
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa
File: 063be228-15cd-3792-9587-8ed8a9cb0646.roa (raw, json)
Hash identifier: RhIKBGlJKPpHP0pFx7et6YyUgO91QUrTQtzp9OUAbZE=
Subject key identifier: 23:99:EC:F4:13:A7:B4:AF:A2:11:41:55:05:09:0B:D0:18:76:A9:DA
Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
Certificate serial: 010D0C9F4328584B583C82521608D05E9CAD36C0
Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa
Signing time: Sun 28 Sep 2025 13:00:41 +0000
ROA not before: Sun 28 Sep 2025 13:00:41 +0000
ROA not after: Sat 27 Dec 2025 14:00:41 +0000
asID: 21922
IP address blocks: 2604:c040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:58:3c:82:52:16:08:d0:5e:9c:ad:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
Validity
Not Before: Sep 28 13:00:41 2025 GMT
Not After : Dec 27 14:00:41 2025 GMT
Subject: CN=451182b6-a9e6-4b47-b4ad-aad420a45033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:3c:b3:a7:c5:73:42:e6:64:25:9b:d1:6a:
e9:4c:65:f0:75:ce:c0:42:72:f2:96:ae:66:ae:b4:
97:19:ce:a0:72:eb:08:92:e7:ff:c8:21:cf:7f:6c:
8b:c4:9f:0a:9f:16:00:58:5b:ff:86:95:d5:cc:a1:
87:ba:93:c4:36:6a:0c:0c:f8:3a:00:b3:25:70:ec:
17:6f:e6:da:c0:5e:bb:b4:2e:0b:84:fc:df:f6:4b:
68:76:34:b6:ac:37:5e:8c:2b:21:d1:4b:86:e9:dd:
2d:0c:86:c7:6d:49:33:9b:a0:21:0d:42:84:32:e2:
33:df:90:31:79:42:d1:84:68:29:a3:76:ec:04:44:
51:b7:92:41:f4:bf:ef:eb:b5:d3:b3:66:58:ce:35:
08:c0:8c:bd:f9:f3:3b:35:54:9b:0f:be:52:df:ec:
d1:93:78:60:d0:f9:6c:0d:57:99:a9:ec:01:6d:64:
09:93:40:43:c7:08:b9:59:d1:a1:5f:14:e7:04:f4:
6a:d0:13:d4:3b:63:9c:d9:ad:21:37:32:cb:e2:64:
b9:a8:49:02:28:ad:8f:e6:01:75:9b:fd:e5:16:79:
d3:89:b1:2e:48:6d:87:a6:a3:0e:64:96:a6:59:76:
9d:40:98:49:15:39:c8:6b:3e:7d:ee:2c:78:59:8f:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:EC:F4:13:A7:B4:AF:A2:11:41:55:05:09:0B:D0:18:76:A9:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl
X509v3 Authority Key Identifier:
keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:14:21:c1:2e:8b:a0:23:34:3b:eb:67:2c:6b:eb:07:6e:3d:
be:38:74:58:76:fd:47:14:da:0d:cf:a7:9a:f4:ed:67:af:44:
7c:03:51:2d:bc:db:7c:1e:94:e1:28:98:7f:d8:0f:d1:49:5b:
65:e2:56:14:08:8b:db:38:e2:4b:6c:13:14:70:37:47:9d:9e:
a2:1c:eb:78:82:0f:f8:d8:12:13:41:94:90:66:d8:b5:47:b3:
87:82:b4:27:86:4f:ca:d4:9c:a4:18:a6:da:c3:9d:bd:6f:bb:
2a:d4:76:71:56:3d:7e:87:b4:c9:a5:80:ea:d2:1c:da:e7:c9:
84:67:a6:49:b3:8a:4e:76:c8:5b:ec:d2:fd:b5:b7:55:10:d8:
80:e1:69:ab:3b:f2:2a:2c:af:83:17:25:e8:fa:e6:b2:31:8c:
4e:fd:9c:ae:d5:09:63:44:0d:15:32:c6:82:2f:25:28:15:7b:
89:b3:b2:0b:5a:0d:68:15:fd:9e:52:09:0b:a6:80:5a:f4:7c:
f7:2e:12:b8:b3:1e:20:74:59:6b:4e:d9:d4:f5:f6:1e:d0:1f:
88:4b:f7:3d:a3:45:0b:c5:9f:e2:98:ab:e2:bd:6d:bb:9f:18:
2e:3e:1e:1e:1d:1c:0c:c2:b4:0e:92:64:3c:c4:89:28:72:74:
ca:f3:9a:6d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtYPIJSFgjQXpytNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi
MTc3MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NDUxMTgyYjYtYTllNi00YjQ3LWI0YWQtYWFkNDIwYTQ1MDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXQ8s6fFc0LmZCWb0WrpTGXwdc7AQnLylq5m
rrSXGc6gcusIkuf/yCHPf2yLxJ8KnxYAWFv/hpXVzKGHupPENmoMDPg6ALMlcOwX
b+bawF67tC4LhPzf9ktodjS2rDdejCsh0UuG6d0tDIbHbUkzm6AhDUKEMuIz35Ax
eULRhGgpo3bsBERRt5JB9L/v67XTs2ZYzjUIwIy9+fM7NVSbD75S3+zRk3hg0Pls
DVeZqewBbWQJk0BDxwi5WdGhXxTnBPRq0BPUO2Oc2a0hNzLL4mS5qEkCKK2P5gF1
m/3lFnnTibEuSG2HpqMOZJamWXadQJhJFTnIaz597ix4WY9rjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCOZ7PQTp7SvohFBVQUJC9AYdqnaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh
NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvMDYzYmUyMjgtMTVjZC0z
NzkyLTk1ODctOGVkOGE5Y2IwNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0
MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3
YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy
ZDIzN2IxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTAQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUFCHBLougIzQ762csa+sHbj2+OHRYdv1HFNoNz6ea9O1nr0R8A1Et
vNt8HpThKJh/2A/RSVtl4lYUCIvbOOJLbBMUcDdHnZ6iHOt4gg/42BITQZSQZti1
R7OHgrQnhk/K1JykGKbaw529b7sq1HZxVj1+h7TJpYDq0hza58mEZ6ZJs4pOdshb
7NL9tbdVENiA4WmrO/IqLK+DFyXo+uayMYxO/Zyu1QljRA0VMsaCLyUoFXuJs7IL
Wg1oFf2eUgkLpoBa9Hz3LhK4sx4gdFlrTtnU9fYe0B+IS/c9o0ULxZ/imKvivW27
nxguPh4eHRwMwrQOkmQ8xIkocnTK85pt
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:19:45 2025 by rpki-client