
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa
File: 836ea4ce-858f-30f8-a6a2-0103c3000406.roa (raw, json)
Hash identifier: LpB2c9vJfirJPoWZx6hn373PH5v4rOWWhUA4N3GMByc=
Subject key identifier: 2D:C0:3A:F8:42:8B:6F:E7:08:67:1E:0B:F5:5D:CA:E2:FD:D5:23:85
Certificate issuer: /CN=874f7cf0-cad4-4f53-86bd-48dca2b8186c
Certificate serial: 010D0C9F4328584AECC1441EC730D391EFC2BA00
Authority key identifier: 7F:05:9A:C0:C8:9C:A6:1E:23:AD:EF:1D:19:66:B8:21:37:FB:92:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa
Signing time: Thu 21 Aug 2025 01:00:33 +0000
ROA not before: Thu 21 Aug 2025 01:00:33 +0000
ROA not after: Wed 19 Nov 2025 02:00:33 +0000
asID: 22603
IP address blocks: 2607:4ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:ec:c1:44:1e:c7:30:d3:91:ef:c2:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874f7cf0-cad4-4f53-86bd-48dca2b8186c
Validity
Not Before: Aug 21 01:00:33 2025 GMT
Not After : Nov 19 02:00:33 2025 GMT
Subject: CN=d734a13e-eb5e-4f96-a3a2-3b35973709e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:0e:aa:78:02:60:5e:f9:18:98:b9:35:a2:
a8:e6:1d:3d:3c:20:43:33:2c:55:d9:c6:f9:ba:49:
66:50:31:62:5a:c3:df:4c:74:61:af:e2:ba:b8:42:
d6:fc:c6:5f:5e:34:66:1b:ce:e6:a2:d9:94:93:3b:
dc:d9:1c:b3:2a:f4:d7:e1:5c:46:8d:4c:3a:fd:2f:
41:ff:a9:0d:7f:c2:c8:bf:c7:c8:78:29:f2:84:7d:
9a:dd:b5:e0:22:cb:87:4d:9e:08:9a:5f:10:87:27:
73:a1:82:a3:40:05:95:83:ff:e7:c5:af:0c:ad:65:
b3:e9:95:9a:a1:b6:4b:da:fc:2e:be:af:fa:79:87:
94:a7:24:cc:ee:72:d0:2e:55:25:94:9d:85:6e:c7:
b7:46:1d:3c:c0:42:52:b2:30:34:9d:11:c3:6b:6b:
0d:e7:5f:d6:5f:3e:ff:fc:81:62:ae:9e:e5:a3:33:
d1:81:a0:fd:bc:d6:bf:60:91:cd:dd:8b:af:94:13:
19:7f:05:13:1f:8a:26:ec:17:8a:06:b0:1c:f2:10:
c8:d1:f4:a6:7c:38:2c:3e:65:04:65:e6:75:3a:be:
8d:47:f4:e1:95:1b:cf:d4:7a:0a:a9:e6:1e:45:4f:
9a:59:aa:c5:c5:48:7c:ad:c2:29:4a:0f:30:e7:2d:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:3A:F8:42:8B:6F:E7:08:67:1E:0B:F5:5D:CA:E2:FD:D5:23:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.crl
X509v3 Authority Key Identifier:
keyid:7F:05:9A:C0:C8:9C:A6:1E:23:AD:EF:1D:19:66:B8:21:37:FB:92:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:4ec0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:8f:d5:c1:5f:fd:b8:b4:90:ab:e0:b9:f6:14:ab:f1:1b:37:
07:87:2e:64:1a:f4:07:27:bc:21:a1:4b:90:da:d9:88:0f:d9:
84:c4:20:21:74:bd:74:c1:09:53:e4:c0:c3:c6:6c:e0:a3:fb:
32:fb:21:60:38:08:6f:67:03:d4:79:21:03:17:48:fa:69:0f:
8a:2f:16:4d:8b:b5:93:d4:be:45:bc:b6:5e:06:54:b2:3a:0d:
68:f2:4e:0d:0d:41:68:bc:0b:b3:c3:7d:ec:10:30:fd:58:31:
6e:91:0d:6e:c7:56:50:5a:c3:ba:6a:52:b4:72:5f:61:ef:77:
85:7e:a4:47:ce:19:a8:aa:af:d2:3d:f0:db:6d:09:dd:57:0f:
85:98:6f:0b:bf:fe:0f:2b:19:eb:36:08:b8:4c:2c:7f:29:07:
cb:36:db:9a:1a:0a:ec:2b:27:9d:72:3c:1a:98:b2:7e:32:b9:
c9:93:3e:b6:23:d6:a5:f2:93:57:bb:58:6e:82:31:31:b8:ed:
ec:7b:32:a8:37:29:e5:8f:1e:4c:3e:81:4e:4a:e3:e1:90:0e:
83:7a:3e:52:ae:60:77:c2:e6:08:47:9f:6e:78:c9:99:a8:b6:
df:d8:f5:96:85:cc:98:20:9f:e0:79:31:b5:7a:49:53:78:54:
e5:4b:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:00:06 2025 by rpki-client