d:cb:cb:65:f4:24:86:0a:09:4e:32:4e:8a:
ec:42:f4:70:c1:62:28:b1:68:0c:b5:0f:43:78:a6:b2:e6:ca:
cb:83:c8:72:d1:71:73:2e:89:47:2e:9b:3c:a1:a6:fd:82:19:
55:e4:32:e2:d0:c1:f7:36:6a:52:fd:a6:49:34:0a:34:3e:f2:
bb:64:81:76:e0:68:97:42:01:f5:01:4b:d9:31:12:70:be:96:
73:30:1c:40:14:d1:37:ad:9f:f4:79:60:a0:fd:46:a4:33:f6:
6d:1b:4f:cd:23:9e:a7:4a:d3:31:03:91:80:be:c7:57:18:7b:
a3:54:ad:57:e1:74:9d:91:f7:56:f0:c7:1b:d0:a4:f6:a2:3e:
42:82:4b:79:9b:37:ed:f1:c7:7c:bd:7c:3a:05:70:b6:9f:e0:
1c:a9:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:59:50 2025 by rpki-client