
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
File: 0bec5560-5f61-3939-92dc-d3500f8e8095.roa (raw, json)
Hash identifier: +hjWeOizmVcbu0SIMUmwyHS0b4DZY6zs/2vtSyNNTig=
Subject key identifier: B4:65:84:2F:1C:D8:23:09:BE:F3:FB:0A:37:32:FE:02:34:94:7C:97
Certificate issuer: /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial: 010D0C9F4328584B13D6AB5C18834A7D64C7F480
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
Signing time: Thu 04 Sep 2025 01:00:33 +0000
ROA not before: Thu 04 Sep 2025 01:00:33 +0000
ROA not after: Wed 03 Dec 2025 02:00:33 +0000
asID: 16509
IP address blocks: 2602:fc8b:aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:13:d6:ab:5c:18:83:4a:7d:64:c7:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Validity
Not Before: Sep 4 01:00:33 2025 GMT
Not After : Dec 3 02:00:33 2025 GMT
Subject: CN=53dd74bf-8716-4e07-b678-9774aceb4f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:87:3f:dc:c9:51:00:7d:e6:b1:5b:45:2b:
18:28:f5:ac:34:b8:23:19:b0:6b:63:73:4b:a3:b8:
51:95:ab:61:04:89:0f:e7:13:83:50:ee:1c:c1:c4:
2b:86:f6:66:83:94:0c:32:76:54:76:0c:1b:63:ad:
67:8a:34:f2:54:1f:78:8c:18:cc:b0:49:b0:db:56:
7c:db:5e:86:ed:a7:10:ff:5b:a5:a3:34:24:19:2d:
28:70:1e:4e:4a:18:e1:f7:ff:04:e9:fd:85:bb:19:
51:9b:cf:e4:f6:00:1e:ac:a4:c9:1c:4e:3e:3a:f4:
17:75:3f:43:b5:bd:0d:68:89:66:0f:d9:e6:2c:63:
4b:c9:24:42:93:99:fc:22:7c:07:29:da:b6:be:51:
f9:cf:e6:fa:46:a4:37:4c:4e:5e:60:a6:f3:91:06:
75:bf:a7:e4:b3:c3:96:e9:f3:5a:31:db:19:e0:0b:
f9:92:66:b8:99:69:d6:c6:d4:cf:2a:9f:08:77:6f:
ba:e9:ee:3f:e6:39:5c:a9:de:eb:f2:bc:c2:66:34:
51:c6:21:8f:2e:63:8a:17:36:35:2a:2a:5d:97:f4:
01:1f:0a:44:9e:4c:bf:bc:dc:82:ba:31:5a:a0:61:
11:c1:39:fe:87:22:fe:6b:be:aa:6d:33:68:65:40:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:84:2F:1C:D8:23:09:BE:F3:FB:0A:37:32:FE:02:34:94:7C:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
X509v3 Authority Key Identifier:
keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc8b:aa::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:69:44:98:6c:dc:e6:0f:18:9a:bc:f4:8d:14:71:ed:d3:ff:
7a:93:2d:92:e4:12:ae:55:82:38:4f:bb:93:f8:ca:63:9e:30:
50:4a:fe:29:b5:7c:ef:75:15:68:45:0f:e5:40:80:7b:82:5e:
2f:23:d5:00:d3:21:5e:c9:1a:7d:f9:7a:5a:08:16:73:e3:a4:
cc:bd:a0:f9:bb:2d:f7:67:50:96:c4:77:49:6b:76:8d:a8:ee:
65:35:42:a7:ae:93:d2:16:6e:7a:5a:d9:cd:e3:0f:da:b6:a1:
f8:6c:c8:e7:90:58:f1:6e:03:67:09:6f:3c:ef:34:1c:0f:1d:
3c:45:19:a3:49:0d:e0:c8:4b:8b:68:ae:ff:28:93:a7:fb:33:
52:71:05:3d:41:c9:03:7e:7f:09:32:21:78:d0:f7:47:af:3b:
2f:36:63:e8:87:8c:e8:0e:d2:ed:3a:52:35:ff:96:81:7d:12:
89:25:84:78:5f:00:e5:8d:ca:b9:a5:d3:b7:03:eb:17:74:36:
d2:5e:7d:d7:0d:ab:98:28:73:b7:24:16:18:ea:5a:1e:40:57:
7b:af:ef:19:b9:dc:29:00:c6:4c:da:df:63:85:56:7f:7d:ee:
27:56:0a:83:38:61:22:6c:c1:f3:ef:4a:39:a0:65:1b:c4:47:
85:1a:fe:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsT1qtcGINKfWTH9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDdjYjE3ZDQtOTUwMi00ZDM4LWI1MWEtMDJhZTdiZjMx
MzdiMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
NTNkZDc0YmYtODcxNi00ZTA3LWI2NzgtOTc3NGFjZWI0ZjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusaHP9zJUQB95rFbRSsYKPWsNLgjGbBrY3NL
o7hRlathBIkP5xODUO4cwcQrhvZmg5QMMnZUdgwbY61nijTyVB94jBjMsEmw21Z8
216G7acQ/1ulozQkGS0ocB5OShjh9/8E6f2FuxlRm8/k9gAerKTJHE4+OvQXdT9D
tb0NaIlmD9nmLGNLySRCk5n8InwHKdq2vlH5z+b6RqQ3TE5eYKbzkQZ1v6fks8OW
6fNaMdsZ4Av5kma4mWnWxtTPKp8Id2+66e4/5jlcqd7r8rzCZjRRxiGPLmOKFzY1
Kipdl/QBHwpEnky/vNyCujFaoGERwTn+hyL+a76qbTNoZUDx+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLRlhC8c2CMJvvP7Cjcy/gI0lHyXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2Ni
MTdkNC05NTAyLTRkMzgtYjUxYS0wMmFlN2JmMzEzN2IvMGJlYzU1NjAtNWY2MS0z
OTM5LTkyZGMtZDM1MDBmOGU4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDdjYjE3ZDQtOTUwMi00ZDM4LWI1
MWEtMDJhZTdiZjMxMzdiLzA3Y2IxN2Q0LTk1MDItNGQzOC1iNTFhLTAyYWU3YmYz
MTM3Yi5jcmwwHwYDVR0jBBgwFoAUwH3zKRqRjc36N2MZ7igizrWINA4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2NiMTdkNC05NTAyLTRkMzgtYjUxYS0wMmFl
N2JmMzEzN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iwCq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKxpRJhs3OYPGJq89I0Uce3T/3qTLZLkEq5VgjhPu5P4ymOeMFBK
/im1fO91FWhFD+VAgHuCXi8j1QDTIV7JGn35eloIFnPjpMy9oPm7LfdnUJbEd0lr
do2o7mU1Qqeuk9IWbnpa2c3jD9q2ofhsyOeQWPFuA2cJbzzvNBwPHTxFGaNJDeDI
S4torv8ok6f7M1JxBT1ByQN+fwkyIXjQ90evOy82Y+iHjOgO0u06UjX/loF9Eokl
hHhfAOWNyrml07cD6xd0NtJefdcNq5goc7ckFhjqWh5AV3uv7xm53CkAxkza32OF
Vn997idWCoM4YSJswfPvSjmgZRvER4Ua/vY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:44 2025 by rpki-client