
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa
File: 8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa (raw, json)
Hash identifier: xPqXZ+rbU/ntjbp/GZxTXFTZ1PHt4lpiEyDoDfP0yMw=
Subject key identifier: BD:73:1D:F9:95:B4:68:F6:68:7F:66:01:3B:B1:2D:7E:F1:39:84:BE
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584B13D6B8B9D04DB933C192FF00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa
Signing time: Thu 04 Sep 2025 01:00:33 +0000
ROA not before: Thu 04 Sep 2025 01:00:33 +0000
ROA not after: Wed 03 Dec 2025 02:00:33 +0000
asID: 20253
IP address blocks: 2606:bc40:f00d::/48 maxlen: 48
2606:bc40:f00e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:13:d6:b8:b9:d0:4d:b9:33:c1:92:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Sep 4 01:00:33 2025 GMT
Not After : Dec 3 02:00:33 2025 GMT
Subject: CN=d8c71f94-4b0a-4c83-bc82-e9ffc98eb5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:d7:15:17:f9:da:7f:48:88:b6:b5:b4:d0:
f1:3e:61:86:2c:39:9a:b4:c9:49:66:4b:61:cd:c7:
ee:83:95:32:8b:e4:0e:9d:79:14:3c:ad:ec:32:93:
4c:da:21:5e:ea:7c:b4:80:de:85:a5:b8:03:ec:50:
d8:78:63:d6:5a:4c:32:ad:1c:19:f5:25:f3:8a:1d:
ab:6e:0d:33:2e:b9:bf:50:76:1c:92:c0:ef:d0:de:
9f:80:a7:9d:77:8b:22:c6:95:04:09:4e:f7:0f:d4:
5e:b3:ff:e3:db:79:c9:5a:92:9d:29:46:07:96:4b:
a9:1f:02:86:e1:28:29:8a:98:e8:fb:8f:a8:fe:05:
9a:14:cb:12:84:a7:38:1a:89:26:49:b2:e0:1c:25:
7a:14:71:a0:13:59:ed:f3:04:31:8d:78:9f:f0:10:
2e:27:3e:b6:74:1a:d0:97:64:d9:36:a5:e1:8c:70:
ba:57:29:eb:92:55:bd:ec:b8:df:6f:26:6a:0a:97:
99:71:f5:02:e3:ca:2a:52:b6:04:1c:b8:a4:99:37:
dd:7f:4e:52:31:55:10:d6:0d:b7:8e:f8:ee:d6:79:
09:7a:6c:cf:4f:b5:84:9f:ba:99:1d:f5:5f:0d:87:
83:eb:cc:ce:72:f7:13:31:6f:e2:2f:15:ea:56:1f:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:1D:F9:95:B4:68:F6:68:7F:66:01:3B:B1:2D:7E:F1:39:84:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f00d::-2606:bc40:f00e:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:03:84:8c:bc:6d:70:1f:76:a5:84:ec:ba:e7:a7:a1:01:26:
0a:a4:a4:1b:41:a3:f2:c3:d0:ec:5b:57:2b:c4:a5:24:b1:a8:
53:ae:ec:a4:a1:ab:06:d5:5f:43:bb:c2:b3:f9:8d:f9:3c:0f:
d2:44:82:f3:59:59:99:16:c5:a6:fd:66:15:1d:45:f9:4d:f4:
9b:2b:84:cf:25:11:56:1a:e3:35:e6:2f:46:57:c3:ea:ff:20:
b4:3b:b6:2e:42:70:c5:7b:94:bc:43:cf:51:c7:c6:c0:eb:6f:
6b:a2:ff:5b:c2:44:51:06:57:de:4f:35:16:9c:3c:56:1c:98:
3d:bb:de:1a:2a:43:76:50:8f:e0:ec:53:d6:eb:1f:ec:cf:7a:
8d:3f:c8:30:5e:f5:86:d9:c7:a6:4e:1c:cf:ce:b2:65:71:fc:
a6:8f:07:93:4d:f1:20:ff:5e:e2:84:f8:63:c8:50:90:a9:1d:
31:3d:0e:e0:09:ee:8a:39:e0:19:ea:fb:66:4f:2a:56:00:01:
7c:5e:a4:d4:6c:18:05:58:d3:76:23:c2:1e:2b:db:92:3f:35:
41:d6:09:42:58:09:9b:aa:1b:77:74:9d:f9:de:cd:47:3e:79:
9c:e0:96:50:7c:71:5e:f3:fc:48:4f:96:b4:5d:08:47:45:af:
bc:36:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:49:11 2025 by rpki-client