
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
File: da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa (raw, json)
Hash identifier: BkywrEj0sUK98qH0yZNx5nG3s0nDSLBL2Qey6GBH8ZE=
Subject key identifier: 6A:29:D3:7F:13:0F:37:58:C8:13:54:5C:ED:7A:96:60:A6:80:C5:B1
Certificate issuer: /CN=d87bb806-e83b-438e-bf0b-6c487902c669
Certificate serial: 010D0C9F4328584BB88D181390140754FCDC9C00
Authority key identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 53361
IP address blocks: 2620:d3:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:18:13:90:14:07:54:fc:dc:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87bb806-e83b-438e-bf0b-6c487902c669
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=e1bf745b-130b-4a0d-8751-bb48b701c0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:6a:a9:b8:82:d4:c6:0a:f7:ea:5d:45:29:
c7:fb:0f:95:83:a9:4e:23:ce:d7:fb:61:49:62:7b:
b1:33:b4:62:a0:f0:5b:6a:91:59:7c:c4:cd:1f:97:
8a:ed:1f:a9:44:d5:b0:0b:99:87:5e:60:a8:55:cc:
1b:4b:ed:e1:bd:45:f1:be:8e:c7:1f:a0:b3:c5:d6:
ac:a4:3e:bd:d1:a0:d4:76:8d:1e:cb:d3:84:cc:f2:
c2:39:fb:a9:61:5b:fc:5a:d8:93:50:b3:5a:fc:ad:
1b:aa:1b:7a:ea:f6:88:9c:c1:33:9e:76:56:b4:cc:
ff:4a:d8:9b:04:89:76:89:1b:98:2d:b2:31:06:d7:
29:1a:29:64:61:e4:7d:4e:a8:a1:33:86:2e:d5:04:
10:f9:42:63:db:27:a6:4d:89:35:bf:14:57:43:1f:
a3:5a:18:76:d8:c0:55:aa:cd:dd:13:ba:bc:6c:27:
5f:af:c2:a4:b7:8a:48:1c:d4:5c:a9:83:8a:43:e0:
81:ab:6a:d7:ff:e7:63:d4:73:16:af:f1:55:71:e3:
e5:3b:5c:b4:18:8b:92:b7:2b:50:09:b1:84:35:c8:
1a:cc:88:c8:16:af:47:a9:9a:4d:f4:20:13:c7:d6:
bb:69:a7:50:1d:16:cc:b1:35:98:ff:5a:27:0e:fa:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:D3:7F:13:0F:37:58:C8:13:54:5C:ED:7A:96:60:A6:80:C5:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl
X509v3 Authority Key Identifier:
keyid:B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:d3:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:d1:c9:69:93:38:26:66:e2:9d:3c:dc:5e:02:68:7c:e8:e0:
24:04:12:cd:0f:05:54:f1:01:d6:bc:5d:81:c5:4c:0b:de:c1:
8d:34:84:44:d5:d0:05:b0:7d:96:88:dd:5e:4b:b9:58:1e:dc:
b0:3a:72:9a:0a:57:28:9f:f6:a7:c7:4f:bd:e0:8f:82:0d:05:
29:5b:ae:95:d6:cb:fd:91:85:1b:a3:cf:4d:cd:9a:3e:83:6e:
9d:a8:6f:39:96:5f:e4:f5:3d:84:ee:6a:c0:3b:ff:1d:ab:e4:
3d:9f:ac:7a:25:1a:b9:03:de:8c:e5:fb:21:62:5c:80:86:d7:
e7:8b:97:86:fb:d2:35:f2:92:7a:9f:86:f4:06:eb:de:4b:8a:
75:01:c6:2b:3a:6c:49:9d:2e:ec:fe:5b:2f:38:be:d4:47:1f:
c8:e2:cb:35:ff:c2:54:98:cb:2d:e2:4d:f8:18:4d:46:69:1e:
cd:47:4f:89:28:7c:24:c7:1d:a1:7f:f4:fb:73:8a:61:da:76:
11:01:1b:97:a1:f6:51:ec:3f:fb:9f:dd:dd:2a:e7:ef:c8:c1:
fb:bd:06:02:1e:e7:fc:d3:59:89:d5:0e:e0:aa:1e:39:17:5a:
1e:b8:c9:1e:9b:77:fe:fd:ef:98:a0:0f:51:e8:f9:a0:ba:28:
be:f5:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:23 2025 by rpki-client