
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa
File: c2aac561-04f2-3650-bcbe-844d7a9e370f.roa (raw, json)
Hash identifier: dAiJ4zYFrvHJ9vqjEeLKGAezsDCItx3idZN0cxgA8EY=
Subject key identifier: 4A:8E:09:20:4F:71:6A:C3:8E:C7:06:3B:04:35:F0:33:56:CF:7F:37
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584B821CC8F1E0AF2530C265E1C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa
Signing time: Mon 13 Oct 2025 13:00:36 +0000
ROA not before: Mon 13 Oct 2025 13:00:36 +0000
ROA not after: Sun 11 Jan 2026 14:00:36 +0000
asID: 11537
IP address blocks: 2001:468:c07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:82:1c:c8:f1:e0:af:25:30:c2:65:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Oct 13 13:00:36 2025 GMT
Not After : Jan 11 14:00:36 2026 GMT
Subject: CN=b20dd91b-20b2-488d-ab43-132970f8e798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:94:49:b0:fb:48:41:d3:0e:c1:67:f1:56:
59:ee:dd:a1:8d:63:a5:7d:bd:9c:88:8e:74:f3:b2:
0a:42:e2:d4:7c:e7:7b:76:51:dc:ed:c5:0d:52:72:
57:41:9e:02:62:3b:79:f6:a9:26:86:3c:39:f6:2e:
ec:4a:34:35:fb:ba:10:19:74:80:7b:7c:d1:e0:f9:
e7:12:69:13:69:9b:87:54:47:5a:7c:17:cf:18:33:
2e:89:b9:9f:f8:14:74:fd:9f:39:ea:ad:f4:bb:5e:
e1:42:7c:06:64:d2:31:f8:65:0a:1f:a3:92:ea:c4:
45:7f:c6:0b:40:bc:18:b9:f1:3f:ab:0b:d3:0d:0c:
15:6f:d6:36:53:9b:17:ef:21:11:03:37:d0:0d:ca:
cc:54:6a:31:c1:3b:ad:11:6c:37:83:06:0b:f4:07:
d3:78:cf:43:9a:71:10:f3:f4:af:a4:7f:2c:0f:b7:
95:98:c8:7f:78:5c:02:96:ba:5b:f4:5d:61:69:f4:
26:58:34:35:4d:bd:24:0c:bf:c7:90:53:4f:32:79:
da:0d:ed:c3:67:74:8c:67:01:a3:ff:03:14:83:52:
f0:0b:62:d7:84:62:b5:ea:84:2b:bf:ec:86:4f:2b:
8d:58:30:c7:86:4d:f3:a8:0d:82:32:5e:af:70:d5:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:09:20:4F:71:6A:C3:8E:C7:06:3B:04:35:F0:33:56:CF:7F:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:468:c07::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:93:e3:b5:93:8a:7a:96:5e:6a:91:bb:3d:fe:87:51:7b:7a:
3f:59:72:23:f0:d6:1a:16:b5:f9:b9:24:e5:4f:38:62:63:cf:
93:22:93:87:d1:e8:a9:90:40:92:36:0c:6b:da:92:43:40:c1:
79:d8:bc:e6:52:5b:c5:d9:c8:36:6b:70:2d:48:a2:6c:11:5b:
0b:6a:fd:1b:03:47:9f:ed:8f:52:5d:a0:c4:88:ac:dc:b2:b5:
72:9c:94:27:0e:fd:cd:53:68:2e:37:bd:99:28:1c:30:2d:46:
14:8a:ca:c4:65:dc:0f:97:f6:c5:44:7b:4e:e5:e2:fc:cd:70:
70:f0:bd:08:e8:c3:78:eb:08:8b:18:67:b7:43:22:7c:38:65:
d3:0c:74:fb:70:1f:81:4b:66:46:8a:44:79:f3:9d:98:2d:a7:
54:fa:ce:8c:b7:aa:0f:02:a3:cc:2d:4f:f2:78:74:b5:38:da:
d1:41:50:05:7d:09:6c:ac:6f:52:bc:bb:6d:b4:f6:65:1d:6c:
8e:7b:d4:d7:49:cb:34:87:61:44:03:5a:fe:23:e5:6a:d6:31:
fa:b7:4f:fc:90:e6:b4:a0:ce:88:d9:fc:c4:41:f6:f6:9e:7c:
02:69:80:90:ee:9f:75:02:cf:55:44:44:65:26:0c:b6:fd:4b:
11:09:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:58 2025 by rpki-client