
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa
File: 55c20cc7-7931-3245-afa2-6d3c289c1610.roa (raw, json)
Hash identifier: eg7wvqFMpLlxq6NhQaSp5gqrS7xfYAZ9itbbT8Ph6wM=
Subject key identifier: D3:44:28:D7:71:08:61:B1:7F:7E:0E:0F:B6:85:50:C1:BC:7C:F1:35
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B690B394BA41B34C48D374680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa
Signing time: Sat 04 Oct 2025 13:30:11 +0000
ROA not before: Sat 04 Oct 2025 13:30:11 +0000
ROA not after: Fri 02 Jan 2026 14:30:11 +0000
asID: 6698
IP address blocks: 2001:470:43a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:69:0b:39:4b:a4:1b:34:c4:8d:37:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 4 13:30:11 2025 GMT
Not After : Jan 2 14:30:11 2026 GMT
Subject: CN=3999b47a-184a-4647-b92c-ca766b6e14a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:cf:6a:1c:b3:ce:3c:6a:5c:75:99:bd:ca:
38:2c:b3:50:dc:70:19:af:8a:28:f9:ff:6f:7b:5f:
0b:1c:f4:f0:37:09:6f:32:1e:ad:aa:2d:d3:da:34:
6f:51:e8:79:d9:27:98:17:3c:16:5a:78:b4:b2:c0:
a1:87:9f:c9:0f:f4:19:26:35:51:80:e8:63:b7:5c:
96:37:52:93:ef:f0:21:c8:d0:3f:d7:f8:f0:e7:88:
23:57:81:71:05:99:20:83:76:fb:28:48:d7:5c:60:
73:62:7a:a1:a9:93:06:6b:64:34:f8:91:59:eb:7f:
d5:95:b3:d6:49:82:24:54:22:80:2a:8b:b5:e0:17:
8e:e1:33:51:00:eb:89:1c:35:30:38:5b:78:2c:a2:
7d:e9:a1:aa:9c:dd:05:0e:9c:9a:39:84:ad:01:94:
f8:c6:a3:24:d3:d3:99:b7:a4:16:07:fd:d7:99:d5:
7e:25:33:3e:a5:e3:c5:ae:97:70:78:cd:4b:22:e8:
43:74:df:b7:fd:ab:21:13:74:88:0a:53:5e:ef:cf:
2e:76:be:10:ee:e3:84:33:bd:14:2e:c9:8b:92:2e:
0b:58:0d:42:19:0d:29:cb:c1:61:9a:8c:18:a0:e3:
c4:c3:5d:02:8a:bd:55:c6:e5:26:d3:ac:9d:50:0d:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:28:D7:71:08:61:B1:7F:7E:0E:0F:B6:85:50:C1:BC:7C:F1:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:43a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ae:eb:b4:2a:10:7e:b4:65:70:66:bb:2e:dd:43:3a:1c:3a:
3b:97:83:d5:cc:ce:c6:cd:55:32:0d:21:83:44:13:f2:f5:a1:
42:76:48:1a:1f:56:ad:4e:37:f8:01:f4:dc:a2:1a:bb:f3:3d:
1b:0b:f4:62:cb:43:38:95:69:24:eb:9c:cc:bc:84:6d:ee:fe:
7e:71:0d:48:46:db:93:da:e7:3d:16:8d:91:6c:09:f7:4d:d8:
98:19:2d:20:cf:4d:6f:20:3a:fd:b2:95:60:b0:e1:ba:83:ca:
be:2c:ee:16:32:f6:4b:01:c2:8c:f1:1c:40:bf:f4:1c:84:fc:
db:ce:43:d5:85:5c:bb:84:e0:1e:0a:56:d8:23:da:43:4d:d9:
97:fa:76:11:94:77:84:af:2a:ca:ae:b2:f2:82:80:fd:90:24:
17:02:52:58:32:e9:57:d5:00:b4:60:3f:bb:b3:62:29:b6:27:
c3:c2:ab:8e:6f:c3:5b:00:1a:45:c5:a1:86:23:59:13:4a:68:
fa:bb:f8:90:1a:8e:79:5f:f0:fa:99:d3:bc:40:4b:9d:12:ff:
e9:ee:52:23:10:17:3b:52:49:66:6e:ef:6e:30:56:c7:2c:d0:
7e:7d:38:c2:41:e5:95:e1:0d:de:c3:53:4c:c5:e2:38:01:d2:
20:2d:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:36:15 2025 by rpki-client