
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
File: 0324a99b-635c-375e-af56-954f8fd6c9c6.roa (raw, json)
Hash identifier: hyH+WFsJ7ukoLReN+BijxD7VX1W6kvJGVbnLkvVPl5A=
Subject key identifier: AB:7E:C2:AB:56:0F:BE:D1:93:8E:E1:6D:CB:F0:1D:BD:A3:96:E6:2B
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F4328584B13D6B9F9A785F6BEBEFF0880
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
Signing time: Thu 04 Sep 2025 01:00:33 +0000
ROA not before: Thu 04 Sep 2025 01:00:33 +0000
ROA not after: Wed 03 Dec 2025 02:00:33 +0000
asID: 62467
IP address blocks: 2602:fc05:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:13:d6:b9:f9:a7:85:f6:be:be:ff:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: Sep 4 01:00:33 2025 GMT
Not After : Dec 3 02:00:33 2025 GMT
Subject: CN=be935201-a319-4ed3-b917-82ae3205041f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:8e:98:f7:1c:0a:cd:7e:e2:41:eb:81:08:
35:84:93:c8:f4:a4:af:f1:cd:b5:9a:7c:e5:50:60:
d2:e0:ae:bb:3f:b3:4e:ff:dd:db:bb:d9:fd:03:e8:
df:97:4a:17:b4:87:7c:b4:5e:31:15:bb:78:62:ac:
ce:48:db:d9:fa:73:15:9a:38:a2:04:3e:e3:ef:91:
8e:18:b8:d1:4d:b8:d5:7f:e1:e1:27:b2:6e:0d:45:
af:64:55:91:5d:cf:77:d6:78:89:7a:1c:ff:c3:1d:
43:34:fe:b9:02:ba:2c:fe:00:58:90:dc:d6:a2:db:
37:6e:cc:57:6a:1b:b4:77:aa:d7:33:78:46:b9:5f:
99:c6:2d:91:8d:4b:2d:68:d3:cc:2f:c3:51:2d:8f:
fb:99:07:7e:5c:57:30:1d:58:dc:20:b1:ca:c0:18:
0a:4e:0f:e2:45:e7:4a:7e:f5:47:b5:0d:f3:f7:0e:
6e:9c:bc:d0:6a:74:8d:c2:c5:19:4c:cf:c5:6b:d3:
65:ac:a8:cb:10:0f:3b:4a:d2:55:3a:37:d2:35:4b:
7a:bb:ff:d1:e2:9b:cd:e1:55:90:b8:e6:35:9a:c6:
f1:fa:b6:38:a1:87:64:91:1f:5f:6b:18:75:f7:1a:
ae:7c:9e:a3:ea:98:f5:6e:07:23:13:ea:41:44:7b:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7E:C2:AB:56:0F:BE:D1:93:8E:E1:6D:CB:F0:1D:BD:A3:96:E6:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc05:ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:55:91:1e:f1:af:de:57:f2:61:92:d3:29:f9:37:b6:40:d3:
86:3f:08:91:91:59:b1:f5:b1:26:26:1d:7d:f1:73:07:7f:c7:
fe:84:f9:42:d0:bd:f6:5b:9e:13:fd:8d:91:ac:f3:a7:3a:d9:
d3:3e:60:52:0f:47:99:f5:da:9c:70:ae:52:0d:1a:cf:ba:87:
cb:7e:8e:cf:fe:27:36:2a:de:57:52:f8:51:6a:aa:e2:07:14:
36:27:fc:e4:15:80:ee:7b:5f:a4:33:8c:a3:dc:ea:40:b9:99:
e7:22:5e:eb:63:86:e6:51:be:8e:8f:71:81:00:6b:56:33:8c:
67:db:cd:9f:f7:ee:68:fc:4e:ea:5c:45:97:e7:64:06:00:59:
fb:08:eb:ab:96:23:b3:5e:68:68:4d:61:bc:f2:1f:19:1c:2f:
a6:94:98:7e:f7:6b:d0:57:0a:0f:6d:87:93:44:87:33:cd:57:
e9:5b:12:b2:91:f5:5b:b7:28:99:52:67:79:9f:68:fa:97:a6:
02:e4:8f:c8:6c:63:3d:c8:fb:b7:a2:5a:c5:fb:68:83:e3:0c:
25:5e:61:48:93:95:a5:41:db:a7:54:ae:61:2a:ac:dc:1a:9d:
7d:0e:72:04:43:de:a4:ec:c7:b7:1a:c7:bd:b4:c5:6d:29:c7:
b6:d5:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:52:37 2025 by rpki-client