
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa
File: 8adc4655-3460-3e0a-8189-0755d0475618.roa (raw, json)
Hash identifier: 3k/rfRAJpFQ064qslIj9blFY91jFP1IhX3INDYXhlpw=
Subject key identifier: 3F:B4:ED:C8:EA:D1:2B:D0:87:3C:A6:D8:18:FA:81:36:7D:43:3B:D6
Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial: 010D0C9F4328584AF0F13E650322728C93945800
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa
Signing time: Fri 22 Aug 2025 13:00:41 +0000
ROA not before: Fri 22 Aug 2025 13:00:41 +0000
ROA not after: Thu 20 Nov 2025 14:00:41 +0000
asID: 12213
IP address blocks: 2600:cc00::/28 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f0:f1:3e:65:03:22:72:8c:93:94:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
Validity
Not Before: Aug 22 13:00:41 2025 GMT
Not After : Nov 20 14:00:41 2025 GMT
Subject: CN=a951ea3c-4833-4754-be16-c6bb6df1944c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:ca:2b:eb:d6:39:89:ec:9c:1c:c0:3c:e2:
a2:dd:88:2a:31:c3:ec:66:d4:6c:81:d2:6e:ad:98:
86:a2:a0:45:f5:a9:1e:fb:74:d1:c8:04:da:97:82:
40:08:19:2e:df:39:f1:a3:b3:97:df:e4:48:9e:25:
b5:b3:11:07:ea:d8:18:7b:a2:16:cf:d0:34:50:ed:
25:2d:8a:11:f5:f5:d3:d6:3a:32:91:00:e1:08:41:
a3:b1:e9:ad:99:88:b5:3f:a2:b7:55:74:55:94:f9:
07:a8:f6:b5:31:be:47:21:47:40:1b:41:8e:a1:ec:
9b:df:7e:d1:b3:51:55:ce:08:a3:71:68:1e:8b:76:
68:b0:57:0d:a3:30:ee:af:95:af:84:cd:76:87:e2:
27:87:da:15:bf:d1:b4:f6:d1:23:e9:81:d9:13:11:
43:44:e5:f2:b3:9e:42:69:17:3f:8c:9a:26:af:b7:
61:4c:11:12:48:a8:93:88:dc:47:1e:73:02:20:83:
67:de:f2:5b:3c:c7:a7:7c:d6:fe:eb:6c:4c:3a:61:
9d:d0:87:77:7f:2e:f5:34:02:a1:2b:f8:4b:6d:e3:
f1:0b:66:ee:b5:70:e9:bc:8d:9d:27:3c:c7:50:5f:
04:8b:be:ff:2d:11:3b:32:6a:64:4c:90:ec:ac:92:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:ED:C8:EA:D1:2B:D0:87:3C:A6:D8:18:FA:81:36:7D:43:3B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
X509v3 Authority Key Identifier:
keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:cc00::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:cb:0f:86:c2:77:7f:65:b0:eb:0e:c3:86:0d:a3:54:c7:d5:
ca:18:dc:a5:9a:1a:50:ba:bc:a1:b8:c8:0f:48:d5:3b:63:1c:
f7:38:dc:04:ba:4e:d4:37:71:74:fc:51:35:86:2c:22:2a:35:
ce:e1:09:4f:7a:f9:33:50:86:d5:cd:9b:7b:65:ec:e7:2e:1c:
8a:a7:6b:c7:9b:73:a1:dd:4a:3a:a6:6c:ba:db:74:30:44:84:
39:0a:e2:2e:7b:83:eb:91:57:1d:66:bb:d0:e4:9b:c2:62:69:
6e:db:44:f4:fb:5a:c5:f1:a6:f6:9e:93:3e:62:64:bb:6f:bd:
35:8e:06:b3:9c:00:2e:1d:3c:dd:20:a4:3e:cb:10:af:c7:7e:
34:ff:36:cb:64:b9:a3:da:07:d8:03:3e:2b:d5:38:cf:23:97:
cc:f6:e3:52:06:67:a8:15:b5:de:a8:48:d4:ce:20:c1:d4:d7:
ed:c4:01:88:c6:9f:7d:7d:2b:dd:17:41:6b:6d:23:18:3b:a4:
6c:47:56:a2:6e:14:61:26:90:ac:c6:ae:c7:f0:ea:23:cd:ab:
50:0e:73:de:bd:28:ca:96:c7:f3:00:b3:a4:35:41:34:68:eb:
90:40:1a:c1:de:aa:27:61:62:a9:85:1f:a8:47:2a:d6:6f:56:
9b:ea:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:52:24 2025 by rpki-client