
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
File: fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa (raw, json)
Hash identifier: p6CAsqrBu7ADBP6ugoynITysMt87Lo2PHzHvaVv4B8M=
Subject key identifier: 4D:A2:56:B7:7D:E8:F8:1A:BA:EE:7A:E2:C1:EF:DF:C6:90:53:16:2D
Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Certificate serial: 010D0C9F4328584BA39D1FBF3BB59E6638EAE480
Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 0
IP address blocks: 2001:505:140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:1f:bf:3b:b5:9e:66:38:ea:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=95b7d4b6-d733-415f-ab3c-8a81562ca89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:1d:04:1e:5a:ee:79:a8:dc:81:41:bc:f8:
c9:9e:59:18:73:73:1b:57:a4:f8:86:d7:12:64:8d:
2a:dd:57:36:e4:d2:b1:c8:02:67:12:03:b7:46:b2:
b5:a8:b5:38:a8:0d:d9:80:a6:2c:38:d4:17:a2:83:
80:55:cc:4e:65:7a:5e:97:24:39:59:84:6c:20:b3:
fc:b6:c4:18:08:ed:b8:39:2a:02:4b:09:fd:af:14:
4d:02:77:58:3b:34:ad:74:79:07:bd:d9:f2:40:cf:
b6:b4:e0:a8:56:09:d2:06:cb:23:d8:be:3d:29:32:
2b:24:f8:23:fe:b0:55:fc:42:c1:aa:a5:62:06:97:
6e:ee:89:af:b1:76:b0:62:35:1b:3e:ef:99:7c:29:
1d:1d:a9:51:22:60:16:44:f3:bd:3f:05:dd:a5:a3:
57:45:5e:d7:e8:d2:53:89:b7:dd:23:a0:c7:8b:5b:
0b:5b:4d:04:29:c8:f6:6e:ca:d5:ed:7d:a0:dc:cc:
79:23:d4:86:41:8f:d8:a4:90:a6:67:ce:f3:50:7c:
0d:93:d3:cd:e8:72:7f:61:73:6c:93:af:95:20:a8:
75:a1:21:68:a3:d5:81:dd:40:d1:fd:44:ed:00:a7:
6e:89:2d:46:4b:65:60:40:cb:11:9b:44:2d:e0:ca:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:56:B7:7D:E8:F8:1A:BA:EE:7A:E2:C1:EF:DF:C6:90:53:16:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
X509v3 Authority Key Identifier:
keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:505:140::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ee:69:aa:b1:cf:2a:ab:15:cb:e2:cd:cf:14:58:72:b6:f1:
55:41:80:14:8f:dc:df:f0:8c:1a:3f:85:3b:13:62:97:40:9f:
2b:d1:df:e6:ef:36:bb:d1:5d:1d:3c:66:75:39:e2:6e:42:8d:
ef:3c:12:26:3f:68:29:c8:90:e4:3a:ee:62:e4:f6:09:42:19:
13:1a:1b:7b:9d:57:33:ed:fa:09:bc:53:6a:4b:19:7e:b2:d2:
15:47:b6:31:c6:78:e4:3c:92:fb:fe:d9:a3:b5:3d:30:3e:f1:
ce:ff:46:9c:e6:c2:f2:e4:bb:3a:85:2a:3f:78:b4:f2:08:fa:
2a:06:7d:3f:5a:b8:37:92:b7:99:b9:e2:45:45:14:ec:8d:71:
f4:76:9d:88:7a:24:5d:2e:06:94:10:a7:02:08:72:66:59:dd:
90:9b:bc:69:7b:7b:b2:47:38:f6:64:99:a2:ee:ae:f5:8b:10:
f5:08:57:93:e5:55:07:e0:78:09:50:cc:35:57:d5:70:3e:9f:
63:5d:f5:24:40:0d:61:b0:b1:ed:00:f6:84:7a:25:58:48:ff:
10:a5:47:be:00:26:52:ca:8c:4d:ad:6f:54:d3:84:fe:19:ab:
9b:78:4a:12:4f:01:95:f9:cf:54:0c:6c:ad:ef:cd:23:47:1c:
0e:ac:b3:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnR+/O7WeZjjq5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz
NWY3MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
OTViN2Q0YjYtZDczMy00MTVmLWFiM2MtOGE4MTU2MmNhODlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf8dBB5a7nmo3IFBvPjJnlkYc3MbV6T4htcS
ZI0q3Vc25NKxyAJnEgO3RrK1qLU4qA3ZgKYsONQXooOAVcxOZXpelyQ5WYRsILP8
tsQYCO24OSoCSwn9rxRNAndYOzStdHkHvdnyQM+2tOCoVgnSBssj2L49KTIrJPgj
/rBV/ELBqqViBpdu7omvsXawYjUbPu+ZfCkdHalRImAWRPO9PwXdpaNXRV7X6NJT
ibfdI6DHi1sLW00EKcj2bsrV7X2g3Mx5I9SGQY/YpJCmZ87zUHwNk9PN6HJ/YXNs
k6+VIKh1oSFoo9WB3UDR/UTtAKduiS1GS2VgQMsRm0Qt4MrEHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE2iVrd96Pgauu564sHv38aQUxYtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl
YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvZmRmZWRmYWMtYmZiYS0z
YzY5LWE5OGYtMzRkNWY2OGY2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1
MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2
MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2
NTFlNjM1ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBQFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGzuaaqxzyqrFcvizc8UWHK28VVBgBSP3N/wjBo/hTsTYpdAnyvR
3+bvNrvRXR08ZnU54m5Cje88EiY/aCnIkOQ67mLk9glCGRMaG3udVzPt+gm8U2pL
GX6y0hVHtjHGeOQ8kvv+2aO1PTA+8c7/RpzmwvLkuzqFKj94tPII+ioGfT9auDeS
t5m54kVFFOyNcfR2nYh6JF0uBpQQpwIIcmZZ3ZCbvGl7e7JHOPZkmaLurvWLEPUI
V5PlVQfgeAlQzDVX1XA+n2Nd9SRADWGwse0A9oR6JVhI/xClR74AJlLKjE2tb1TT
hP4Zq5t4ShJPAZX5z1QMbK3vzSNHHA6sswQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:01:07 2025 by rpki-client