
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa
File: 0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa (raw, json)
Hash identifier: oMPIfOICj93Pbdr0KpoZnjZP8Wruc9zJU3NVucQbp0o=
Subject key identifier: FC:21:19:C9:89:1D:27:53:BC:4E:D6:18:C1:7F:46:62:B0:66:C6:97
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F4328584BBA1037D4443B75487F72A280
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa
Signing time: Sun 02 Nov 2025 14:00:38 +0000
ROA not before: Sun 02 Nov 2025 14:00:38 +0000
ROA not after: Sat 31 Jan 2026 14:00:38 +0000
asID: 398549
IP address blocks: 2605:dd40:8204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ba:10:37:d4:44:3b:75:48:7f:72:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Nov 2 14:00:38 2025 GMT
Not After : Jan 31 14:00:38 2026 GMT
Subject: CN=511f2422-84eb-44cb-94bc-2911543ec32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:f7:4d:fa:c3:b1:2a:4e:8e:e8:4f:bf:8b:
88:61:09:22:e0:0f:6c:ee:3e:d0:71:a4:89:ed:63:
56:eb:b1:09:e3:ab:c6:c7:e3:97:63:7b:ad:cb:e4:
67:1a:69:1a:71:8f:d2:1a:23:84:a4:ec:32:29:0b:
28:25:48:d5:fd:d7:c2:75:14:77:42:e3:bb:0e:89:
b3:74:ab:2e:3b:b0:4b:76:52:45:7f:c6:84:a1:df:
01:64:40:28:2a:2d:44:9b:8e:f1:28:ff:4b:e3:3f:
ff:b5:7d:5c:0d:9c:3d:aa:a6:0b:ec:62:ab:bf:68:
6e:98:46:8f:14:e5:04:77:25:8d:04:c0:69:e8:c9:
5b:4a:c6:e6:7e:9b:b5:49:60:80:86:d3:1c:b3:37:
17:13:ba:e3:db:80:a2:d7:a4:54:c9:f4:d0:f3:9b:
c8:8f:0d:84:dd:2a:98:cd:88:1d:28:c9:77:f5:aa:
9c:7b:15:88:42:5a:93:88:0a:56:e7:7e:8e:d5:3f:
e6:7b:de:5a:eb:8a:a3:b6:ab:a1:26:76:53:c9:8f:
06:65:c4:ac:83:85:30:9c:af:76:c0:b7:bb:0b:30:
e8:80:a3:40:0b:7d:4b:18:87:0d:3a:71:e6:fe:e5:
0d:78:8b:07:6f:f9:98:fb:84:4f:d5:57:98:f3:b5:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:19:C9:89:1D:27:53:BC:4E:D6:18:C1:7F:46:62:B0:66:C6:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40:8204::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:3d:7c:c6:39:69:fe:c8:0d:82:0a:d9:e4:79:bf:05:51:08:
a8:af:f1:f9:83:bd:e0:06:fe:48:84:06:e4:8e:80:9c:dc:3e:
54:b7:64:36:5b:31:33:b7:b2:a5:82:c6:e0:d2:c4:28:84:3e:
66:50:fe:c1:14:9f:a3:a7:1a:da:dc:46:15:e8:ba:7e:f7:99:
50:d3:33:4f:60:75:27:58:96:6c:dd:1f:09:2c:ca:1e:15:93:
93:fa:33:31:9d:60:cc:a5:d0:51:db:03:c5:05:fa:8e:69:b7:
1c:fb:69:bb:39:d1:79:9f:3f:f9:ea:a1:57:ac:ac:3f:ec:94:
49:1d:66:b2:35:f1:14:21:7e:3b:da:43:33:9a:67:74:b6:bb:
48:53:49:a9:90:5e:ea:d9:1e:a3:15:b5:72:1f:e9:85:ce:56:
2d:a7:4a:b7:33:fe:f1:46:0f:0c:cb:bf:e5:d8:c9:72:6e:a9:
1a:7a:da:e7:ea:21:1d:24:43:87:c1:40:7f:10:b2:c9:14:29:
96:63:36:de:2b:49:34:bc:4a:65:66:3b:b7:81:42:43:b2:99:
e5:9a:13:b5:69:91:05:ea:bf:2a:db:a2:4f:27:d0:ae:62:b2:
3f:c5:bf:a2:88:06:bd:cd:57:9f:33:09:c8:04:60:e9:9f:fb:
3b:e3:99:7d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu6EDfURDt1SH9yooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
NTExZjI0MjItODRlYi00NGNiLTk0YmMtMjkxMTU0M2VjMzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQj3TfrDsSpOjuhPv4uIYQki4A9s7j7QcaSJ
7WNW67EJ46vGx+OXY3uty+RnGmkacY/SGiOEpOwyKQsoJUjV/dfCdRR3QuO7Domz
dKsuO7BLdlJFf8aEod8BZEAoKi1Em47xKP9L4z//tX1cDZw9qqYL7GKrv2humEaP
FOUEdyWNBMBp6MlbSsbmfpu1SWCAhtMcszcXE7rj24Ci16RUyfTQ85vIjw2E3SqY
zYgdKMl39aqcexWIQlqTiApW536O1T/me95a64qjtquhJnZTyY8GZcSsg4UwnK92
wLe7CzDogKNAC31LGIcNOnHm/uUNeIsHb/mY+4RP1VeY87WDmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPwhGcmJHSdTvE7WGMF/RmKwZsaXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvMGNkNzc1ZTgtMDUyZi0z
MWU1LTk0YjItYzkyZmU1NjU0Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIIE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAg9fMY5af7IDYIK2eR5vwVRCKiv8fmDveAG/kiEBuSOgJzcPlS3
ZDZbMTO3sqWCxuDSxCiEPmZQ/sEUn6OnGtrcRhXoun73mVDTM09gdSdYlmzdHwks
yh4Vk5P6MzGdYMyl0FHbA8UF+o5ptxz7abs50XmfP/nqoVesrD/slEkdZrI18RQh
fjvaQzOaZ3S2u0hTSamQXurZHqMVtXIf6YXOVi2nSrcz/vFGDwzLv+XYyXJuqRp6
2ufqIR0kQ4fBQH8QsskUKZZjNt4rSTS8SmVmO7eBQkOymeWaE7VpkQXqvyrbok8n
0K5isj/Fv6KIBr3NV58zCcgEYOmf+zvjmX0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:08:21 2025 by rpki-client