
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2b8b65-50cd-341f-87cb-590b8b383890.roa
File: 4d2b8b65-50cd-341f-87cb-590b8b383890.roa (raw, json)
Hash identifier: R9uwWzyDOscogC1SUSKqdtlFpNQSWszIQ4YZ2vdtv8w=
Subject key identifier: 88:94:6F:6D:5A:03:13:4F:20:6F:D8:3F:FE:18:5F:5C:59:D1:97:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584B9E2F0A8E6437131E15757400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2b8b65-50cd-341f-87cb-590b8b383890.roa
Signing time: Thu 23 Oct 2025 14:20:12 +0000
ROA not before: Thu 23 Oct 2025 14:20:12 +0000
ROA not after: Wed 21 Jan 2026 15:20:12 +0000
asID: 7029
IP address blocks: 2001:19b0:100::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:2f:0a:8e:64:37:13:1e:15:75:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 23 14:20:12 2025 GMT
Not After : Jan 21 15:20:12 2026 GMT
Subject: CN=0fafa9c1-a385-4c4e-8867-249a382a5e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:2e:14:2f:1a:b6:36:e8:c9:5b:e3:b9:77:
c0:5c:0a:4e:6a:43:d7:2f:26:9a:06:88:cf:f1:00:
b5:cd:2c:02:0a:09:f6:84:82:0c:3d:16:f2:31:98:
40:cc:b1:02:a1:e3:94:fb:c5:af:9b:71:8d:d7:7a:
ac:24:08:79:9e:1c:94:64:51:78:96:e9:37:f8:ba:
3b:72:b1:c4:a2:0d:01:d1:0e:3a:2e:8a:d0:b8:1f:
90:1f:22:55:52:34:7d:49:a3:bd:9d:2c:a1:74:32:
d5:60:8d:6c:e0:83:cd:24:df:4b:de:8e:ac:0c:2d:
9d:09:7a:0a:45:18:9f:d3:3f:c9:29:42:df:90:2b:
23:bc:6a:be:3c:f1:b6:90:82:a2:4d:9d:b9:c7:27:
c8:c0:4a:af:8d:45:6c:d6:ba:11:03:4b:79:46:e2:
e6:0f:dd:01:fc:30:6f:33:96:13:6a:3b:c7:ce:1f:
96:42:2c:28:76:b3:79:dd:e3:ab:c6:31:23:39:bb:
02:c1:09:0b:bf:05:51:30:02:e6:28:ca:e8:a3:67:
3f:72:79:b8:97:5a:5a:d4:10:94:4a:ae:a8:a3:8d:
db:e0:77:16:a9:4b:1f:63:6f:ba:fb:e7:e0:f7:f2:
7b:1b:13:71:56:60:7a:28:18:93:25:3e:e3:8a:8c:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:6F:6D:5A:03:13:4F:20:6F:D8:3F:FE:18:5F:5C:59:D1:97:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2b8b65-50cd-341f-87cb-590b8b383890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:19b0:100::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:87:81:bf:25:68:dd:c5:36:82:b8:7c:14:ee:c7:ad:ee:cb:
14:4e:4a:69:78:55:18:88:1f:0e:a3:da:f9:ef:e1:bb:5b:3a:
d2:9c:a6:d1:89:24:f0:fa:dd:27:4b:63:18:0e:f4:8c:ac:58:
be:73:87:25:0a:1d:38:4f:e6:7b:ad:b3:67:9d:f3:fc:c4:18:
dd:8d:4f:c5:8f:e8:54:c4:e4:34:f7:f7:c2:09:85:4a:8f:63:
d9:64:8c:e5:95:1e:45:48:fa:47:b5:01:71:bc:40:1d:27:6e:
1f:cb:f4:12:eb:ad:27:11:a4:9c:a5:ce:81:45:da:a8:e7:fc:
b8:df:4d:92:2e:8c:c5:80:ee:0b:33:b9:89:f2:06:b5:e6:41:
26:b2:ee:04:54:ae:71:79:5b:58:5b:c1:e6:cc:fd:28:cd:c9:
af:d3:b9:58:7b:28:2e:6b:b0:9f:d5:fc:f7:8b:5f:ad:5f:7c:
f8:01:15:b0:dc:ae:6c:65:f6:a1:89:4a:e5:5e:3f:7c:82:ac:
07:ca:01:2a:8f:3e:4a:61:7e:45:65:cb:79:2d:a8:52:78:d4:
a5:f5:f8:75:d1:cd:0a:13:44:76:95:5f:40:4b:ab:c7:18:4e:
92:be:b2:99:c8:1b:ad:fc:87:67:42:8e:25:16:cd:00:5b:d7:
23:af:9a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:22:13 2025 by rpki-client