
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa
File: 0cac666c-efe7-384a-95e7-52d5993c915a.roa (raw, json)
Hash identifier: HEeWeN3rUhzw6ZOaLEGFtNVK+j5iKpCGRJyn96a+veE=
Subject key identifier: E4:E1:59:B9:24:FC:6D:E5:1A:03:BA:09:84:D0:66:E8:BC:B1:B2:31
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F4328584B68FCAD946B7997EC41501540
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa
Signing time: Sat 04 Oct 2025 13:00:40 +0000
ROA not before: Sat 04 Oct 2025 13:00:40 +0000
ROA not after: Fri 02 Jan 2026 14:00:40 +0000
asID: 216321
IP address blocks: 2605:dd40:2800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:68:fc:ad:94:6b:79:97:ec:41:50:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Oct 4 13:00:40 2025 GMT
Not After : Jan 2 14:00:40 2026 GMT
Subject: CN=83870d6b-b2eb-4053-93b8-bdea9373ea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:5a:16:9b:6d:77:36:1a:ff:eb:b4:f7:a7:
98:05:7b:2e:ae:43:b2:9e:6c:a1:33:86:ea:d1:a1:
c9:9c:b0:13:cb:ab:a4:ff:00:08:fb:97:d2:09:2c:
e8:6b:e5:0d:60:33:11:ac:e4:a5:3e:34:97:dc:5e:
25:88:b1:d8:f9:26:54:29:3a:2e:46:02:38:a0:e5:
21:b9:90:80:6d:6b:03:57:5a:0c:83:80:ef:15:d0:
38:7a:d2:60:4e:e3:bb:52:d9:a7:cf:18:74:75:a6:
fa:6d:0c:f4:12:50:e7:5b:35:57:a5:e8:6a:70:ae:
6c:90:49:55:2a:40:b4:b3:f8:30:73:11:69:e6:d4:
e8:fd:67:9e:57:03:56:73:79:5f:03:28:a3:80:ff:
37:cd:32:05:84:3c:f5:e3:06:eb:d3:e2:9f:c8:68:
69:56:10:7c:96:03:b0:a6:14:35:87:b7:fa:62:2e:
6a:c1:1f:d4:c3:de:c9:55:7d:24:a8:fe:4a:08:d7:
1d:31:cf:11:ce:eb:1c:3d:1b:a7:c1:4a:c0:94:0e:
55:df:d9:2d:5c:6b:dd:35:45:00:5a:dc:0f:6a:23:
64:45:74:e2:8f:0f:4d:50:50:db:ed:fc:e6:e2:70:
d0:f2:3a:e6:2f:83:73:43:1f:43:ed:23:30:b0:2a:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E1:59:B9:24:FC:6D:E5:1A:03:BA:09:84:D0:66:E8:BC:B1:B2:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40:2800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:18:09:f5:ab:15:51:0e:1d:67:6a:5e:5c:09:90:7e:03:d7:
40:98:90:7e:04:7d:65:ec:b3:bd:f5:84:a6:86:a9:42:c4:59:
04:38:ae:c1:52:11:95:24:f5:2a:92:f1:91:ff:6a:cb:71:ce:
3f:3f:77:00:fb:54:17:ea:be:56:fe:08:26:8a:2c:71:9c:dc:
80:81:c4:3b:37:87:38:0b:40:cd:84:ca:a8:80:f1:70:57:00:
4d:91:9c:c9:9c:64:52:d0:1d:cb:4a:1d:f4:7e:2e:43:b0:1e:
15:69:b3:4d:49:d1:2b:34:6b:f6:0b:33:08:f1:35:43:d2:0e:
f1:b5:e2:67:1a:ed:b8:77:a7:8e:4c:63:2e:05:21:1b:28:85:
53:55:5e:0d:7d:17:88:42:0c:db:fc:72:b9:27:79:46:bb:d7:
98:9c:93:76:2d:e7:c3:04:8e:76:30:b9:2b:ad:4b:36:f6:5b:
d1:30:f9:6f:7c:df:38:21:d2:5b:23:1a:c6:25:c1:b7:a9:62:
a5:bd:2a:0d:03:cc:d0:b6:2d:e3:95:b1:5c:9d:fb:da:d7:98:
f7:b3:fa:10:10:3b:b0:34:49:74:e1:59:4a:51:a5:c6:77:2e:
48:5f:1e:5e:8f:4a:71:bb:9e:51:32:7a:83:ce:f2:70:f1:04:
71:c9:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:14 2025 by rpki-client