
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
File: f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa (raw, json)
Hash identifier: FGX0aaWPSgjGsSg0+NK0c5lIzfJqziHwd5qNK6B8M9Y=
Subject key identifier: EE:0D:F7:F8:73:BB:EB:9D:9C:6E:0F:85:56:BD:99:E1:B5:48:F2:33
Certificate issuer: /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial: 010D0C9F4328584B9872401E3DB796AC9EE1A500
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 55254
IP address blocks: 2602:ffcd::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:40:1e:3d:b7:96:ac:9e:e1:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=de23e65e-eb07-46e7-886e-ccdaccfd54a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:bf:dd:39:38:78:0c:46:67:c4:e7:3d:93:
1a:b0:1b:19:e6:5a:26:e1:bc:2c:28:68:d1:89:db:
42:b1:2a:f4:25:7a:ca:30:c7:6a:45:79:6b:51:a5:
b5:15:ce:13:c1:3f:0a:1a:6b:21:b5:56:2c:e4:c4:
b0:56:71:74:97:d4:a8:34:c9:13:97:6f:7e:c4:85:
95:b3:79:20:d3:01:19:33:ec:8e:0e:21:90:6f:1f:
ce:b3:90:be:86:e2:9a:a7:df:01:1d:75:05:ce:56:
53:60:9d:13:b2:28:50:04:4a:48:c9:ee:ae:ea:a2:
2e:4e:b6:c8:d6:69:a5:8e:b3:e4:32:34:0a:95:14:
9e:9d:fb:96:dd:d0:c6:62:89:bf:88:46:8e:70:79:
5b:fe:63:10:22:a1:8b:d5:e7:4c:a1:a7:e9:58:23:
1e:70:f8:bb:44:fb:e9:0e:2f:3a:ac:06:eb:f8:4f:
29:0a:77:d7:a3:89:88:c8:83:03:6a:3c:90:4f:df:
d6:64:f9:88:46:a3:ea:1a:91:dc:08:8d:75:f6:5e:
2a:05:3a:ca:aa:ad:2c:49:ac:32:4d:fe:d5:4c:bf:
e0:9c:1b:be:d8:95:6a:62:7b:7f:2a:3a:26:02:53:
17:97:04:52:d7:46:9a:f7:cb:67:ed:ee:25:12:10:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:F7:F8:73:BB:EB:9D:9C:6E:0F:85:56:BD:99:E1:B5:48:F2:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
X509v3 Authority Key Identifier:
keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:ffcd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d6:ce:9d:33:65:b1:74:fe:27:a1:dc:1d:ff:7e:97:23:46:
0e:11:ce:29:5c:23:44:79:95:e7:67:98:51:9e:dc:38:4f:b1:
e8:ae:97:80:4e:d3:1f:08:75:a9:5e:53:a5:f3:ca:8b:6b:e0:
cc:06:9d:4e:8b:ad:cb:ec:e5:90:d4:a3:cb:9d:3e:97:a6:59:
a3:8a:9f:bd:29:ae:30:64:60:94:21:8d:72:9f:1d:d6:17:08:
88:92:1b:c0:b1:bd:ff:66:6f:81:e6:44:89:eb:39:51:f2:ae:
a6:0c:ab:50:0b:43:c0:68:63:cd:84:38:a1:40:12:e9:e8:27:
46:ce:cd:f2:0d:01:26:af:32:9a:cb:3d:23:72:07:e9:59:4d:
cf:41:ad:44:53:2d:ec:35:93:d7:6d:bd:b5:1a:4b:a1:e9:6f:
0a:76:b9:aa:68:51:c7:06:43:ac:b0:9a:02:79:48:8e:59:8e:
eb:4e:18:63:64:39:3b:59:76:5a:9c:cc:9b:c1:a2:b2:9f:b5:
bd:aa:1b:3e:c4:00:9a:a0:c2:df:57:6e:6d:78:54:54:40:3f:
3a:7e:b0:35:4e:30:cb:0d:08:13:f0:cc:8e:f0:03:5a:15:db:
8f:27:b1:17:12:8d:f1:38:73:c0:61:9c:d1:1b:cc:5b:15:43:
7b:72:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:07:10 2025 by rpki-client