
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa
File: 0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa (raw, json)
Hash identifier: UmvYJMQIqN4hB1acmS/X+wnoSnCoKiN35T7+nQgyAik=
Subject key identifier: BB:E1:6D:D2:5A:68:43:E5:D3:93:8A:C8:11:7C:39:A1:4F:22:3E:31
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB88D3CC2F0795040EAB48680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 139242
IP address blocks: 2606:54c1:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:3c:c2:f0:79:50:40:ea:b4:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=41495144-6394-435c-b9d8-d6f5c7a55965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:43:44:ab:a0:b9:3b:65:d3:46:ef:38:6d:
55:32:f0:b9:3d:e4:de:1e:a4:c0:8c:d5:0d:2a:4a:
ed:a6:aa:fd:dd:fd:49:0b:66:70:c4:c3:9b:82:bc:
48:a1:be:3e:00:57:b8:3d:8a:38:a3:8f:36:3c:b1:
b6:c2:41:93:0b:01:32:63:b7:2e:bd:07:58:c5:60:
0e:75:54:9f:d3:6f:c8:29:7f:9d:05:d2:fd:05:af:
1d:0a:30:12:51:f9:4d:3f:e9:05:3a:68:74:c9:77:
00:33:9b:88:d1:03:89:70:bd:3d:45:00:e0:d5:ad:
26:2f:25:38:65:2c:3d:41:f0:ce:ce:89:4c:04:75:
1c:28:9a:7a:b7:df:30:19:96:c0:d4:0c:85:dc:53:
48:85:63:c6:18:04:e1:8c:fd:71:f1:a6:71:85:7c:
52:6f:30:03:20:7b:bd:d1:08:2d:e8:51:6e:e2:91:
81:f5:5e:97:5c:7e:df:d8:b8:6b:48:8d:61:f6:a4:
1c:9f:db:bd:6b:ff:a6:f0:93:87:8f:d8:2c:96:05:
08:0a:e2:99:82:64:15:73:cd:ec:c0:50:ea:3a:11:
59:c2:28:ba:f1:19:49:d7:ac:52:8a:ec:54:40:62:
e3:ae:67:38:21:04:ab:98:bf:50:25:b0:af:e4:02:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:6D:D2:5A:68:43:E5:D3:93:8A:C8:11:7C:39:A1:4F:22:3E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:54c1:b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:bb:6e:9f:0f:6c:cb:04:4a:aa:9e:7b:f4:eb:4a:f5:9f:64:
49:8f:56:7c:0b:09:85:5f:23:9f:32:0e:79:7e:98:e0:42:ba:
19:c9:57:59:1d:00:c4:40:df:7f:25:f5:23:04:e6:0f:eb:b3:
41:02:7d:98:60:ab:6a:90:4b:70:c4:f6:e9:55:bd:a0:e4:25:
e6:9b:f1:68:32:74:2e:65:01:14:23:85:1e:fe:39:f9:db:ea:
c9:ae:eb:b7:84:5e:aa:39:1d:1b:03:75:1c:cf:80:1e:d0:26:
20:50:64:a4:45:5d:45:f4:c3:93:e6:9e:28:c1:0f:26:50:22:
ab:68:a5:7a:94:aa:20:e4:d4:5b:12:16:28:14:fb:1c:ce:11:
2b:48:2e:4b:a3:3d:8a:81:d8:e1:e2:36:40:da:2d:62:2e:28:
ef:5d:7e:8b:bc:fc:dc:32:54:8f:69:b8:78:a5:4a:7f:4d:6d:
2a:ac:61:47:c3:61:d6:d2:90:db:b4:90:53:c8:67:94:9f:36:
d2:77:1f:f4:33:c6:a8:07:0a:a4:8d:66:77:48:5b:13:2e:5c:
bb:33:7d:42:6b:83:70:46:28:ac:3c:98:54:52:35:94:0d:b8:
50:a3:e3:f8:da:74:f7:e2:48:2f:70:d0:35:ad:b7:cd:11:cb:
47:83:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:01:00 2025 by rpki-client