
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1489b76a-ccb4-33dd-9942-388248428aa5.roa
File: 1489b76a-ccb4-33dd-9942-388248428aa5.roa (raw, json)
Hash identifier: up4MLbZRJpLn+dja0utVvbeApJznAoL/gd0eIMB4KMg=
Subject key identifier: 65:07:8C:89:A1:98:3F:56:21:30:C9:8C:85:9E:8C:EB:16:BE:A7:97
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB88D4FB25FF326E5DF88DD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1489b76a-ccb4-33dd-9942-388248428aa5.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 2606:4700:3014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:4f:b2:5f:f3:26:e5:df:88:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=2bc5b3d5-fc03-405b-888f-39abf92fbf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:a1:d5:51:30:d2:69:f5:89:d9:b3:ad:6b:
2f:eb:ee:77:14:9f:d0:4b:45:8e:df:37:ff:ae:74:
f3:b4:aa:2f:57:a0:a4:02:21:5f:86:38:cc:35:52:
b2:df:20:f5:fc:b2:a9:1d:4f:49:2d:2a:e5:11:e7:
33:7c:a5:60:fa:81:94:dd:b4:e6:09:65:fa:39:e9:
29:6e:f1:ba:0f:d5:11:f6:ba:64:7f:99:90:93:87:
d0:2a:ae:da:18:da:15:71:d0:ff:5e:ae:2d:b6:13:
eb:d7:13:1e:32:36:1d:d0:60:af:2a:84:06:ab:10:
69:b8:06:6f:6e:e0:b5:8e:7e:c8:73:00:ae:60:14:
1e:07:95:b1:54:98:dd:dd:f6:12:57:d9:0f:c2:c5:
f5:5e:6b:7c:af:58:56:9b:0f:c2:e2:88:6f:b8:5f:
27:f5:4b:28:a8:2f:2e:79:df:48:77:3b:0c:e3:94:
9e:db:2f:fd:2c:56:4d:50:42:e1:32:dd:c9:08:79:
9b:17:62:98:70:82:66:55:3e:8d:df:c3:1d:6f:b7:
15:49:dc:88:21:da:a2:7c:3b:9d:f8:6a:4b:0a:f5:
1f:99:8a:0b:f8:f7:b0:ad:a5:95:19:18:a3:d3:7e:
a5:95:95:a2:af:c4:df:2e:09:34:ed:1b:8f:ee:89:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:8C:89:A1:98:3F:56:21:30:C9:8C:85:9E:8C:EB:16:BE:A7:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1489b76a-ccb4-33dd-9942-388248428aa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3014::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:81:62:ea:3e:1f:97:71:3d:d1:a4:ee:b2:64:69:76:8f:64:
69:92:39:cd:67:ed:c8:e3:9e:47:6f:79:3a:c6:f9:29:64:9b:
9d:57:3b:7a:92:e5:5a:ef:c5:4a:fc:54:46:56:cf:b9:0a:48:
86:f2:26:a3:07:ed:f2:62:5e:3c:ac:61:a5:82:45:ac:4b:5f:
18:c5:d9:c6:77:8d:78:ec:e0:0d:88:5f:6b:c2:b6:c6:b1:e9:
32:34:49:1c:54:90:47:34:08:71:b1:a1:7f:16:51:03:96:67:
15:bc:3e:15:eb:98:ad:2c:4d:11:1d:1a:77:b6:98:ee:07:0f:
e7:ed:f9:82:28:78:61:1e:b8:43:a0:61:f0:28:4a:6d:7f:4b:
80:40:d0:46:c4:b6:cc:1d:8e:1f:e5:fd:7a:e8:6a:d7:62:32:
c2:b1:dd:3e:69:25:9d:cd:cd:f6:7d:38:6b:0e:2b:6f:ac:2a:
c3:71:f9:3a:cc:e6:d0:58:f5:4b:2d:a7:f0:ec:6a:d3:63:2e:
6b:ed:34:05:e4:6a:27:c6:f4:15:85:92:7c:ce:a4:ce:53:43:
55:ef:12:da:36:46:e1:db:4a:b9:49:68:d5:b2:ae:e8:d6:4a:
2d:e2:06:c1:a1:f6:8b:2c:fa:45:df:de:bc:e6:d8:4a:d7:35:
4d:ed:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:35 2025 by rpki-client