
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa
File: a6ff856c-46ae-36b6-987f-46ef805f5376.roa (raw, json)
Hash identifier: 1eTSDhRWBWuYu6xYfr6rN/ZpOEB4VgxTBgjai7g0N94=
Subject key identifier: A0:9B:06:9E:39:AC:03:EF:A1:71:EE:57:B1:1D:92:7F:F1:EB:84:4F
Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial: 010D0C9F4328584AF3BBDB981CE56215FF66F770
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa
Signing time: Sat 23 Aug 2025 13:00:41 +0000
ROA not before: Sat 23 Aug 2025 13:00:41 +0000
ROA not after: Fri 21 Nov 2025 14:00:41 +0000
asID: 22351
IP address blocks: 2607:f668::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f3:bb:db:98:1c:e5:62:15:ff:66:f7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Validity
Not Before: Aug 23 13:00:41 2025 GMT
Not After : Nov 21 14:00:41 2025 GMT
Subject: CN=58f778a4-bee7-4995-a674-d6eebb46896a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:07:87:eb:8e:71:0a:80:03:13:e1:26:e0:
8e:a2:46:f2:67:a3:85:b0:d4:0f:fe:46:3a:40:7c:
c1:2f:91:19:3b:39:07:5e:89:1a:1f:79:7d:20:76:
6f:5f:ce:ae:51:06:8c:fb:4f:04:e7:28:39:f0:95:
65:ee:9c:6d:a0:00:14:5e:a2:f8:f6:db:8c:93:04:
57:43:66:bb:7f:23:63:75:cb:3d:64:46:ec:73:fa:
90:1f:1f:a4:56:a1:2a:bb:c3:20:69:f4:6a:42:11:
eb:3c:c0:1a:04:bd:a3:b9:04:5e:fd:57:c4:ab:99:
87:d1:db:67:f1:14:eb:19:f2:c8:6c:1b:cd:c4:7c:
6f:dc:1a:a1:6b:86:24:c0:bd:b9:1f:d7:29:c6:36:
0a:bc:64:06:d7:b6:58:de:57:66:28:8f:43:f6:ee:
cb:ad:8c:74:ca:02:78:23:9f:f9:90:e4:02:d1:9c:
e9:44:7f:7e:7e:df:bc:2b:90:29:b8:c0:4f:55:69:
ed:a0:49:82:65:f7:e6:84:6d:84:eb:67:59:c2:b5:
81:ba:6b:a8:53:e7:57:7e:75:b0:af:cb:9d:61:78:
f5:8b:71:c4:9d:d8:7e:29:84:b4:27:78:59:75:3a:
cd:78:7a:ad:43:92:e7:f3:17:f4:7d:4b:f2:9d:71:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9B:06:9E:39:AC:03:EF:A1:71:EE:57:B1:1D:92:7F:F1:EB:84:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
X509v3 Authority Key Identifier:
keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f668::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:b7:94:12:bb:f1:c5:99:b2:5b:c9:9d:f1:47:cd:66:ff:36:
86:6e:6c:93:08:21:8f:7d:40:bf:8b:b2:6f:bb:6b:27:84:e1:
c4:97:24:59:ca:19:d5:d0:e7:e2:3b:76:b4:4f:79:e3:53:fe:
b5:e6:95:16:60:3f:2a:f7:e2:c1:ad:e3:9f:9f:b8:97:68:31:
e5:87:6a:55:ec:e4:c5:06:c2:e0:8f:2e:b9:db:2b:e2:fb:bc:
11:de:62:7d:0f:fc:66:71:d9:06:88:89:9f:f0:78:a5:50:0a:
8a:b6:36:07:1e:05:8f:ba:4a:9a:8f:46:4c:6e:06:7c:b6:15:
2f:d9:12:2a:a8:03:38:9b:fa:cf:3a:99:83:0a:f9:af:04:f5:
cc:bb:30:25:69:9e:63:59:aa:a1:89:9c:92:03:14:c4:8f:d3:
02:db:e0:95:1a:8d:8b:4a:2b:69:02:04:2d:f7:f4:35:47:91:
da:5b:23:e9:d7:c4:04:28:c9:c5:45:f7:be:d8:9b:00:ea:f1:
39:7e:c9:7a:a0:ab:c6:24:ef:96:cc:4c:43:4f:2b:bb:4a:f0:
c7:51:b0:0f:78:e8:04:93:53:bf:4b:cf:9e:5d:d9:ac:d3:89:
7d:58:81:20:0a:ed:da:03:61:4f:56:1b:1c:7a:fb:00:84:71:
42:18:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:42 2025 by rpki-client