
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa
File: 9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa (raw, json)
Hash identifier: 1h4bB7m0MDPw5SwR0vYwOOEBUY36ayBrFxa2XtgZXwQ=
Subject key identifier: 1B:FF:B4:F9:7D:E0:A9:A7:AA:28:F9:ED:BC:EB:EE:6F:14:B8:29:43
Certificate issuer: /CN=78f2a37d-9624-4031-908c-08f70f9830f9
Certificate serial: 010D0C9F4328584B9E07BD10025C9C6F37A4DE80
Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 0
IP address blocks: 2001:504:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:bd:10:02:5c:9c:6f:37:a4:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=cdef497f-e41d-407a-bbb3-30cda9a77649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:d6:79:85:9e:34:89:a9:04:1c:fe:3f:3b:
3a:13:83:9e:7c:14:19:05:69:d6:06:56:1f:23:1f:
e0:dc:0b:f5:47:cb:04:32:01:18:07:7a:20:be:18:
76:4c:3a:5a:b0:17:6f:c5:31:11:6e:8a:5d:93:e9:
5b:1c:ad:6b:1f:27:93:1c:10:75:25:03:62:bf:5c:
22:79:0b:58:02:df:99:bd:7a:39:19:7a:0b:a4:da:
15:c3:46:7c:76:11:10:7b:ea:ae:f1:36:45:ff:39:
41:24:50:89:c0:8c:ec:a0:3c:22:2a:15:0c:12:da:
76:68:e3:fa:a4:43:da:b7:a6:2d:16:1e:da:36:dd:
03:69:ab:93:2a:ad:11:dd:e7:d0:b4:cc:b1:7b:39:
f1:51:d3:f8:26:65:17:7f:81:b2:c9:d3:59:45:3b:
04:95:34:22:19:c4:14:c7:9d:74:5d:16:e9:11:0d:
34:d6:67:62:db:a2:91:23:c9:68:68:1c:67:ea:74:
f7:5b:51:9b:4e:cd:57:ef:bb:47:4a:e7:fe:01:71:
27:0d:e4:f2:4e:2e:17:5a:44:de:de:26:9a:ad:81:
70:35:b9:3f:24:40:0f:7f:46:0d:43:0e:00:2d:24:
12:40:19:dd:1a:c3:49:4d:c9:47:f8:7b:ea:ed:8a:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FF:B4:F9:7D:E0:A9:A7:AA:28:F9:ED:BC:EB:EE:6F:14:B8:29:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
X509v3 Authority Key Identifier:
keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:b2:04:fe:89:29:05:32:4a:a6:4c:a7:21:d8:b4:4f:37:4c:
d5:fa:d6:b9:1d:82:7a:09:5a:3a:0d:f4:f9:a2:ce:a8:f1:e7:
18:73:a6:d9:d5:97:af:6f:09:27:57:bf:44:ad:60:93:58:6f:
4c:57:2d:13:90:89:cb:58:b4:92:4e:ff:21:7e:9b:f0:d7:2a:
d4:b7:ce:eb:7e:92:a0:a0:97:7b:33:22:8d:ef:02:56:ec:13:
a6:fd:83:ff:32:52:6e:5e:ac:4c:fb:11:9c:eb:48:af:f9:20:
06:c6:37:76:a3:5d:bd:1f:3e:37:32:24:82:c8:c4:56:b5:da:
8a:21:65:6a:28:49:bc:c6:94:2e:36:56:25:0c:fd:52:c4:79:
0a:fc:b1:d0:3a:41:a4:10:5a:7b:f9:d6:3d:5e:cc:ea:7e:b3:
e9:b9:81:9f:90:74:ef:60:b8:44:51:f5:1c:5a:fc:5d:54:3a:
c4:1f:75:dd:22:5a:8b:75:88:4a:a0:fc:41:08:9d:58:99:fb:
60:ee:f0:a1:d1:c8:a7:61:74:e7:3d:eb:5c:f4:3f:7b:0c:ef:
d4:2e:1e:fd:97:8c:1f:3c:67:b6:8f:bc:99:2f:dc:af:a3:06:
54:53:73:82:37:6b:c3:c3:19:45:59:4e:3a:a4:54:3d:f7:1f:
6e:b7:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:41 2025 by rpki-client