
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
File: a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json)
Hash identifier: lJ8wTFTEUGj2EzcTW9+bjcOdOfIGRfVQPabLXrxaK7M=
Subject key identifier: C3:DC:07:4E:20:F8:03:4E:C5:7D:80:6A:5E:78:48:21:39:BC:3E:79
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584B2CF6EC5294B398372F86AE80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
Signing time: Sat 13 Sep 2025 01:00:33 +0000
ROA not before: Sat 13 Sep 2025 01:00:33 +0000
ROA not after: Fri 12 Dec 2025 02:00:33 +0000
asID: 6391
IP address blocks: 2605:8c80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2c:f6:ec:52:94:b3:98:37:2f:86:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Sep 13 01:00:33 2025 GMT
Not After : Dec 12 02:00:33 2025 GMT
Subject: CN=42ef3299-806d-453c-8e9d-9963a0d934bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:2b:53:db:97:1b:02:51:d3:31:8d:35:89:
c7:f3:8a:bd:18:79:93:e6:c4:43:52:7d:5f:a3:ff:
ab:8a:e8:d6:0f:5c:de:bb:fe:39:8f:6f:6a:81:32:
f9:b2:19:dc:07:9b:07:99:ce:b1:fd:e9:48:93:b7:
d8:46:ee:6b:c4:7b:aa:d0:69:f5:ac:ea:cd:90:c2:
26:19:ea:d3:96:92:f1:1d:74:ef:6a:cc:16:63:02:
e9:02:b5:48:62:dc:fa:c6:fc:8b:61:39:1f:dd:cf:
5f:a2:cf:48:14:4f:6a:1c:87:f9:df:39:95:f0:0e:
c8:0d:e4:10:b7:15:b0:c0:1e:49:de:de:9d:05:72:
b6:84:ac:1a:50:1d:1b:9d:3f:ca:be:7a:0c:ea:06:
d4:05:a7:e4:dc:5a:c4:01:16:83:d1:32:1f:2d:e2:
9f:d5:08:30:aa:d0:14:2a:ac:81:a0:b7:2d:36:d7:
54:95:2a:7a:9d:8d:02:95:79:c9:9d:bc:e1:c7:8a:
b2:bd:24:1b:9f:fa:22:e0:84:37:0d:50:8e:23:52:
5f:39:7a:f3:74:84:52:84:ed:bb:ef:51:2a:61:37:
f1:97:b0:40:b3:f7:6c:e1:8f:a0:e1:12:ef:b0:42:
1c:fd:0e:a2:67:47:70:95:49:8e:79:2e:e7:29:99:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:07:4E:20:F8:03:4E:C5:7D:80:6A:5E:78:48:21:39:BC:3E:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:8c80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:05:cb:f4:c9:13:5e:48:6f:08:12:15:2a:c4:92:51:48:f7:
23:97:0c:ec:05:ab:5b:21:d5:61:2b:4c:5c:49:89:68:28:de:
50:83:62:fd:1b:ac:60:39:8e:be:10:97:c8:25:a4:8b:eb:87:
20:d3:bc:aa:4a:ce:20:44:a3:23:d8:d2:69:9c:ec:0a:5c:a7:
65:2e:cd:06:66:da:ae:5c:52:cc:b3:f9:6c:45:9a:97:0e:33:
7e:a7:72:65:36:9d:9e:a1:6d:75:b5:8b:65:d0:70:f0:50:5d:
b1:e9:45:48:f2:61:c4:7d:5b:5b:d7:a8:00:79:2e:90:ef:f4:
c5:8d:b8:bd:67:1a:6e:46:ca:8c:2e:e9:f9:31:62:2d:24:7d:
ca:44:ed:d1:ea:82:27:2d:d6:c1:05:94:a4:0e:47:24:11:be:
80:92:e8:75:83:ed:68:e6:44:ed:25:73:ef:51:ac:9d:23:48:
50:f6:2a:21:75:dc:66:a6:e8:d7:c4:07:31:a7:31:21:d1:4f:
5e:d0:c3:bc:88:33:c5:9e:c3:d2:fa:4a:62:06:68:da:bd:c5:
57:de:3b:54:99:95:25:59:64:67:53:05:fb:07:87:a7:b3:d3:
aa:4d:5e:21:eb:32:9c:0b:34:f1:a1:9d:c3:bd:fa:85:53:10:
7d:81:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:23:55 2025 by rpki-client