
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa
File: 3bb61dcd-da0f-3ec1-8416-831c406b030b.roa (raw, json)
Hash identifier: Bv8p05n44RfjYoOLdT1bXe/KRl+D3uHlRaqGVmhjgZg=
Subject key identifier: 7B:0D:83:E3:90:DE:07:EB:27:8A:E2:3D:21:19:CE:EF:0B:1F:6D:5A
Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Certificate serial: 010D0C9F4328584BA9326A41CBC6E980CFC71D00
Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 15054
IP address blocks: 63.246.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:6a:41:cb:c6:e9:80:cf:c7:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=6c7c8d4f-8d44-435a-a961-5892d118db25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:92:2c:32:94:c2:4c:34:65:4e:d9:12:3f:
cf:f6:b9:97:d4:7a:60:0a:b1:4f:57:7d:ba:42:96:
89:49:b1:e2:d7:51:ba:38:6b:fd:94:2f:9e:01:86:
28:11:30:55:6c:40:23:18:54:6d:32:f6:9d:84:fe:
1d:70:92:32:2c:94:66:88:b9:13:58:bf:d8:72:67:
c1:53:73:94:97:40:1b:71:75:5b:11:59:63:37:3a:
ee:94:1f:49:c9:57:1c:38:c3:52:27:3b:ef:12:89:
23:4b:cc:14:ea:9e:a8:61:8e:0a:24:1d:5d:ec:6a:
a0:fe:ba:e6:5b:37:98:6b:4f:52:5c:2d:08:61:ad:
30:6b:38:ef:b8:d8:a6:5d:05:85:25:71:5d:d2:d0:
72:a7:6e:34:df:dc:f5:98:2e:92:e8:29:ef:d8:93:
17:d6:7f:d6:71:8f:8b:25:3b:41:7b:d3:d7:1a:71:
e3:86:48:12:b4:6c:89:61:84:28:00:76:63:09:40:
bb:82:78:98:eb:47:34:c6:00:47:19:7e:4a:b5:ef:
c2:85:7b:0b:db:26:15:8b:c3:dd:3b:91:78:d3:e1:
a9:d4:7b:f5:6d:26:4f:33:0b:5d:40:04:9b:11:79:
f8:e3:83:f3:4d:ec:49:52:6b:c7:d4:d6:22:41:69:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:83:E3:90:DE:07:EB:27:8A:E2:3D:21:19:CE:EF:0B:1F:6D:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl
X509v3 Authority Key Identifier:
keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
sbgp-ipAddrBlock: critical
IPv4:
63.246.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e0:ef:86:67:60:2f:0d:54:b9:3a:88:27:8b:72:46:bc:b9:
87:e3:88:6e:7d:b8:5f:36:20:a3:82:e9:fa:c0:9f:37:e1:20:
f3:1d:b1:f0:4e:96:d3:ff:63:55:16:05:f5:eb:4e:31:a7:00:
fc:a2:00:93:19:b0:33:f9:5f:57:55:b0:0c:a2:e6:29:9c:74:
76:cf:9f:0e:6d:13:a9:c2:01:6b:ba:f2:6e:29:75:0e:3b:1b:
43:b1:b3:ac:31:af:14:61:e8:84:2e:e8:bb:6a:41:79:70:f8:
85:cd:bc:55:b2:ec:9a:cb:39:c1:87:99:47:0c:ec:6d:a5:1a:
64:66:bc:8f:d5:b3:3d:ad:f6:1b:34:d8:ba:f9:ff:df:de:c7:
95:f0:2d:0d:d0:86:31:7c:a4:17:b7:66:20:e7:59:f0:63:35:
72:69:63:21:19:58:f0:4c:09:34:f8:c4:10:ff:47:73:c1:51:
a2:92:dd:6f:02:15:35:e7:8d:11:3e:05:3d:5b:d3:d6:07:d2:
8d:98:5b:03:e0:7a:01:43:49:68:3a:4b:02:4d:54:1f:16:69:
e8:23:5f:bd:9d:5c:02:9b:d9:b7:75:be:79:a9:9f:8e:8f:25:
57:40:15:6e:4e:6d:d6:dc:03:cc:a4:9f:00:50:f0:e0:06:25:
6f:3b:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:40:53 2025 by rpki-client