
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/522407e4-43f9-31c6-ab3e-5931f9e6a540.roa
File: 522407e4-43f9-31c6-ab3e-5931f9e6a540.roa (raw, json)
Hash identifier: yo0Pj0W8Lle7NQLrrR8R3evQnSf6pxFTc7ymxmzPTCg=
Subject key identifier: 32:1B:FE:D1:81:53:94:23:34:90:8B:20:2B:2A:82:BA:61:8A:8B:14
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB88D50229E57529517BF4280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/522407e4-43f9-31c6-ab3e-5931f9e6a540.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 2606:4700:3022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:50:22:9e:57:52:95:17:bf:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=23f330fb-a26a-4706-8add-dcd65a45ef16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:39:7e:9f:5d:1a:01:9a:39:48:38:0a:ec:
7b:a9:de:9a:b1:19:ed:fe:d7:a7:2c:af:94:b8:42:
60:62:b3:77:2a:09:46:aa:28:06:38:75:6c:9c:80:
15:46:e7:41:af:ba:f0:26:e6:85:3b:86:43:8f:41:
4e:4e:cb:eb:42:48:d2:96:a3:ef:81:f4:ba:82:65:
b9:21:7b:5a:d0:8c:fd:b1:a5:69:e3:8a:f3:26:25:
2c:11:15:8f:3a:9e:5d:76:ee:54:29:26:35:3a:c3:
7e:bf:c8:0d:e1:77:59:06:5a:3f:2f:ff:23:ce:c2:
6e:8c:fa:9b:2a:3c:20:fe:61:1e:1f:cc:6c:1a:05:
8f:b0:dc:ed:e2:8f:65:12:b9:f4:21:ac:82:92:f7:
9c:03:71:d5:af:f4:04:2c:07:0d:cd:40:8a:c5:43:
60:a0:54:07:85:68:c7:0d:5e:c4:b2:65:dd:2e:c8:
26:e9:93:19:01:39:b0:ee:18:ed:d8:b1:b7:af:ea:
71:a4:0f:84:ec:e5:91:03:3e:1e:89:ca:0b:3d:aa:
b3:a5:b9:fe:7f:a6:fa:70:44:64:67:4c:6f:a0:60:
7a:8e:cb:3e:4f:f4:31:89:63:eb:60:19:9f:ce:46:
37:31:77:9d:1c:5f:57:e8:d8:b2:69:16:e5:13:ae:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:FE:D1:81:53:94:23:34:90:8B:20:2B:2A:82:BA:61:8A:8B:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/522407e4-43f9-31c6-ab3e-5931f9e6a540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3022::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:6f:40:8f:b3:ab:78:79:da:7e:55:45:bd:13:7d:db:92:46:
cb:c9:47:33:c3:6e:da:39:d0:ae:fa:f4:b2:3c:b6:24:cd:0f:
b4:e9:cc:f2:db:e3:0b:11:19:12:fe:4b:cd:cf:42:f6:ca:75:
39:1f:58:71:74:ac:d3:6b:a0:75:a3:0b:b6:69:bd:ca:44:5c:
0c:28:bd:7f:a3:69:ef:3f:5c:0a:fa:90:79:7e:52:61:e1:ec:
b2:68:16:ab:e5:76:53:38:af:d3:b2:43:1f:75:6e:14:e5:82:
a1:53:d4:8e:92:8a:68:c7:b7:0b:bb:f4:0b:f1:24:d6:ee:41:
b7:a0:ec:a7:5a:a0:8a:fb:47:76:55:50:9b:a5:25:75:ef:c9:
fa:b0:9f:25:da:08:1a:bd:18:d5:3a:0e:70:1e:0e:15:1f:e4:
cc:e2:a6:12:39:c6:a1:21:db:f1:17:0f:cf:e8:ef:1a:a2:b9:
71:72:37:a3:93:d1:a5:ab:6a:42:66:b7:9a:17:ac:8a:bc:64:
1e:b3:0a:f9:d5:17:ff:0f:5b:d0:49:e4:44:1c:2d:81:d6:e1:
5e:3d:1c:a8:1e:0f:11:8d:ab:97:f3:91:35:0f:b3:ba:19:10:
40:74:e1:1f:1f:74:4a:48:6b:d0:76:c7:ad:95:23:e9:ae:38:
c7:d7:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:52:18 2025 by rpki-client