
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa
File: ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa (raw, json)
Hash identifier: G5zJm66r/D23KZWcLWJA1VkCNV34v9MWnUUkZ54bnfM=
Subject key identifier: DE:56:84:0E:6F:BC:3E:4F:99:43:6D:AD:10:CD:E5:A9:C8:BD:40:C7
Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc
Certificate serial: 010D0C9F4328584B84E77CBEDF19BC5C2C59F240
Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa
Signing time: Tue 14 Oct 2025 13:00:37 +0000
ROA not before: Tue 14 Oct 2025 13:00:37 +0000
ROA not after: Mon 12 Jan 2026 14:00:37 +0000
asID: 395842
IP address blocks: 2607:8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:84:e7:7c:be:df:19:bc:5c:2c:59:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc
Validity
Not Before: Oct 14 13:00:37 2025 GMT
Not After : Jan 12 14:00:37 2026 GMT
Subject: CN=58401d27-6284-4368-9c0d-378084f36658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:2d:32:f4:e5:6b:c5:67:7d:08:8c:78:95:
ce:be:00:db:39:10:ec:f2:13:a7:ca:9e:34:dd:d6:
b2:19:4f:0e:26:cc:b1:04:74:28:6a:a5:cf:ae:0b:
6f:05:46:cf:3c:93:37:dd:b3:77:9f:df:bf:38:83:
7d:68:80:1b:dd:56:a6:4a:d5:d3:55:d7:05:be:15:
a9:f9:30:6b:b0:6a:20:82:65:ce:37:72:5e:12:dd:
d0:ab:99:46:84:5f:19:ba:fd:44:cd:df:cc:92:93:
cf:19:50:b6:7a:1a:44:a6:67:4f:70:c5:c3:57:80:
8c:52:ef:34:c9:1c:63:ad:ce:8e:1e:43:d3:24:a6:
3f:71:23:ef:50:23:c6:40:8d:0a:8d:d6:4a:3a:8e:
da:e3:cd:80:35:10:26:96:be:83:3b:9c:6d:38:f2:
f8:56:24:31:98:a7:32:d6:d0:16:ec:c8:b4:85:ac:
4f:da:3a:90:df:88:38:b6:02:8a:aa:a3:ec:2c:2f:
f1:86:65:dc:f9:62:f3:fb:92:1c:43:0b:c7:6d:5f:
90:34:ba:e4:fc:09:bc:60:13:0c:b1:3a:77:3f:af:
d0:57:65:2f:72:13:10:d2:59:44:4a:e7:20:4a:97:
2b:99:25:f1:0c:69:e6:83:0b:de:2d:a5:af:44:be:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:84:0E:6F:BC:3E:4F:99:43:6D:AD:10:CD:E5:A9:C8:BD:40:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl
X509v3 Authority Key Identifier:
keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:76:8b:0a:4b:f7:60:01:93:f4:91:10:03:68:db:57:1e:e5:
7b:34:69:55:58:04:52:20:64:96:6f:83:5b:5f:3a:5a:fb:93:
4f:1c:b9:10:35:bb:ac:00:1f:d1:9b:c3:21:8b:7d:d7:aa:1b:
5d:fc:46:7e:a0:f2:22:3e:73:0f:e3:44:c5:bf:a4:02:c3:cf:
81:d6:53:af:55:54:40:12:54:69:b8:bf:06:66:0f:8d:a1:a7:
6e:11:8e:23:c6:e6:5a:27:a9:ae:da:71:d3:97:ec:30:dd:9b:
6c:a2:34:f1:29:fb:55:4b:27:5a:4a:93:be:a4:77:dc:cc:aa:
ce:0f:42:76:62:e6:5d:c1:b6:1e:db:bf:a7:fa:23:b8:8e:aa:
69:24:a2:9c:69:8b:f9:b4:3c:e4:00:02:31:d1:e9:7f:33:ad:
bd:a4:89:c5:58:04:fb:5b:1d:69:26:e5:e4:52:d6:b9:ba:52:
53:78:45:61:52:9a:8d:06:3f:3a:29:03:fe:51:2d:a2:55:e8:
e5:21:ad:9c:5e:d3:f8:23:29:43:18:cb:cb:a6:1e:ed:7a:05:
d4:21:a6:9e:56:37:c3:9d:14:90:74:78:9c:dc:96:c0:48:31:
ca:04:25:32:f1:3e:1b:d8:30:be:09:f3:81:9c:dc:b3:6a:67:
bb:2e:8c:23
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE53y+3xm8XCxZ8kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMz
NWRjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
NTg0MDFkMjctNjI4NC00MzY4LTljMGQtMzc4MDg0ZjM2NjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl68tMvTla8VnfQiMeJXOvgDbORDs8hOnyp40
3dayGU8OJsyxBHQoaqXPrgtvBUbPPJM33bN3n9+/OIN9aIAb3VamStXTVdcFvhWp
+TBrsGoggmXON3JeEt3Qq5lGhF8Zuv1Ezd/MkpPPGVC2ehpEpmdPcMXDV4CMUu80
yRxjrc6OHkPTJKY/cSPvUCPGQI0KjdZKOo7a482ANRAmlr6DO5xtOPL4ViQxmKcy
1tAW7Mi0haxP2jqQ34g4tgKKqqPsLC/xhmXc+WLz+5IcQwvHbV+QNLrk/Am8YBMM
sTp3P6/QV2UvchMQ0llESucgSpcrmSXxDGnmgwveLaWvRL4zFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFN5WhA5vvD5PmUNtrRDN5anIvUDHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFm
ZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvZmY2YjBhNDMtMWQ0OS0z
MzJiLTlhMmUtNGQyNWU5ZWVhNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjYxZmRiN2YtNjY1NC00MjI2LWI5
MTYtZjkxNWQ1ZTMzNWRjL2I2MWZkYjdmLTY2NTQtNDIyNi1iOTE2LWY5MTVkNWUz
MzVkYy5jcmwwHwYDVR0jBBgwFoAUFZmiRDC1gBRmr8wtdgwnQKf6ACYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1
ZDVlMzM1ZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcIwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC/dosKS/dgAZP0kRADaNtXHuV7NGlVWARSIGSWb4NbXzpa+5NPHLkQ
NbusAB/Rm8Mhi33Xqhtd/EZ+oPIiPnMP40TFv6QCw8+B1lOvVVRAElRpuL8GZg+N
oaduEY4jxuZaJ6mu2nHTl+ww3ZtsojTxKftVSydaSpO+pHfczKrOD0J2YuZdwbYe
27+n+iO4jqppJKKcaYv5tDzkAAIx0el/M629pInFWAT7Wx1pJuXkUta5ulJTeEVh
UpqNBj86KQP+US2iVejlIa2cXtP4IylDGMvLph7tegXUIaaeVjfDnRSQdHic3JbA
SDHKBCUy8T4b2DC+CfOBnNyzame7Lowj
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:57 2025 by rpki-client