
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
File: 88777c11-cebf-398b-9cd2-dcb17df89b2d.roa (raw, json)
Hash identifier: 9NRYYNrqaFikS77xza4NS3oALl4LQsc8RlUn04Ehq1c=
Subject key identifier: 58:07:2B:5C:18:BF:07:C9:C8:BE:F9:D3:06:E9:E0:BE:B6:15:3C:1C
Certificate issuer: /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial: 010D0C9F4328584B540C67E1E315C1ED82C68600
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
Signing time: Sat 27 Sep 2025 01:00:33 +0000
ROA not before: Sat 27 Sep 2025 01:00:33 +0000
ROA not after: Fri 26 Dec 2025 02:00:33 +0000
asID: 62711
IP address blocks: 2602:f921::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:54:0c:67:e1:e3:15:c1:ed:82:c6:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
Validity
Not Before: Sep 27 01:00:33 2025 GMT
Not After : Dec 26 02:00:33 2025 GMT
Subject: CN=8d7a04c5-02c0-47e4-87e0-a69e21e1e240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:ae:98:28:c3:c7:4e:d8:01:ea:ad:b4:c0:
89:7b:b1:91:12:4d:b9:e3:a8:e0:fb:b6:31:da:54:
a2:c0:f5:1c:45:bc:5a:b6:52:1c:0b:ad:78:aa:ed:
14:fc:cf:a8:35:ff:2d:82:b7:20:1e:4d:73:7d:9e:
96:df:1d:8e:03:9b:58:df:bc:ae:6c:dd:19:5c:fe:
5f:30:57:6f:1a:34:6f:47:87:fa:02:12:3c:2f:10:
18:e2:9c:a3:b6:3f:f4:64:bf:06:89:39:2e:82:84:
e9:f1:1a:54:14:99:2b:79:1e:7b:5b:be:c1:89:d6:
33:b6:4c:bd:73:1d:0f:8c:3f:ea:c6:77:9a:3e:8e:
23:e0:48:87:9e:23:6b:71:ac:7c:90:cc:55:f2:56:
b0:64:40:f3:ee:98:37:11:73:44:35:a3:cd:19:94:
c0:79:2d:6d:f4:be:e4:21:5a:66:ee:c0:ce:eb:d0:
44:22:4e:79:49:08:d7:94:04:48:cd:29:93:da:a1:
a0:96:31:d4:be:de:28:f6:8a:f7:53:8c:7b:74:e9:
9c:81:ce:a8:48:0a:a6:a1:fd:cb:1f:07:e6:38:79:
ee:24:73:0c:22:51:12:18:07:0a:b5:40:36:21:a7:
65:75:b2:40:93:2c:b0:43:b4:f0:0f:c9:c3:b4:62:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:2B:5C:18:BF:07:C9:C8:BE:F9:D3:06:E9:E0:BE:B6:15:3C:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
X509v3 Authority Key Identifier:
keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f921::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:66:fb:08:eb:a8:9a:cd:26:48:33:90:a3:42:e4:67:61:af:
af:03:db:04:0b:32:11:ec:44:08:1d:70:15:a6:4c:fa:f3:b1:
0b:43:fd:5d:09:8f:d8:fa:5b:3b:26:7b:03:09:c5:b5:cb:b8:
6f:1d:bf:38:bf:77:6e:f6:13:7c:b4:bd:5b:af:65:97:3a:b0:
0a:9e:55:87:e0:a7:70:5f:16:d2:9b:df:d7:1d:09:98:da:97:
d7:a1:50:aa:ac:0b:69:b7:69:fe:74:59:2b:83:a8:bf:42:42:
b8:43:2d:2a:a5:77:44:8d:0b:f2:00:94:d7:b5:e5:b4:53:d2:
4b:c1:f9:a0:35:d2:0f:8d:88:d6:dc:6f:b2:07:3b:f9:5d:49:
06:dd:ac:e9:dc:4d:22:9f:91:48:47:4d:63:87:57:39:a5:33:
e5:f6:0c:57:1c:f5:fd:ca:b7:32:0f:2d:62:60:ab:a5:79:6a:
ef:0b:a9:f3:fb:ca:76:92:0b:86:70:7c:12:24:ec:84:bd:f2:
95:cf:37:54:0d:e7:44:1e:65:7e:47:1d:d2:d2:1a:e1:65:39:
32:9f:4f:c0:eb:33:77:04:b3:46:54:c1:5d:a4:87:aa:db:59:
16:f7:37:60:62:40:d3:13:5e:99:5d:34:ed:17:87:bd:59:0e:
ce:60:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:36 2025 by rpki-client