
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa
File: e497d3e9-a9d1-3199-96be-8395d6cc959b.roa (raw, json)
Hash identifier: MdC4uv8nWJ20jjPHAlqEU//UcIjZR6zNTZVv/8iLCwQ=
Subject key identifier: 91:F7:62:9D:1B:4B:A8:48:A2:DE:3E:79:AC:EC:81:5D:96:33:39:83
Certificate issuer: /CN=deaf388e-6941-424e-9f96-abe06598e29c
Certificate serial: 010D0C9F4328584B94421E6A981A3414AF2D51C0
Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa
Signing time: Mon 20 Oct 2025 01:00:31 +0000
ROA not before: Mon 20 Oct 2025 01:00:31 +0000
ROA not after: Sun 18 Jan 2026 02:00:31 +0000
asID: 401371
IP address blocks: 2602:f652::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:94:42:1e:6a:98:1a:34:14:af:2d:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c
Validity
Not Before: Oct 20 01:00:31 2025 GMT
Not After : Jan 18 02:00:31 2026 GMT
Subject: CN=346a9768-82bb-4f6a-afca-96a8fc965163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:2a:57:3b:a4:32:16:dd:2e:bb:41:07:4b:
69:e2:fd:ec:77:cb:29:3a:cb:59:78:2e:90:58:92:
8a:d0:38:8c:dc:7b:cf:da:3e:ac:51:3b:77:0c:51:
34:8e:71:0e:91:c2:c5:08:72:b3:5c:9f:0c:2b:26:
65:e0:93:de:69:4e:6f:c1:ae:a1:b6:54:2b:f6:10:
ad:8b:aa:5a:25:cd:99:59:d4:85:0b:94:f5:35:6f:
ae:e9:b3:7a:7b:4e:4f:55:b4:c5:84:57:94:d3:d9:
24:c7:ab:90:8b:15:af:1f:16:93:7d:b5:2f:e8:7a:
2d:3e:6a:14:60:66:68:2a:d3:08:45:91:dc:32:3e:
9b:2f:e2:b8:57:73:97:b5:96:3e:86:b8:e2:27:18:
c6:e9:dd:af:e3:20:7a:e6:ab:d2:8c:a4:b8:b4:4c:
20:de:1c:11:ba:a3:11:4d:d5:3c:43:08:b9:8d:f5:
22:8b:18:51:3d:d7:29:ce:f4:9c:38:94:f4:15:45:
69:09:de:a4:20:f8:0c:30:c9:d7:15:17:ac:01:4a:
34:4f:ea:e3:a9:24:78:64:65:21:82:45:4a:26:a3:
0e:6f:4d:15:20:c3:76:36:f7:63:fe:bc:9b:a0:8c:
67:4f:6c:27:9b:ae:3c:1e:d3:99:73:dc:8e:a4:53:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F7:62:9D:1B:4B:A8:48:A2:DE:3E:79:AC:EC:81:5D:96:33:39:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl
X509v3 Authority Key Identifier:
keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f652::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:fd:26:d9:58:2d:3f:92:98:ed:71:05:3b:fb:2f:da:6d:ca:
f4:e3:f2:fe:f3:d6:6e:17:5d:d6:35:ba:a3:c4:c3:14:ff:5c:
de:f1:ca:ff:30:b2:77:71:09:26:e4:da:61:bd:2d:73:f6:ac:
33:d6:be:e4:27:b4:d2:9b:61:2d:1a:f8:6b:8b:38:64:ce:e0:
1c:79:d1:0e:c3:3b:7b:10:f6:17:40:4d:e4:98:8f:f1:f6:7c:
ef:09:8b:bf:b6:18:26:69:a9:a4:ea:15:84:3e:9e:e3:74:2e:
0b:40:8a:49:61:78:b3:ff:ef:3d:2d:6d:4d:28:62:d7:e1:40:
99:53:23:71:0e:08:c3:37:fa:07:3e:28:54:b5:3a:a4:79:a6:
1b:ee:21:5b:3e:d2:41:ef:b3:2c:91:23:5d:8a:38:6f:67:03:
2e:f0:17:55:2d:21:6f:25:74:94:34:2c:07:31:4e:d1:76:9b:
c9:c2:82:c1:20:75:66:5d:40:5c:4c:ed:ea:d0:73:86:b7:4a:
84:9a:08:9e:06:15:ae:ad:16:78:cf:65:f7:89:c8:b5:57:32:
14:d5:53:71:a6:88:aa:24:ae:95:ec:7d:0c:05:4b:87:59:8d:
e5:ef:b7:77:20:de:bf:09:d7:a6:69:30:dc:cc:2b:38:af:17:
d1:83:5a:72
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuUQh5qmBo0FK8tUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGVhZjM4OGUtNjk0MS00MjRlLTlmOTYtYWJlMDY1OThl
MjljMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk
MzQ2YTk3NjgtODJiYi00ZjZhLWFmY2EtOTZhOGZjOTY1MTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZIqVzukMhbdLrtBB0tp4v3sd8spOstZeC6Q
WJKK0DiM3HvP2j6sUTt3DFE0jnEOkcLFCHKzXJ8MKyZl4JPeaU5vwa6htlQr9hCt
i6paJc2ZWdSFC5T1NW+u6bN6e05PVbTFhFeU09kkx6uQixWvHxaTfbUv6HotPmoU
YGZoKtMIRZHcMj6bL+K4V3OXtZY+hrjiJxjG6d2v4yB65qvSjKS4tEwg3hwRuqMR
TdU8Qwi5jfUiixhRPdcpzvScOJT0FUVpCd6kIPgMMMnXFResAUo0T+rjqSR4ZGUh
gkVKJqMOb00VIMN2Nvdj/ryboIxnT2wnm648HtOZc9yOpFPo/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJH3Yp0bS6hIot4+eazsgV2WMzmDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFm
Mzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5OGUyOWMvZTQ5N2QzZTktYTlkMS0z
MTk5LTk2YmUtODM5NWQ2Y2M5NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVhZjM4OGUtNjk0MS00MjRlLTlm
OTYtYWJlMDY1OThlMjljL2RlYWYzODhlLTY5NDEtNDI0ZS05Zjk2LWFiZTA2NTk4
ZTI5Yy5jcmwwHwYDVR0jBBgwFoAU08yKMqfd0vAFIgVggYqZufYSxWcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUw
NjU5OGUyOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2UgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABf0m2VgtP5KY7XEFO/sv2m3K9OPy/vPWbhdd1jW6o8TDFP9c3vHK
/zCyd3EJJuTaYb0tc/asM9a+5Ce00pthLRr4a4s4ZM7gHHnRDsM7exD2F0BN5JiP
8fZ87wmLv7YYJmmppOoVhD6e43QuC0CKSWF4s//vPS1tTShi1+FAmVMjcQ4Iwzf6
Bz4oVLU6pHmmG+4hWz7SQe+zLJEjXYo4b2cDLvAXVS0hbyV0lDQsBzFO0XabycKC
wSB1Zl1AXEzt6tBzhrdKhJoIngYVrq0WeM9l94nItVcyFNVTcaaIqiSulex9DAVL
h1mN5e+3dyDevwnXpmkw3MwrOK8X0YNacg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:16:39 2025 by rpki-client