
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffda5645-cc19-3afb-ba33-6e0990ed522c.roa
File: ffda5645-cc19-3afb-ba33-6e0990ed522c.roa (raw, json)
Hash identifier: 4RqCFEkc5ISR2MzheWW6KcZMskmb3/xD2YNJgj0nT3c=
Subject key identifier: 41:7E:55:FB:D4:68:72:10:16:EF:22:D5:A7:B1:47:83:59:06:35:85
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B7005F52BB47C7848DAA0BC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffda5645-cc19-3afb-ba33-6e0990ed522c.roa
Signing time: Tue 07 Oct 2025 01:30:14 +0000
ROA not before: Tue 07 Oct 2025 01:30:14 +0000
ROA not after: Mon 05 Jan 2026 02:30:14 +0000
asID: 393474
IP address blocks: 2001:470:3a3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:70:05:f5:2b:b4:7c:78:48:da:a0:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 7 01:30:14 2025 GMT
Not After : Jan 5 02:30:14 2026 GMT
Subject: CN=c6a2462e-b3ac-43ab-9c1a-4464addcc5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e3:b0:01:2d:8e:6a:77:7a:24:6f:92:79:8f:
31:ac:b9:6e:bf:c3:25:f7:4d:65:77:fa:e6:93:47:
91:19:b8:03:5f:65:7c:7e:af:99:3c:5a:e3:d4:bc:
83:0a:bb:f5:7b:5b:e2:b7:9e:4f:6d:be:22:7a:bb:
7e:cf:9e:6a:e6:a4:e2:86:49:8f:d8:02:0e:e0:a3:
bc:09:da:85:5f:4e:fc:93:d5:7a:35:00:55:b3:06:
f5:45:43:3c:80:4f:8d:80:c4:82:13:2a:66:06:f0:
a9:8c:17:a5:b4:a1:bd:bf:da:b6:ea:d4:50:76:f2:
ee:79:54:62:4b:24:10:d6:79:46:fc:31:e7:d9:a2:
b9:2b:09:7b:21:a5:36:19:ef:be:2b:4c:0a:85:5a:
35:37:bc:08:da:d3:fe:ff:84:98:76:20:b6:31:24:
5e:2e:0c:60:e7:df:39:b9:22:29:ea:f1:7f:fc:7d:
e8:ec:ba:6e:43:0b:25:9e:38:c6:9a:67:c3:a3:e4:
fa:cf:77:80:6b:c0:b5:6a:e9:32:71:20:ef:14:8a:
17:62:0f:91:46:3c:e2:0c:9e:6d:8d:d0:a6:a3:a2:
b2:3e:17:fc:6b:77:55:79:39:6b:5a:36:34:7f:d9:
69:dc:d4:19:97:b2:b9:f9:04:76:6b:48:d9:1f:d6:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7E:55:FB:D4:68:72:10:16:EF:22:D5:A7:B1:47:83:59:06:35:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffda5645-cc19-3afb-ba33-6e0990ed522c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:32:64:bb:bb:f4:5e:4a:23:f3:44:4b:ae:3d:ad:f8:64:e4:
1b:5c:38:d4:4f:a2:91:6c:a2:ca:50:89:26:d8:d7:76:87:4f:
3b:14:3e:66:9d:77:10:70:a3:6c:1d:ee:e9:b1:03:e2:70:5b:
01:74:54:fe:36:4f:7d:01:40:44:3c:4f:48:44:8a:ff:4e:ab:
22:cb:ec:49:95:cc:a2:33:1b:4d:8d:7b:7e:7e:50:30:c6:a9:
da:34:f3:91:19:6e:f8:c4:2a:7a:72:23:4e:f3:8a:94:66:aa:
e9:1b:7a:50:0d:49:9a:a1:da:57:fe:db:99:75:74:ca:ec:77:
97:f1:aa:84:7b:25:42:b0:c1:37:6b:c5:b0:1f:b9:84:0c:b9:
75:33:ce:eb:4d:4c:8a:64:c9:ed:d3:92:30:7d:20:d6:ce:5e:
4a:c5:97:72:a0:bc:5e:c0:fb:4d:ff:29:8e:fe:26:5b:62:25:
9b:16:3a:5d:03:b3:63:60:6d:36:69:c4:2d:98:43:53:1f:87:
e9:5e:b7:e3:f3:f5:43:60:07:3b:a0:59:ef:7f:d9:36:18:19:
d1:16:cb:0f:00:ef:03:90:e3:40:c3:b8:f9:25:e7:fa:6f:c6:
0e:6f:a5:b3:09:bd:fd:fd:30:4b:83:d5:57:a8:07:96:ca:ae:
1f:e7:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:55:14 2025 by rpki-client