
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/56c3a076-79c7-3a65-9578-377f2fac4873.roa
File: 56c3a076-79c7-3a65-9578-377f2fac4873.roa (raw, json)
Hash identifier: zpH6cwFenNN+UtXn4IBNqogSI2xFMpIhYDQOA7kGqsc=
Subject key identifier: 6B:F5:3B:D6:C9:C5:F5:B2:F3:06:19:96:A2:CE:7B:71:17:F3:C3:E8
Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial: 010D0C9F4328584B9E07D044DCFF61DF007832E0
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/56c3a076-79c7-3a65-9578-377f2fac4873.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 19905
IP address blocks: 2600:1800::/28 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:d0:44:dc:ff:61:df:00:78:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=7b5f22d5-f8c1-4ebe-9654-53f9ac2ed6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:0a:1c:d8:94:24:eb:b9:d1:e6:c2:02:a4:
57:73:c0:5f:cd:e0:62:6e:49:6f:41:36:5e:e0:40:
c2:a5:70:75:26:b7:ab:d6:14:51:95:c1:b0:c5:c5:
96:7a:31:90:4a:50:f1:53:25:53:d5:7a:48:75:bf:
96:72:1c:1e:ed:22:4b:96:a7:8e:1b:d6:ad:6a:1a:
27:8c:40:17:67:c3:41:c5:9f:78:a1:d0:a1:93:76:
50:b7:c4:52:ff:8a:17:e4:95:dc:3b:d4:2a:71:d5:
1e:ec:f2:f7:13:5e:10:cf:18:e2:59:f2:d7:08:4c:
bc:f9:c8:ba:4c:09:9b:49:49:d7:23:af:77:81:06:
73:fd:a1:53:d9:29:08:58:b3:04:de:60:71:6b:c0:
78:3a:fd:f5:d2:ef:2d:66:b0:98:f7:7f:ee:4e:5d:
e6:36:a8:61:20:b1:d6:6b:3f:19:e3:9c:14:9c:8f:
cb:5a:24:e7:cb:f1:42:24:58:72:32:63:16:f4:8a:
c2:0e:c7:73:64:cf:f4:1f:1a:bb:4a:48:ba:e0:83:
47:76:24:d3:e7:4e:22:b3:0e:e7:3f:53:25:5c:85:
b4:2d:3d:51:4f:ff:70:b1:70:c9:3b:5e:e5:fe:df:
38:3b:a2:a1:19:9a:b9:6b:8a:37:3a:07:4d:86:9c:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:3B:D6:C9:C5:F5:B2:F3:06:19:96:A2:CE:7B:71:17:F3:C3:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/56c3a076-79c7-3a65-9578-377f2fac4873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
X509v3 Authority Key Identifier:
keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1800::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d2:eb:45:bf:f4:3f:f0:b0:3f:f8:d2:95:98:10:66:0b:f8:
0d:eb:ea:a2:34:f3:8e:ba:24:04:64:c8:71:1d:6d:4c:34:58:
8c:58:05:a0:25:bb:a2:5c:cb:fe:01:49:20:fd:d6:eb:c3:1d:
3f:a9:7c:04:e8:d7:b2:ce:6b:13:e9:25:47:e5:62:bf:1d:a2:
fe:82:a6:2c:59:80:1c:4a:50:b9:f1:a6:f2:9a:61:6e:ed:0d:
b1:66:5e:9b:d3:4d:cb:85:c0:5a:b7:b3:a4:ba:ec:e6:1b:a4:
9f:d0:23:52:1e:be:1b:62:46:83:1d:16:ce:ef:e4:5e:a9:db:
ff:17:50:e2:c5:50:92:b5:16:e1:22:c3:4d:60:3d:62:b6:3b:
83:1f:47:66:ac:8d:a9:08:41:06:0b:24:6a:71:94:a8:41:d3:
fe:72:5a:8f:ff:25:08:57:0c:21:ba:12:8c:c1:85:9f:94:36:
56:46:5f:35:3d:cc:a9:3c:25:b0:db:b8:bf:8d:87:bc:25:26:
a8:43:5f:1f:97:5a:cd:0e:0e:73:42:b5:79:9c:69:80:15:96:
e1:cc:97:9a:41:81:d4:fa:44:ee:bb:53:2e:f9:64:14:a7:de:
49:2c:2b:30:20:5c:3f:b0:6d:3e:e6:64:3f:20:39:a9:b3:99:
8d:b3:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:59:47 2025 by rpki-client