
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa
File: e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa (raw, json)
Hash identifier: r6y3h0lGmMM/S86rRZ+T4M7zCputL+Vu+FusyqkJ3P4=
Subject key identifier: DC:C9:07:28:41:24:80:FA:52:5E:DC:6A:D1:79:82:72:FD:47:68:3E
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F4328584BB88D1FEC92B9869B36EDFA00
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 31898
IP address blocks: 2602:fdaa:90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:1f:ec:92:b9:86:9b:36:ed:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=c2c3eac9-4278-4a4d-abbc-53ec7576558b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:44:d2:d1:ab:ad:08:d9:6f:f9:cd:00:3a:
e8:6e:3b:bd:2d:ee:02:be:ec:38:1a:f0:aa:c7:3a:
77:02:7f:fa:94:3d:39:e6:a8:98:cc:26:26:97:d0:
a3:5a:4d:88:17:db:83:34:65:b1:9e:83:79:d6:08:
b2:9d:88:25:14:a2:57:46:d4:c8:27:2c:af:28:de:
9a:29:6b:f9:9b:2d:0e:d7:6e:64:dd:3c:56:e5:02:
45:9d:6c:96:c7:04:a3:14:1c:f9:c7:05:fd:3c:54:
f0:d0:12:a0:2e:92:8b:35:ff:5d:95:88:f7:e0:e1:
b3:88:9f:dc:7c:59:d2:9d:ba:12:21:da:d7:44:74:
a4:07:88:62:76:14:7b:7c:78:d4:4e:91:3f:33:28:
0b:26:a8:30:04:9c:ec:c6:d9:be:af:cf:4f:8b:bc:
ae:bc:61:c5:6b:cc:a3:04:ed:45:c8:80:c5:ed:64:
d5:02:c6:9c:98:b3:77:07:74:88:28:f4:fc:eb:ea:
a8:8a:c8:97:3c:07:6f:02:a9:59:eb:38:f7:8e:2a:
4d:a3:af:68:61:32:5e:94:10:25:20:f9:84:68:22:
e4:bd:84:8d:5e:88:1b:6d:8d:cc:8f:23:2b:52:9c:
df:d2:e5:73:ac:5e:ed:b6:11:91:cf:dc:7c:1f:e7:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:07:28:41:24:80:FA:52:5E:DC:6A:D1:79:82:72:FD:47:68:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fdaa:90::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:98:f8:bb:79:f7:00:4f:95:6b:3f:ba:18:74:00:a7:9f:54:
79:3a:8c:59:48:c4:79:0d:2b:87:c3:ff:7b:23:60:0f:b7:f1:
e5:78:76:86:0c:c5:73:1a:5c:b8:00:19:0c:df:d6:74:96:1b:
b8:91:0e:a9:e4:b1:fe:10:c6:04:aa:c9:02:45:09:68:6c:19:
7a:13:54:2a:c2:84:8e:d4:12:14:97:44:0b:1b:dd:08:4f:25:
29:8c:6a:13:c8:6d:44:09:a7:8e:74:ad:96:3f:06:4c:15:ff:
f6:10:f6:9c:38:59:9a:c9:a0:7b:97:b0:cb:9f:28:5d:62:f6:
72:d6:72:79:52:6e:7f:f0:70:9b:d0:2b:86:3b:01:1e:fe:af:
8a:11:78:b0:04:55:2b:46:ce:c1:cb:07:0e:f2:01:1b:aa:19:
b6:22:ff:98:29:8c:08:83:b4:1b:c5:e7:bb:be:d7:ab:97:77:
be:72:c9:56:39:9d:a6:cb:f2:c3:9c:c5:ec:a0:1b:36:fb:db:
9f:43:0f:31:17:c6:a4:4c:1b:8b:aa:e5:ca:db:14:31:eb:19:
f3:37:27:5d:aa:55:6c:5d:84:a4:8e:da:22:b7:62:9c:71:b2:
82:be:30:46:4b:da:da:8d:b4:94:d1:ac:fd:24:82:33:47:69:
17:7b:0c:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jR/skrmGmzbt+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
YzJjM2VhYzktNDI3OC00YTRkLWFiYmMtNTNlYzc1NzY1NThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPNE0tGrrQjZb/nNADrobju9Le4Cvuw4GvCq
xzp3An/6lD055qiYzCYml9CjWk2IF9uDNGWxnoN51giynYglFKJXRtTIJyyvKN6a
KWv5my0O125k3TxW5QJFnWyWxwSjFBz5xwX9PFTw0BKgLpKLNf9dlYj34OGziJ/c
fFnSnboSIdrXRHSkB4hidhR7fHjUTpE/MygLJqgwBJzsxtm+r89Pi7yuvGHFa8yj
BO1FyIDF7WTVAsacmLN3B3SIKPT86+qoisiXPAdvAqlZ6zj3jipNo69oYTJelBAl
IPmEaCLkvYSNXogbbY3MjyMrUpzf0uVzrF7tthGRz9x8H+entwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNzJByhBJID6Ul7catF5gnL9R2g+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvZTM4YzViMmMtM2FjNS0z
MDk1LTljNjYtYjE0YzE1YjRhYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgCQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH2Y+Lt59wBPlWs/uhh0AKefVHk6jFlIxHkNK4fD/3sjYA+38eV4
doYMxXMaXLgAGQzf1nSWG7iRDqnksf4QxgSqyQJFCWhsGXoTVCrChI7UEhSXRAsb
3QhPJSmMahPIbUQJp450rZY/BkwV//YQ9pw4WZrJoHuXsMufKF1i9nLWcnlSbn/w
cJvQK4Y7AR7+r4oReLAEVStGzsHLBw7yARuqGbYi/5gpjAiDtBvF57u+16uXd75y
yVY5nabL8sOcxeygGzb7259DDzEXxqRMG4uq5crbFDHrGfM3J12qVWxdhKSO2iK3
YpxxsoK+MEZL2tqNtJTRrP0kgjNHaRd7DJ0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:53 2025 by rpki-client