
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa
File: a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa (raw, json)
Hash identifier: XOF2uT7KZLE/n3fuZfUdoiSRc9zH6qfKx5+YZORXj9w=
Subject key identifier: 22:8F:95:40:29:C8:32:B4:7B:0D:B9:99:39:09:F7:F1:01:DA:8A:49
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584B7F524281D1604E2AAFFD0500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 19115
IP address blocks: 2607:f098::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:42:81:d1:60:4e:2a:af:fd:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=124bda95-00d6-4361-ab16-937e7dd8656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:b9:46:76:3a:a8:b0:c4:38:43:e9:d8:90:
ea:00:83:b4:78:4c:a1:73:d8:7f:ce:b2:4b:ec:db:
53:a5:93:34:66:5c:fc:52:85:0f:46:a8:90:4f:71:
15:3c:8e:93:2e:25:c1:a0:ec:04:36:d8:76:49:65:
7d:74:a3:dc:9b:4f:41:65:4f:7f:cb:08:eb:87:04:
36:51:a3:c8:a0:d5:dd:30:06:6e:73:7d:de:93:6f:
10:28:e8:75:40:e4:8b:a2:7e:e7:8d:26:ae:e4:57:
57:b9:d9:ca:06:81:b1:da:cf:ce:fd:10:1c:ee:a3:
ce:0e:42:c4:c2:e7:1e:5c:fb:93:82:89:8c:1b:1a:
fe:bf:90:f7:e2:17:88:96:a5:d0:32:6a:c8:c0:d2:
20:5f:9f:0c:d4:77:45:80:e0:97:fd:63:a0:21:21:
47:bf:7f:38:ad:0a:ce:22:f7:42:a7:35:31:ac:ac:
8d:da:9d:e9:08:a3:64:e4:19:b3:06:3f:9c:98:92:
e7:21:35:9e:87:de:06:37:bc:8f:95:9d:72:1c:35:
02:8d:83:a0:9c:a0:6a:74:e0:d0:7d:02:ba:8a:f6:
27:cf:cb:e9:3d:10:ae:20:79:98:63:12:32:72:c9:
5b:18:8f:81:6d:6b:a9:32:22:84:a6:fc:6e:6a:d2:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:95:40:29:C8:32:B4:7B:0D:B9:99:39:09:F7:F1:01:DA:8A:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f098::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:7c:ed:ca:d7:f5:c2:6d:7f:b4:53:45:9e:97:26:b1:ca:fe:
db:ea:85:e1:d3:2e:4c:e7:1e:4e:58:59:ec:4a:8f:b6:26:fa:
b7:b7:0c:1a:6d:19:7b:68:ba:8e:45:3a:26:4b:17:77:77:8b:
ac:8d:ee:20:aa:85:0d:ba:49:66:c9:e0:86:52:34:cf:17:31:
5f:67:4d:7a:99:ba:0f:6b:85:c5:20:36:a1:0a:6a:43:cd:ad:
3b:fa:8c:bc:5a:ea:48:60:5d:04:28:01:63:b3:04:b2:e7:b1:
51:76:77:3e:59:b6:43:ae:d7:c6:d3:11:39:23:be:fa:f8:8b:
e7:13:2e:26:0d:b9:2b:07:4f:28:a4:e7:f3:73:7d:02:ff:cb:
a7:35:e3:18:57:49:7a:c4:8f:60:85:93:08:f1:9b:7f:b7:97:
29:b2:e5:2a:e6:8a:08:96:4c:ea:ff:78:c9:7a:22:24:50:6c:
67:fb:26:7d:96:66:67:4b:18:9c:61:41:53:74:fb:e1:e2:60:
3b:53:c9:d0:5a:47:79:a9:62:00:3c:8f:0a:23:88:c4:e8:49:
a8:2e:f1:a0:03:76:73:41:f2:fc:fd:e5:3b:45:db:f4:17:c5:
de:96:f7:36:bb:56:28:44:b1:10:2e:1a:81:89:38:c5:f1:ca:
ca:69:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:34:01 2025 by rpki-client