
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
File: 00815a99-a458-3091-a374-a6e5d843be86.roa (raw, json)
Hash identifier: UW7vjIMHy41G/lj6/PE/8VV+x9GuKIXwRtdqjdc/8WY=
Subject key identifier: E6:AC:71:4C:7D:4F:51:CB:C3:7B:79:94:3C:0A:5A:BE:1E:82:75:A0
Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial: 010D0C9F4328584B4FDC7A3BAD408347B8049C80
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
Signing time: Thu 25 Sep 2025 13:00:41 +0000
ROA not before: Thu 25 Sep 2025 13:00:41 +0000
ROA not after: Wed 24 Dec 2025 14:00:41 +0000
asID: 49
IP address blocks: 2610:20:6f97::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4f:dc:7a:3b:ad:40:83:47:b8:04:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Validity
Not Before: Sep 25 13:00:41 2025 GMT
Not After : Dec 24 14:00:41 2025 GMT
Subject: CN=635487b2-b2f5-4e24-b427-6d1f6a0cc2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:9f:6c:56:b9:6f:7e:5d:2e:cb:2e:cc:78:
02:81:9a:a7:ce:ca:97:16:b5:06:e2:0e:f1:5a:6b:
47:ed:32:61:b4:25:35:49:c5:fe:78:9d:a6:91:7b:
17:2f:88:01:62:a6:2e:49:91:fe:34:9c:e0:6e:9a:
8e:95:60:69:61:6a:70:5e:29:82:8f:d6:1c:39:45:
ae:f8:7a:c0:21:4e:00:21:a6:65:6b:78:d3:e7:cb:
77:ed:c8:d8:3f:ea:b5:00:65:1c:a6:d3:c6:64:d8:
8c:56:6b:9e:b5:84:30:12:ab:84:af:a1:ef:01:1f:
a1:a2:47:e3:3e:83:c5:50:96:35:ef:0f:b5:40:e5:
d0:12:98:aa:7b:04:51:d0:58:ce:9c:24:24:d1:f8:
d5:45:67:24:f1:1f:c3:bf:dd:66:34:bc:84:5a:ef:
80:74:17:15:74:86:ee:3e:d9:cc:eb:aa:94:85:c9:
dc:ab:1c:14:a4:92:f2:81:da:03:fc:57:30:95:57:
14:c7:6e:02:51:8a:e4:51:96:14:fd:64:c6:91:e4:
69:fe:a0:de:7f:77:b7:6b:52:41:9c:0d:e2:cb:02:
48:69:26:80:64:f1:66:b9:26:86:5e:00:2c:b5:d1:
71:73:6e:73:d8:86:ee:76:52:c0:cf:66:70:f1:ed:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:71:4C:7D:4F:51:CB:C3:7B:79:94:3C:0A:5A:BE:1E:82:75:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
X509v3 Authority Key Identifier:
keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:6f97::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:38:9a:f2:9d:00:58:3d:33:da:a5:94:4f:99:d3:8e:f6:1d:
0d:34:a9:ec:70:e7:11:7a:66:05:71:e5:8e:ad:82:ba:94:c2:
ab:e9:c0:9f:16:40:c6:19:20:6a:b5:1d:0f:e7:52:8a:88:3d:
41:da:8e:d4:20:06:3a:72:82:ca:e2:cc:14:ee:6d:dc:5f:e6:
07:db:2d:27:a4:dd:c5:6e:06:70:e5:6b:f3:5c:40:a1:96:db:
13:3f:db:e8:4d:eb:47:13:6d:eb:15:49:5a:48:f8:c7:83:6d:
2b:de:b7:fb:bd:5b:5f:c6:90:33:84:01:96:bc:31:b6:d6:e3:
32:8e:95:e2:98:ff:54:b1:d5:cf:e0:db:7d:4f:2a:40:73:20:
ad:f6:d7:42:a3:4f:be:27:c4:14:03:b9:89:67:eb:67:cb:40:
1c:54:44:29:6d:22:2c:f5:ae:e3:c1:c8:6f:c2:b8:23:b9:fe:
e6:7d:80:43:37:9a:9e:c6:f4:88:58:21:9d:85:6c:74:92:c1:
65:b6:86:c8:3d:c3:e3:6b:09:60:97:85:ce:4a:c2:71:91:85:
1e:04:76:16:8a:28:c9:35:f9:b2:cf:09:53:31:bd:1f:f9:ef:
e4:f6:d6:a3:b0:0f:a8:11:36:02:3c:e8:81:a8:df:72:ce:45:
59:11:d1:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtP3Ho7rUCDR7gEnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh
N2U5MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjM1NDg3YjItYjJmNS00ZTI0LWI0MjctNmQxZjZhMGNjMmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjOfbFa5b35dLssuzHgCgZqnzsqXFrUG4g7x
WmtH7TJhtCU1ScX+eJ2mkXsXL4gBYqYuSZH+NJzgbpqOlWBpYWpwXimCj9YcOUWu
+HrAIU4AIaZla3jT58t37cjYP+q1AGUcptPGZNiMVmuetYQwEquEr6HvAR+hokfj
PoPFUJY17w+1QOXQEpiqewRR0FjOnCQk0fjVRWck8R/Dv91mNLyEWu+AdBcVdIbu
PtnM66qUhcncqxwUpJLygdoD/FcwlVcUx24CUYrkUZYU/WTGkeRp/qDef3e3a1JB
nA3iywJIaSaAZPFmuSaGXgAstdFxc25z2IbudlLAz2Zw8e1bVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOascUx9T1HLw3t5lDwKWr4egnWgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx
YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvMDA4MTVhOTktYTQ1OC0z
MDkxLWEzNzQtYTZlNWQ4NDNiZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4
Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx
YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh
YmMxMWE3ZTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIG+X
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI84mvKdAFg9M9qllE+Z0472HQ00qexw5xF6ZgVx5Y6tgrqUwqvp
wJ8WQMYZIGq1HQ/nUoqIPUHajtQgBjpygsrizBTubdxf5gfbLSek3cVuBnDla/Nc
QKGW2xM/2+hN60cTbesVSVpI+MeDbSvet/u9W1/GkDOEAZa8MbbW4zKOleKY/1Sx
1c/g231PKkBzIK3210KjT74nxBQDuYln62fLQBxURCltIiz1ruPByG/CuCO5/uZ9
gEM3mp7G9IhYIZ2FbHSSwWW2hsg9w+NrCWCXhc5KwnGRhR4EdhaKKMk1+bLPCVMx
vR/57+T21qOwD6gRNgI86IGo33LORVkR0RU=
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:29:59 2025 by rpki-client