
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
File: 7251ede9-db40-315e-96d5-145116a009a0.roa (raw, json)
Hash identifier: cIbMbEd7OMMuJ22o4XVIaPOFp+raIjEX0TnLlcChrBA=
Subject key identifier: 5F:1A:79:D5:C4:E7:9E:2A:5C:89:47:C0:2B:E6:A2:FC:B7:22:83:37
Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial: 010D0C9F4328584BA932546BA7A4FF8B6BFC5680
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 46562
IP address blocks: 2604:2880::/32 maxlen: 64
2607:f7a0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 03 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:54:6b:a7:a4:ff:8b:6b:fc:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=23dff75d-90af-491d-ac93-1ca1c53e0d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:6a:09:04:19:69:3d:ec:f2:12:c9:cd:08:
a5:e3:62:cd:f2:08:1c:07:df:28:8f:1e:a1:09:d3:
b1:4f:c8:a0:40:6e:da:78:f0:20:4e:07:7a:42:93:
ff:d0:a1:a3:bd:2e:37:50:72:f4:9b:f1:c3:c9:0f:
47:28:8d:19:5e:d8:07:4f:39:3a:5a:77:a6:8e:24:
0b:6e:a6:5d:50:af:1c:b9:85:21:ab:94:f2:47:2a:
01:bc:62:dc:e8:2d:88:e5:a0:40:9a:fd:3e:0c:36:
41:a1:3f:ac:70:c5:a4:d2:ca:d5:89:32:69:85:b6:
cb:0d:e7:d4:f9:87:61:28:d2:5c:eb:c2:24:b0:a4:
c6:17:e4:bf:0e:10:ee:e5:2a:3d:72:34:42:04:49:
b7:6f:3f:a6:85:cf:50:75:17:8a:78:4c:6b:35:96:
ef:f4:2c:84:58:af:a6:2d:e2:1f:26:90:0e:11:16:
ca:47:1f:9f:53:8b:34:fb:02:73:d5:fa:13:76:6b:
06:0d:b3:b7:f6:83:c4:81:f4:0c:a2:17:c3:de:01:
2f:76:ce:d9:9b:3f:d1:eb:df:44:10:cc:73:d4:f5:
ad:fc:1e:c4:99:ad:65:08:19:d2:4c:28:fd:fd:68:
c5:81:77:dd:4e:d2:a7:6f:c8:71:f4:cc:b2:ad:ca:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1A:79:D5:C4:E7:9E:2A:5C:89:47:C0:2B:E6:A2:FC:B7:22:83:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
X509v3 Authority Key Identifier:
keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2880::/32
2607:f7a0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e5:5c:7e:b8:ca:2d:51:0c:be:d6:ed:8e:e2:1f:36:3a:4e:
4c:6c:39:65:cd:28:e8:a3:98:14:94:a5:4b:77:42:fe:3d:71:
ea:d3:66:a6:47:7b:15:6d:ec:e4:3e:d7:08:67:52:ed:43:9d:
13:fd:7c:08:9f:26:58:b7:7f:ad:e7:03:9b:7d:c0:a0:79:93:
69:e7:7d:1e:cf:1a:e1:1a:bc:ff:a2:4b:b9:fa:98:1c:c2:dc:
27:53:e9:f6:ae:24:13:36:67:dd:fc:47:0a:39:2d:53:09:ed:
9f:b3:73:5f:be:33:7e:b2:a1:9b:17:a2:de:a4:bf:31:51:c1:
d3:c1:10:dc:cd:5b:4b:dd:83:8f:7e:64:09:17:f0:5a:75:f6:
af:a3:b5:d3:78:b9:04:80:05:a2:7f:ff:c6:19:d6:65:83:86:
fa:97:f8:cc:c1:c7:ad:2d:76:05:81:79:2d:6f:7b:5a:22:43:
b5:52:95:0d:b0:24:6c:44:88:40:9b:82:7c:63:79:02:20:cd:
87:3f:42:e3:6e:b5:fc:f0:5a:a4:10:08:b4:0a:0c:3f:6d:77:
d0:a5:d9:b1:d5:1b:9f:45:db:94:8e:c5:fa:e9:9c:4f:b1:8c:
9b:73:ff:6b:5e:f5:21:15:01:e2:14:28:36:85:69:96:ba:c4:
c9:1e:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:26:25 2025 by rpki-client