
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa
File: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (raw, json)
Hash identifier: Tk255FrMHoNBcnNjMYhFFFC3gAx/V2iDmgeyTHOx+kI=
Subject key identifier: 3C:3C:C2:A2:5A:92:C2:10:95:37:22:86:1A:6A:D4:BE:4E:50:C0:C9
Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Certificate serial: 010D0C9F4328584BAEC7C0A9E5122A2C8F7BC380
Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa
Signing time: Wed 29 Oct 2025 13:00:39 +0000
ROA not before: Wed 29 Oct 2025 13:00:39 +0000
ROA not after: Tue 27 Jan 2026 14:00:39 +0000
asID: 8075
IP address blocks: 2606:e540:c00::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ae:c7:c0:a9:e5:12:2a:2c:8f:7b:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Validity
Not Before: Oct 29 13:00:39 2025 GMT
Not After : Jan 27 14:00:39 2026 GMT
Subject: CN=6e750b14-a0e5-4a44-9bc4-37b8645c108f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:77:12:f4:ae:9f:f8:1b:99:f0:d4:ec:64:
77:a9:01:e2:da:ed:84:56:4c:bf:cf:d8:ef:66:67:
4a:cd:de:fa:70:1c:e3:53:01:2e:d4:22:3a:fa:2b:
fd:0f:d7:11:0f:c1:bc:12:94:34:46:c3:86:08:9b:
cb:7a:bb:e5:bb:f6:44:4a:1c:34:c8:01:94:af:15:
82:31:8d:73:ec:d2:cc:01:cc:8f:c6:09:01:66:b5:
a1:58:6f:fa:a3:96:a3:90:12:ff:63:9b:d1:1f:c9:
01:2d:2b:29:a4:5c:8d:a1:be:cf:23:c9:ba:2c:03:
ab:d9:d6:c6:03:4f:e0:3f:b5:7f:95:b8:25:c1:85:
6a:26:31:f2:49:13:e6:48:84:c8:ec:13:09:99:a2:
5c:2b:7e:44:02:28:e2:96:37:ea:02:63:d7:b6:c9:
cb:59:79:b2:a7:a2:cf:42:6c:e6:0a:0c:86:94:fc:
4d:08:09:30:28:fa:af:2e:ed:16:8c:05:d5:f4:6e:
96:ef:e6:59:0e:11:1a:78:27:78:eb:0c:71:82:8e:
c9:20:e6:59:dc:6a:cb:36:29:c1:9b:55:1c:3e:01:
44:d3:3e:94:d8:26:3b:85:cf:ad:19:c6:06:cc:ca:
93:ac:52:b3:19:a7:2b:96:1f:80:bf:36:d4:d6:e7:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:C2:A2:5A:92:C2:10:95:37:22:86:1A:6A:D4:BE:4E:50:C0:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl
X509v3 Authority Key Identifier:
keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:e540:c00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:30:da:9a:44:9b:54:68:fb:51:60:63:a4:c7:b3:ad:a0:bb:
ab:ff:f4:b1:21:31:a2:6c:8e:e6:6e:cd:cc:80:88:18:cd:61:
19:32:1c:5e:4c:c8:33:d0:6b:8a:00:4d:c7:05:ae:66:f0:5d:
8c:bf:0e:b5:af:18:66:2a:84:6a:6d:68:62:9e:90:02:16:09:
71:72:08:df:43:35:53:b3:8a:a9:61:b1:04:2c:10:ef:ad:74:
5d:41:f2:0f:d8:ad:34:f3:cb:17:8d:62:c8:87:9f:06:a9:3f:
83:db:1c:b9:3b:d4:b2:53:94:0d:3e:2c:a5:40:bc:66:5d:c0:
46:e7:71:e6:60:43:d2:15:65:f5:c0:69:5b:e4:5b:3e:65:02:
7e:d4:8f:5c:21:2c:22:a6:6e:c4:ff:f4:47:5b:fe:6f:80:d8:
99:f9:f2:ec:f6:a7:88:02:e4:b1:ec:f9:45:60:24:7e:7b:73:
41:c4:bf:15:c0:25:fe:78:7f:14:63:db:8c:84:71:b8:85:f1:
9a:19:04:14:ff:e0:33:de:38:e8:35:84:3b:11:ad:30:bb:c6:
01:13:d3:c4:c4:aa:db:11:e1:41:a4:e9:6f:09:17:37:4e:37:
00:df:4a:ce:57:6d:e2:5c:0a:72:47:fb:e2:9e:1b:52:37:5b:
af:9a:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:13:50 2025 by rpki-client