
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa
File: 4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa (raw, json)
Hash identifier: Vhb9h5m5xNmw9Ay5ja5YZdcIBlsAba0rrbAJIayWrGQ=
Subject key identifier: 82:0A:DA:A1:40:EF:30:10:8E:17:F4:15:42:25:82:E6:1C:DE:7B:20
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328584B1AD1AFEAB619D0DA3F47AC00
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa
Signing time: Sat 06 Sep 2025 13:00:41 +0000
ROA not before: Sat 06 Sep 2025 13:00:41 +0000
ROA not after: Fri 05 Dec 2025 14:00:41 +0000
asID: 212001
IP address blocks: 2602:fd50:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1a:d1:af:ea:b6:19:d0:da:3f:47:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Sep 6 13:00:41 2025 GMT
Not After : Dec 5 14:00:41 2025 GMT
Subject: CN=d8d6507f-ebc0-42ac-8baf-d0d201e9fa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:1f:dd:3c:6e:c2:f8:30:97:f1:12:52:fb:
fb:16:f9:57:ec:8b:1d:bf:17:e0:06:f2:dc:a4:8c:
0d:96:8f:87:68:33:69:57:c5:f7:23:c6:64:14:79:
89:39:93:5c:d1:ef:3e:67:77:87:8f:bd:5a:b7:09:
4c:fe:5b:db:50:48:5f:50:ad:64:a2:62:12:1e:68:
56:e5:16:fc:ee:79:cd:43:76:62:22:9a:3c:ba:2e:
c3:38:3f:2f:cc:20:fc:78:06:12:92:94:0a:0c:f8:
dc:78:82:90:6e:9a:a7:ac:47:50:d9:dc:8a:1a:2a:
12:ab:02:45:8f:ad:39:4d:a4:92:96:a4:7d:e0:5e:
c9:85:a0:87:11:01:ef:3b:38:b5:22:93:1c:74:92:
8f:d6:ec:f3:0c:12:6a:28:8b:bc:16:73:fc:00:75:
47:c0:ab:db:28:05:a8:a5:20:29:2a:74:ce:e5:30:
f5:bc:35:c0:bb:1f:5b:7a:9e:aa:9b:f2:33:5a:72:
c7:8f:5a:ca:ee:bb:ce:43:b6:0b:e6:db:44:97:a5:
68:a3:47:df:55:31:c7:aa:a9:27:84:1e:a7:dd:ab:
9e:be:29:e3:de:87:d7:9a:8f:35:95:22:60:4a:d6:
79:bd:b2:a5:15:16:01:a0:ca:25:0e:1d:2d:ad:92:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:DA:A1:40:EF:30:10:8E:17:F4:15:42:25:82:E6:1C:DE:7B:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd50:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:2f:6a:17:3a:72:c5:23:e2:d1:b2:70:0b:b4:97:f2:ae:64:
21:c9:e7:2d:68:a3:cd:d7:40:6e:c2:e6:0f:7d:4a:c0:60:aa:
74:a6:2f:76:3c:87:ad:d7:6c:f6:36:d1:db:f5:df:f9:6b:28:
3d:03:0b:8c:c4:36:5a:c4:20:0c:eb:da:0b:c5:a2:22:f2:c4:
d7:f8:e5:10:92:74:c2:00:8e:5c:30:bb:fe:2c:15:da:81:86:
88:be:39:2b:50:5d:95:48:49:da:6f:76:a6:a0:97:e8:f1:6d:
a4:cb:4a:e0:1d:0f:1d:b8:76:40:a0:b3:cf:82:72:04:9e:9c:
00:af:4d:bb:9a:c0:ff:42:30:93:3b:63:d4:aa:dd:8e:64:be:
de:ad:ab:d8:06:82:f1:2d:d7:0c:61:3e:7f:cf:ca:9c:3d:98:
01:67:7d:4f:b2:ae:b8:cc:04:7a:a4:01:02:bf:01:14:19:a5:
1c:95:d1:cc:81:29:35:da:9d:aa:7a:0e:df:5e:72:86:28:18:
d3:e5:8a:85:1d:33:52:85:33:3b:e8:f1:9b:57:cf:62:4f:8e:
cf:2a:f4:64:95:0a:c7:b1:6c:8c:51:05:84:5e:82:83:68:78:
de:4f:3d:f1:63:4b:69:e6:49:fb:5a:26:af:db:f1:c8:f5:6c:
24:ab:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:25 2025 by rpki-client