
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723441a5-21c6-336e-9318-bb7921d661ce.roa
File: 723441a5-21c6-336e-9318-bb7921d661ce.roa (raw, json)
Hash identifier: MpbZGh5ULGHJNpwTpZ1lyR+wXPic5s6D2MU/kRhTfUg=
Subject key identifier: A7:2F:4F:37:B7:EE:30:8C:AB:74:5E:13:58:5E:A3:11:ED:0A:0B:20
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB88D3A022E783542E4CED2C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723441a5-21c6-336e-9318-bb7921d661ce.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 2606:4700:3026::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:3a:02:2e:78:35:42:e4:ce:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=1b9c640c-971d-409b-8dd5-b3a6530ce691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8a:6c:1b:12:15:0a:c3:80:09:a0:4c:80:14:
db:b3:cf:00:76:d8:24:e9:9f:9e:71:46:11:01:1f:
ef:45:eb:9e:3c:0f:bb:05:5e:86:b5:20:36:5c:41:
33:a0:3c:dd:19:f8:d7:94:ff:0d:ff:64:da:fb:e0:
e1:aa:4b:12:ef:7e:03:4e:2e:52:e0:4f:22:68:9f:
10:70:6e:ee:5b:69:01:c1:af:92:fa:be:92:4a:73:
29:6b:d3:50:6e:0f:23:d3:eb:95:78:69:de:e2:cc:
cd:86:32:dd:25:99:d7:da:c5:d2:6a:d5:8b:d5:c7:
ac:d4:7f:90:84:34:d7:13:81:8c:65:c9:67:0f:6e:
21:2b:10:cc:a1:b9:4f:50:20:00:ed:c8:9e:98:9a:
3f:bc:74:1b:21:61:ce:c6:3b:3d:b2:8a:aa:60:07:
e4:07:62:74:ff:c8:c1:df:59:ef:9f:1c:e4:55:58:
a0:06:22:7b:97:74:10:86:d0:0d:a2:a2:30:4c:d9:
24:79:f1:68:aa:5e:ec:76:a4:cd:95:11:83:90:1f:
2b:25:ce:b1:cc:a9:d6:35:5a:25:6d:76:1f:17:41:
15:41:f5:83:74:a9:3c:9b:d9:95:66:39:1b:f3:23:
a2:a9:f4:88:9d:8e:12:dc:79:5c:bb:5a:da:6d:fb:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:4F:37:B7:EE:30:8C:AB:74:5E:13:58:5E:A3:11:ED:0A:0B:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723441a5-21c6-336e-9318-bb7921d661ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3026::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:8e:09:b0:0a:42:5d:e9:61:90:18:c7:49:0c:98:92:b0:18:
e6:0b:d2:74:f2:77:19:cc:04:a2:ff:b7:3f:f4:e1:cc:95:ec:
d9:b5:9c:ff:7c:44:c0:c3:33:5a:c7:04:6d:78:3d:c1:e3:3e:
dc:0d:db:86:9d:c0:17:5c:89:ab:7f:74:fa:11:ce:4d:19:fb:
e8:8b:24:6f:81:bb:56:50:25:c0:9e:38:34:98:35:4f:61:69:
7d:69:a8:c9:c8:29:46:5b:b9:15:88:43:3b:6e:08:c4:1b:6e:
88:9e:ca:03:cf:c6:e5:01:6f:19:5b:9c:0b:d7:27:0e:72:81:
39:93:00:44:f8:cb:1d:d8:a1:1e:06:e7:88:96:74:22:84:ce:
3a:76:ef:96:07:b4:0c:13:bf:96:11:ce:b9:2b:e8:1f:e5:9f:
5b:d7:ed:e8:2b:9a:de:ca:94:c4:ed:77:29:b4:d9:39:fe:1e:
71:fd:0c:8d:a0:5e:12:9c:2d:19:bc:c1:ba:f5:98:ae:e9:66:
ed:d4:a9:51:eb:26:24:97:6f:93:d8:5d:7a:d3:81:6b:5a:92:
09:d0:89:95:9a:f4:16:5a:41:6a:c0:be:b1:2e:4a:cf:77:f1:
b8:d9:f6:db:59:d4:5f:39:bd:aa:22:6e:3d:e0:ff:8d:c9:17:
33:3c:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:57 2025 by rpki-client