
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa
File: 85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa (raw, json)
Hash identifier: 5SiyyUttHjCZjB9nL6mZ31PkhNLSm0x2rl6eSlN+ZbY=
Subject key identifier: 90:49:9E:13:9C:ED:76:95:4E:DF:00:F1:A0:68:D8:13:C3:32:DA:01
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584BBB75A491D397015DB6A5C480
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa
Signing time: Mon 03 Nov 2025 02:00:31 +0000
ROA not before: Mon 03 Nov 2025 02:00:31 +0000
ROA not after: Sun 01 Feb 2026 02:00:31 +0000
asID: 16509
IP address blocks: 2605:4300:3903::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bb:75:a4:91:d3:97:01:5d:b6:a5:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Nov 3 02:00:31 2025 GMT
Not After : Feb 1 02:00:31 2026 GMT
Subject: CN=f4543c14-05bd-4b76-beb7-420b22f70458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:17:f9:4a:71:97:ad:ba:b0:9f:fd:7d:5b:a7:
92:54:a0:08:33:3d:9a:74:35:bc:9e:c3:71:70:d7:
51:9f:04:f1:24:83:ae:ac:00:99:52:52:3e:88:9b:
57:4b:b9:90:27:b9:bf:5d:4c:05:18:e8:dc:9b:30:
7d:66:2d:7f:66:c3:7a:34:c3:0a:bc:e9:c1:55:3c:
4b:e7:95:83:2f:31:14:7a:63:b9:0a:5b:cc:7a:7e:
02:58:47:e6:60:9b:37:31:d7:2b:b2:68:c7:1b:ef:
1b:61:1a:da:16:ea:fc:4c:a3:ac:1b:a1:55:6d:7e:
87:16:fa:e9:d7:ff:a3:17:92:28:bf:cb:44:79:83:
19:dc:3b:f2:7b:40:7c:47:7b:ee:b1:9e:ce:eb:9d:
c7:54:d4:1f:c9:6b:59:16:fc:96:b8:4d:ed:c3:01:
dd:22:22:9c:b3:f5:b1:33:47:96:93:16:b6:61:87:
23:ab:4c:3d:28:59:b4:dd:f3:5c:d3:bb:22:f1:d5:
73:5c:92:08:67:cc:4c:56:d1:df:e4:15:02:33:ea:
46:d7:95:07:d4:21:2c:e2:b2:f8:79:65:90:57:71:
7a:01:ee:57:d9:a8:ea:9f:98:5d:ee:9a:a4:ba:e3:
78:cb:74:4f:20:91:7c:b8:ed:6a:00:07:43:87:ae:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:49:9E:13:9C:ED:76:95:4E:DF:00:F1:A0:68:D8:13:C3:32:DA:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4300:3903::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f6:04:ae:56:ae:49:21:72:1e:e5:d8:4b:ba:98:51:4a:49:
9b:72:78:dc:6d:00:5c:16:10:0a:f0:d6:72:5a:74:6a:86:21:
ef:99:fa:97:cf:4d:a6:8f:68:6a:fb:b2:90:c8:81:2f:34:61:
3b:c4:e0:0c:73:c1:1a:ed:e5:fa:ca:f7:9c:7a:21:9e:77:7a:
c3:2e:41:51:49:19:48:e7:84:a0:cd:23:9f:6d:4c:fc:ae:2e:
6a:45:f4:4c:ad:49:5a:6c:d7:98:9d:76:8f:d5:dd:4d:af:b5:
b6:f7:a0:8b:4d:93:1c:dc:cc:fd:33:d5:94:f7:38:50:0d:99:
1d:6c:56:15:77:74:58:44:27:1c:50:de:f1:2f:67:3a:54:dd:
4d:cf:af:98:d2:86:80:59:5f:b0:a4:da:34:6d:67:26:cc:5a:
df:13:a9:5d:9b:62:56:cd:58:43:19:1a:81:e9:eb:93:98:08:
44:c0:10:22:12:9e:1f:9f:b9:5c:42:0d:61:f7:a4:40:54:de:
bd:0c:a7:60:58:f0:34:c8:5b:49:e2:95:0d:d9:b9:26:1a:1f:
1a:5a:f2:5f:f8:c8:c1:90:34:32:33:fd:86:44:fd:90:82:ee:
8b:5e:56:d1:9d:91:61:ce:ac:27:28:84:6a:ee:d9:0c:f9:2c:
5b:e6:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:47:07 2025 by rpki-client