
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
File: b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json)
Hash identifier: l9dctdbJ31ENjH4LOXQCU3rD75yRSyVQTwmp5cQrV+w=
Subject key identifier: 46:D1:B6:EE:2C:B9:5F:3C:18:A8:00:BD:C5:AC:D2:A5:92:9E:0B:15
Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
Certificate serial: 010D0C9F4328584BB45D1988FB3E2873BF1F5FC0
Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 53507
IP address blocks: 2604:56c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:19:88:fb:3e:28:73:bf:1f:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=c961c898-5b03-427b-a66b-ae95a5e3abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:2c:b8:d0:e9:30:9b:82:1c:6a:93:0f:e3:
4e:a3:86:23:50:b8:ae:a9:69:3d:72:70:f4:f9:ee:
d9:36:fb:27:d3:59:17:e8:36:fe:fc:60:6e:3c:01:
56:f7:f4:6d:87:17:d8:b2:6a:97:b1:db:41:e5:2b:
8c:64:cb:90:e3:e7:bd:85:2a:1b:d5:97:aa:d1:55:
7b:5e:2c:eb:53:06:3d:b3:d3:12:c0:bf:52:cc:75:
95:93:c6:9a:22:4b:16:0e:22:85:01:06:2e:35:42:
80:ad:6e:2d:1f:02:ab:79:8b:19:94:39:a4:e1:98:
f2:f5:08:21:ab:51:63:aa:20:a7:68:b2:58:fd:50:
37:6b:30:a4:fb:a5:18:53:d9:7c:70:1a:22:8c:5d:
9d:a5:9f:e6:f6:47:7b:c7:32:ef:ff:3e:1d:79:cd:
ab:3f:17:3b:74:73:a1:e6:19:f5:40:ea:c2:13:30:
1e:61:54:81:b8:7c:bc:54:88:ef:2b:a1:c1:b2:a0:
08:90:dc:71:16:f1:3a:a2:aa:1f:c8:8a:0e:2a:22:
11:63:d6:b7:ee:02:87:aa:e7:4f:ef:78:ed:38:41:
ab:b6:59:ed:bc:0a:70:24:d5:ad:aa:ba:3c:eb:81:
d3:41:af:6e:ce:8c:b7:ee:87:74:2e:46:2b:14:e5:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:B6:EE:2C:B9:5F:3C:18:A8:00:BD:C5:AC:D2:A5:92:9E:0B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl
X509v3 Authority Key Identifier:
keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:56c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:04:ba:68:11:c6:55:5e:aa:93:8b:6a:22:0d:81:38:9e:7d:
28:d2:e0:4d:e8:c9:66:c3:57:bd:44:84:40:cf:5f:9b:82:98:
a7:39:22:ba:b2:61:91:e3:84:cc:ba:d2:a6:ac:5c:78:35:58:
7c:de:4d:7e:f8:d5:07:49:58:87:92:25:9c:b8:96:a4:fd:85:
22:dc:b5:a1:7e:1e:02:52:cc:56:c1:2a:c3:14:de:96:1f:88:
8d:c7:fa:84:64:b5:9d:f5:be:0c:ec:8b:13:bf:2e:3f:61:a3:
34:5d:d2:07:8f:21:8a:89:fb:fa:97:16:56:f3:ea:e4:8a:6b:
4c:c5:80:e1:33:bf:f1:d2:7c:9a:29:1d:e6:81:b5:8b:a8:8e:
20:08:08:ac:1e:c3:4d:97:4a:59:7c:df:7d:20:f5:d1:77:fe:
99:80:8b:45:94:7e:09:14:bf:ac:07:93:91:15:79:93:95:c0:
d6:3f:0c:85:7a:06:fe:52:52:13:06:03:3a:7c:e4:be:df:59:
dc:aa:d9:12:52:c8:83:d6:f2:78:8b:fb:17:ea:98:a7:53:67:
1d:a4:a6:22:41:77:56:1f:e1:5b:f1:16:7c:e4:e0:48:a3:74:
da:0f:9d:a9:8a:d3:22:72:6a:2a:d4:9b:8c:7e:32:70:21:9a:
aa:ea:46:bf
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu0XRmI+z4oc78fX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl
NmU0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
Yzk2MWM4OTgtNWIwMy00MjdiLWE2NmItYWU5NWE1ZTNhYmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VMsuNDpMJuCHGqTD+NOo4YjULiuqWk9cnD0
+e7ZNvsn01kX6Db+/GBuPAFW9/RthxfYsmqXsdtB5SuMZMuQ4+e9hSob1Zeq0VV7
XizrUwY9s9MSwL9SzHWVk8aaIksWDiKFAQYuNUKArW4tHwKreYsZlDmk4Zjy9Qgh
q1FjqiCnaLJY/VA3azCk+6UYU9l8cBoijF2dpZ/m9kd7xzLv/z4dec2rPxc7dHOh
5hn1QOrCEzAeYVSBuHy8VIjvK6HBsqAIkNxxFvE6oqofyIoOKiIRY9a37gKHqudP
73jtOEGrtlntvApwJNWtqro864HTQa9uzoy37od0LkYrFOXuawIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEbRtu4suV88GKgAvcWs0qWSngsVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm
MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvYjlhMjZjZjEtZTJhNy0z
MDVkLThhYjgtNzFlMDRiNDQ0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3
ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2
ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk
NjE5NmU2ZTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRWwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBYBLpoEcZVXqqTi2oiDYE4nn0o0uBN6Mlmw1e9RIRAz1+bgpinOSK6
smGR44TMutKmrFx4NVh83k1++NUHSViHkiWcuJak/YUi3LWhfh4CUsxWwSrDFN6W
H4iNx/qEZLWd9b4M7IsTvy4/YaM0XdIHjyGKifv6lxZW8+rkimtMxYDhM7/x0nya
KR3mgbWLqI4gCAisHsNNl0pZfN99IPXRd/6ZgItFlH4JFL+sB5ORFXmTlcDWPwyF
egb+UlITBgM6fOS+31ncqtkSUsiD1vJ4i/sX6pinU2cdpKYiQXdWH+Fb8RZ85OBI
o3TaD52pitMicmoq1JuMfjJwIZqq6ka/
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:31:46 2025 by rpki-client