
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa
File: ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa (raw, json)
Hash identifier: eJqCAPqVcWLoDXcPFnaVfYAbzloaDqf5ZMnTHCVkxjA=
Subject key identifier: ED:B3:CA:74:8D:A9:2C:42:1B:81:51:E1:8D:63:E4:B9:AF:4D:B8:11
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F4328584BB45D142E0538E63288D1E440
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 394354
IP address blocks: 2620:10a:80ae::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 03 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:14:2e:05:38:e6:32:88:d1:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=cc95e3b1-06a4-4af3-a482-ab81a2fa3d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:b5:f1:75:f5:96:e7:3a:f8:e8:66:74:49:
58:a5:41:36:33:a8:d5:b6:71:4d:f8:f5:19:c5:37:
cb:39:27:9d:2b:2e:5e:2a:ad:56:9f:7e:b2:cf:88:
6a:df:73:fc:2b:3f:85:33:d5:93:ec:4c:88:90:98:
93:fb:02:81:19:97:1c:7b:44:ce:28:e8:57:56:2b:
d1:e3:48:14:88:78:66:32:2b:b3:5f:c5:67:56:cd:
8d:c9:8d:36:b2:09:b8:70:77:e3:84:ad:23:5f:72:
fe:29:8d:fb:20:a2:02:47:59:21:d9:01:41:26:c2:
fc:c2:89:b2:93:4b:19:49:fe:dd:25:10:2d:c3:8e:
66:82:c3:57:7a:45:42:45:2e:c2:cc:7c:5e:ba:e4:
7a:16:18:51:1c:82:73:2b:cf:08:fa:bf:ce:5c:d1:
b7:a6:a0:a1:21:01:89:15:66:b1:a2:60:b2:a2:8e:
2a:e4:a4:48:e2:63:99:d0:71:62:67:a4:a2:d4:c8:
10:bb:21:c0:b1:ab:fe:8d:0f:b1:f7:a4:66:b4:fd:
a1:72:b8:b4:48:ab:e5:a6:97:01:b7:ad:62:aa:d4:
1f:e9:3f:f2:5f:b6:42:3b:14:fd:ee:bf:39:c3:bf:
0f:ca:72:03:46:12:97:28:78:53:cf:96:05:c6:01:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B3:CA:74:8D:A9:2C:42:1B:81:51:E1:8D:63:E4:B9:AF:4D:B8:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:80ae::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d4:b4:8e:60:b3:89:29:b8:2b:3c:1e:9f:f3:41:a0:e7:1a:
30:04:55:96:21:98:13:f3:7a:5e:aa:91:3e:b7:ef:91:fc:b9:
fb:93:8c:2a:1d:98:1a:85:5e:6a:7a:6c:b6:1a:a0:90:cb:9d:
4f:2f:6f:41:c2:58:26:13:f5:68:37:55:bb:b7:96:ea:da:f7:
4a:7e:a2:84:6c:db:1a:f1:76:34:8e:50:b2:31:67:a7:52:51:
2b:c3:66:03:02:b5:dc:f4:36:3f:d7:38:4b:83:3e:62:9f:ee:
73:07:13:6a:f4:50:48:06:d1:e3:9b:7f:06:a2:a9:59:8d:4f:
46:d7:95:7f:9a:8c:70:4a:99:03:88:1b:c1:ad:2a:c6:c1:ba:
50:89:2a:e1:69:80:32:36:de:98:ea:08:23:1a:bd:18:53:19:
74:30:84:1b:2a:91:36:f5:e0:38:af:7b:14:31:be:f7:14:c6:
f1:32:95:e1:e9:39:15:24:cc:49:cf:b3:fb:7e:48:0d:4f:78:
ae:d3:c8:28:e8:6c:9a:8d:ef:87:bc:bb:ae:52:e5:66:7c:5e:
ca:a0:25:6c:53:fe:83:d6:dd:0c:9d:5d:2c:0e:9c:5c:ef:d4:
09:2e:8b:81:0c:8b:e3:43:32:03:39:5f:34:9c:90:da:49:21:
88:ae:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:54:31 2025 by rpki-client