
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/ecc7708c-3213-3e68-8e58-d048a743fac9.roa
File: ecc7708c-3213-3e68-8e58-d048a743fac9.roa (raw, json)
Hash identifier: 6qs/kyIQLGtJVL0GsljmqfoG/JXVS8z66AJxFqzB8RY=
Subject key identifier: 4A:22:06:ED:87:5E:F8:40:A7:18:C7:CA:8A:88:E1:E3:00:F7:32:82
Certificate issuer: /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial: 010D0C9F4328584BA0D25D471CC23D6F55A88680
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/ecc7708c-3213-3e68-8e58-d048a743fac9.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 399077
IP address blocks: 2606:4dc0:3100::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:5d:47:1c:c2:3d:6f:55:a8:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=01bedbf0-8d0a-44a6-aed2-1863530b6b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:02:b8:43:b9:63:50:03:3c:0e:15:2e:75:
52:5e:3d:e0:de:3d:b7:63:c9:2b:3d:85:ae:b9:7b:
79:38:b4:87:ac:15:18:38:e9:a4:7f:ea:59:ca:7f:
7f:f9:5f:fe:c0:79:d4:2d:95:40:da:8b:81:80:cc:
98:83:74:6e:7e:11:70:e9:de:08:cd:f1:f5:41:e1:
c6:94:bd:8d:4f:6b:f3:76:2e:9e:88:22:9c:1d:7e:
d3:3d:e0:39:d3:b1:f5:40:e4:53:db:e2:95:1a:be:
c7:a5:f4:22:9f:88:ce:57:2b:92:cb:db:a9:98:a2:
a6:f2:0a:69:d9:3e:5b:e6:a4:6a:9c:e9:2d:b2:e5:
03:22:af:98:c2:46:87:a3:a3:60:98:b5:e9:5b:8e:
a6:3e:9e:d1:b3:48:b3:62:fe:c8:94:0b:bc:e0:33:
37:04:8b:d0:9d:1a:e3:26:14:77:02:93:88:9b:ba:
df:40:02:84:9c:8e:45:d0:b1:24:17:24:f4:43:ce:
be:8a:03:9c:56:fc:c5:c9:fb:72:46:b0:e0:1d:10:
5c:5d:a9:99:27:a8:16:6e:f8:2f:00:97:cc:f2:24:
35:60:d3:cb:d7:b0:91:cd:d5:7d:50:f2:f9:b2:54:
80:9e:f3:f8:ac:e4:76:bc:27:63:b2:8d:da:c0:a1:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:06:ED:87:5E:F8:40:A7:18:C7:CA:8A:88:E1:E3:00:F7:32:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/ecc7708c-3213-3e68-8e58-d048a743fac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
X509v3 Authority Key Identifier:
keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4dc0:3100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:2e:f3:10:6b:38:31:ab:1f:17:16:90:78:e7:03:fa:cd:e5:
2a:8c:f3:c9:36:52:f1:de:23:98:5b:35:1c:10:3b:44:53:40:
34:3e:a5:b5:dc:76:ff:82:d5:52:a7:4c:28:f5:7c:ee:bd:71:
75:de:1d:ac:c2:05:69:29:a0:b2:f8:cc:62:74:03:05:48:94:
5b:1e:b6:64:5e:99:66:7c:62:36:d1:b6:a0:3f:ee:07:14:15:
4b:aa:58:a1:97:cf:a3:47:82:b9:37:27:b7:55:73:63:5d:98:
37:bf:d2:98:ca:c1:fe:5c:01:42:41:96:4a:7e:92:c6:ec:6b:
4f:7c:a0:08:46:77:de:f5:05:04:4d:56:39:a0:0c:29:ef:0b:
34:af:b8:58:6b:14:14:8c:67:e9:64:e9:8d:3a:22:ac:81:f7:
be:d6:20:b7:9e:34:bc:35:5b:85:a8:36:18:f3:ba:36:9d:20:
ea:07:95:27:84:06:ba:9c:ec:2b:88:7b:b9:a7:de:c4:04:a4:
36:1a:bb:d1:4f:8e:02:0f:e4:2d:03:0c:91:89:50:08:6c:7e:
55:a0:55:01:f2:e0:bf:04:90:90:65:82:b7:f8:1c:ab:d9:75:
3b:be:10:e6:86:ee:f0:10:c5:dd:bb:53:f5:2f:87:05:8f:b4:
fc:07:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:43:41 2025 by rpki-client