
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efb447d8-0ac0-3814-ad78-c3d0733cf74f.roa
File: efb447d8-0ac0-3814-ad78-c3d0733cf74f.roa (raw, json)
Hash identifier: rHjEE+0KxLAniQY+QXQDydVkQGniBvHQjgUPn3GcuOU=
Subject key identifier: 8F:32:B1:8D:78:EE:17:4F:1A:E7:D9:FB:00:F7:6C:90:91:7F:66:E3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB88D3A245B40C7198E3EE200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efb447d8-0ac0-3814-ad78-c3d0733cf74f.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 2606:4700:3028::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:3a:24:5b:40:c7:19:8e:3e:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=e825a585-6593-4f6d-ac03-5a47c8c11034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:59:f4:4d:36:0c:f9:4d:a2:80:fa:da:94:
9c:88:ad:24:63:64:2b:e8:65:0b:e8:88:d8:85:a6:
f8:59:28:68:42:8d:ed:0d:be:3b:1f:bc:4f:28:c8:
5a:fd:37:ff:95:d9:2a:9b:cb:8a:63:79:ce:46:f7:
d1:f0:61:0a:9e:58:ca:00:3c:e1:d1:71:3b:8d:a2:
b4:d0:ff:b0:00:49:aa:a8:0d:8e:ac:98:db:ef:90:
5f:91:cc:de:98:0a:3d:80:2d:33:b0:41:2b:06:38:
97:60:17:52:85:6a:50:e4:c4:20:90:b1:b8:00:5a:
e4:26:32:5a:87:00:90:ee:de:7a:74:d2:e3:32:1c:
22:53:c5:e6:ff:bd:b2:97:a4:91:42:7c:7f:2a:ab:
57:20:3d:9b:8d:8a:81:80:79:7d:ad:97:3c:c6:d7:
32:13:ec:1a:1a:64:7c:69:00:16:35:8c:d3:0d:d8:
05:0b:0a:53:13:bc:48:e8:ad:02:b6:b6:7b:67:21:
24:65:5b:79:3c:5e:8a:d3:64:f6:66:bf:76:20:09:
1a:fa:fe:c0:81:44:5e:fc:88:7a:1a:4c:fb:c6:9b:
64:a4:0e:83:6a:e1:58:f3:9c:30:cf:fb:f9:36:74:
ce:e4:cc:93:7d:63:73:8f:4e:e4:7d:e2:b5:18:ab:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:B1:8D:78:EE:17:4F:1A:E7:D9:FB:00:F7:6C:90:91:7F:66:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efb447d8-0ac0-3814-ad78-c3d0733cf74f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3028::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:4d:3c:2b:fe:86:7f:48:69:82:15:5c:46:4a:a5:26:12:29:
cf:cd:40:77:9a:be:cb:7a:ea:2a:2d:5a:89:6b:44:13:67:82:
af:01:dd:87:76:c6:ca:4b:60:ec:db:34:d0:94:e9:9d:d2:e7:
d3:36:bb:6e:c3:7e:3d:41:9b:c7:11:29:dd:d9:39:5c:64:3a:
19:fc:37:43:94:20:f9:0e:bd:de:4e:2a:e9:a7:f5:8d:31:84:
83:97:75:91:ad:4e:2d:91:48:dd:75:6e:d1:a7:ec:80:5e:5f:
58:3b:e8:a5:02:b1:1a:16:c2:39:15:e0:4d:bd:91:de:dd:1d:
af:dc:2a:54:8d:bc:de:cb:a0:4c:16:7e:e9:1d:94:d0:06:c2:
1a:f7:7d:70:16:3e:f1:40:05:c9:f9:1f:26:61:7e:ba:90:7b:
3e:c0:ee:6d:a7:dc:0c:64:0b:1d:67:d2:a6:9f:1b:01:db:da:
b1:f7:8e:ad:b1:3a:62:ad:c1:60:d7:5c:de:ac:6e:e4:96:20:
72:46:44:48:fa:15:45:6a:b5:8c:0d:ec:bc:75:cd:d3:f8:f4:
69:f8:18:9f:fd:58:97:31:16:05:fa:48:d4:f0:39:db:07:bf:
18:eb:c8:bd:ec:98:33:73:79:99:6d:64:df:1c:2f:65:8a:a4:
ee:99:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:38:05 2025 by rpki-client