
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa
File: 815ab228-9852-3ed0-9895-370b10b598b0.roa (raw, json)
Hash identifier: g1dxbTJcfG8SpHGOnvGcFnRrZgp9gYH1JUrMKYMiL/0=
Subject key identifier: 97:BD:20:0B:D4:CF:FE:22:36:57:9A:11:82:34:01:25:74:9F:54:CD
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F4328584B838216FB857104AEF051BAE0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa
Signing time: Tue 14 Oct 2025 01:00:30 +0000
ROA not before: Tue 14 Oct 2025 01:00:30 +0000
ROA not after: Mon 12 Jan 2026 02:00:30 +0000
asID: 400196
IP address blocks: 2607:8240:f11a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:83:82:16:fb:85:71:04:ae:f0:51:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Oct 14 01:00:30 2025 GMT
Not After : Jan 12 02:00:30 2026 GMT
Subject: CN=561edccb-4d01-4e06-99a0-b8efae8df23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:d3:37:b2:0e:ef:52:05:55:75:02:55:ec:
fc:ec:37:28:55:a1:a0:a4:7b:06:9d:4b:f1:d6:ff:
2d:c1:c5:8f:f2:5e:41:10:53:6b:ab:07:ca:44:2e:
79:63:7c:b7:1e:7b:b3:a0:d7:a4:ed:90:13:a6:f8:
8b:01:a9:1b:40:40:d7:9d:98:09:3a:05:07:a3:6e:
9e:91:09:4f:6f:6a:f0:1b:e0:35:25:6b:6f:9b:69:
b7:29:4a:67:34:b6:d1:53:01:93:60:68:d1:34:d6:
ab:96:b7:32:d5:2e:18:90:8d:fa:db:d1:f5:fc:cc:
85:a9:fb:bc:a4:44:d3:cb:44:41:21:d9:e4:a3:b1:
9f:e3:ca:a8:c2:74:73:9b:24:a8:87:46:44:5f:a2:
f6:7f:d4:dd:0f:f1:12:9e:25:2c:0e:f0:3b:d9:ca:
14:64:60:25:ca:a5:57:bd:73:e0:9a:09:a6:a1:37:
e9:10:20:91:af:39:d2:22:15:f0:6a:cd:05:60:d0:
48:0e:68:92:21:56:9b:e3:50:51:80:b9:15:a9:da:
76:9c:66:0d:9c:b0:d0:5a:e8:aa:43:e8:47:a5:67:
49:31:58:98:db:38:54:9d:30:65:71:f5:1d:e4:6f:
6c:07:14:89:de:f4:3e:93:fd:da:ef:79:42:eb:04:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BD:20:0B:D4:CF:FE:22:36:57:9A:11:82:34:01:25:74:9F:54:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8240:f11a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4b:cd:52:5e:0b:bf:11:5f:53:c5:b9:54:ae:09:35:66:cb:
8c:f3:64:f7:74:f7:e8:9f:0a:30:50:7a:f4:80:09:bf:4f:a5:
e8:ae:3e:6d:f4:c0:db:33:07:48:b4:5a:e9:5d:30:aa:24:85:
83:22:93:0c:f9:b7:5b:f4:e7:9a:0f:44:9d:54:85:f1:34:50:
cf:49:b3:e2:5a:ff:55:65:c3:ba:18:b1:64:8d:e2:17:92:ac:
9d:1f:02:49:55:3f:5c:8e:23:df:17:07:84:1e:95:92:2f:d4:
64:bf:ee:a5:2b:4a:b6:50:b5:8f:38:d9:42:77:6d:f6:9c:86:
b9:25:82:09:d4:2b:5a:33:3e:00:f1:bf:28:31:11:53:eb:bd:
60:07:d8:fe:01:1d:a1:a0:78:66:9f:77:28:36:90:fa:13:11:
13:15:bf:7f:ed:20:17:fc:94:28:b5:cc:d7:29:cc:54:2b:ec:
41:db:a4:25:73:53:03:3e:e0:60:82:c8:d4:af:bb:d5:e7:fb:
fa:7d:9c:db:72:f2:dc:38:ee:ac:71:65:8d:48:c0:54:15:20:
44:7b:02:6f:e3:86:80:79:37:20:0b:ee:61:2e:93:d0:be:34:
a8:6e:74:e3:8d:34:1e:3f:80:f7:b5:2b:d3:0e:cf:44:76:5f:
68:ba:ff:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDghb7hXEErvBRuuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk
NTYxZWRjY2ItNGQwMS00ZTA2LTk5YTAtYjhlZmFlOGRmMjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvHTN7IO71IFVXUCVez87DcoVaGgpHsGnUvx
1v8twcWP8l5BEFNrqwfKRC55Y3y3HnuzoNek7ZATpviLAakbQEDXnZgJOgUHo26e
kQlPb2rwG+A1JWtvm2m3KUpnNLbRUwGTYGjRNNarlrcy1S4YkI3629H1/MyFqfu8
pETTy0RBIdnko7Gf48qownRzmySoh0ZEX6L2f9TdD/ESniUsDvA72coUZGAlyqVX
vXPgmgmmoTfpECCRrznSIhXwas0FYNBIDmiSIVab41BRgLkVqdp2nGYNnLDQWuiq
Q+hHpWdJMViY2zhUnTBlcfUd5G9sBxSJ3vQ+k/3a73lC6wSdfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJe9IAvUz/4iNleaEYI0ASV0n1TNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvODE1YWIyMjgtOTg1Mi0z
ZWQwLTk4OTUtMzcwYjEwYjU5OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgeCQPEa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGhLzVJeC78RX1PFuVSuCTVmy4zzZPd09+ifCjBQevSACb9Ppeiu
Pm30wNszB0i0WuldMKokhYMikwz5t1v055oPRJ1UhfE0UM9Js+Ja/1Vlw7oYsWSN
4heSrJ0fAklVP1yOI98XB4QelZIv1GS/7qUrSrZQtY842UJ3bfachrklggnUK1oz
PgDxvygxEVPrvWAH2P4BHaGgeGafdyg2kPoTERMVv3/tIBf8lCi1zNcpzFQr7EHb
pCVzUwM+4GCCyNSvu9Xn+/p9nNty8tw47qxxZY1IwFQVIER7Am/jhoB5NyAL7mEu
k9C+NKhudOONNB4/gPe1K9MOz0R2X2i6/9k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:47 2025 by rpki-client