
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa
File: 9012ed63-878a-3814-ab32-db7d7578b57a.roa (raw, json)
Hash identifier: ZCuDyGOYjqvOSK8vt1inSqtmLc+X83PMBCByv8tEz1U=
Subject key identifier: 5E:F8:95:89:FD:B9:4B:AA:3C:C9:7E:43:63:28:E6:06:36:8F:0A:62
Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial: 010D0C9F4328584AE4611B738BC8DA3D69FFBCB0
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa
Signing time: Mon 18 Aug 2025 01:00:33 +0000
ROA not before: Mon 18 Aug 2025 01:00:33 +0000
ROA not after: Sun 16 Nov 2025 02:00:33 +0000
asID: 16509
IP address blocks: 2620:20:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e4:61:1b:73:8b:c8:da:3d:69:ff:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
Validity
Not Before: Aug 18 01:00:33 2025 GMT
Not After : Nov 16 02:00:33 2025 GMT
Subject: CN=dfc731a7-34fc-46a3-b521-c6bba9bc5d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:5b:be:43:20:80:23:b6:cf:ac:3a:96:f4:
ad:2b:a5:13:8d:b6:55:78:8a:42:38:e1:38:41:25:
ae:98:0d:c3:1d:68:81:ce:b5:53:5d:c0:b7:87:1c:
45:38:cb:da:2d:35:08:30:74:0c:78:b0:b6:3b:54:
4f:c8:12:6b:84:6c:5d:7d:b9:36:e6:06:37:d6:93:
6b:0e:02:e3:f8:fe:bf:5d:b2:5d:17:ac:83:1e:3d:
55:ca:ca:68:f2:77:2c:91:ba:c1:11:f7:a8:0c:e7:
ac:87:e4:02:a9:20:33:8f:af:36:0f:52:42:30:d2:
8f:37:72:25:54:ec:28:20:f0:31:6f:ed:19:36:ee:
f3:a4:91:de:64:0c:19:f0:21:e4:45:f4:9d:bd:9b:
71:59:b9:6a:04:fc:78:0b:e0:29:5f:cf:af:0d:f2:
2d:fb:f3:97:d4:7f:d9:86:b2:90:7b:84:5f:d0:ff:
76:7c:75:d5:0c:65:76:91:ee:af:65:67:a7:18:97:
9a:6a:18:85:26:f2:5e:8d:fc:21:50:13:dc:ae:ed:
61:6d:de:8c:7a:a3:f4:98:66:39:88:32:c5:0d:e2:
3b:31:06:a2:ab:03:fe:a1:11:00:98:97:1b:dd:24:
d6:2f:89:43:b1:46:3e:13:bf:22:32:1e:9a:3c:20:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:95:89:FD:B9:4B:AA:3C:C9:7E:43:63:28:E6:06:36:8F:0A:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
X509v3 Authority Key Identifier:
keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:20:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:97:b3:00:48:49:38:29:73:07:5e:1f:70:a8:3c:c9:14:5d:
35:08:80:88:9d:ba:e6:a4:84:cf:df:70:d4:72:7b:f3:db:62:
40:fb:d6:83:3a:0b:a3:94:18:bd:c0:f7:f2:94:4c:80:e2:48:
62:75:ec:ea:3a:f9:dd:8c:de:a2:3c:54:93:37:af:6e:bc:77:
61:fa:4d:08:f0:2f:f7:13:1f:42:f2:46:82:e5:67:ab:5b:a7:
01:6b:ad:8f:9d:8f:49:56:7f:f2:8c:06:14:0f:c7:37:2d:bf:
19:b1:fd:f3:41:95:66:01:b7:73:39:4b:2f:02:64:96:c2:d0:
68:de:ef:f4:3b:e0:64:1b:9b:77:47:29:8e:14:be:c5:90:f1:
08:13:04:b0:2d:36:72:62:3d:0d:47:7b:e1:d3:a6:3e:85:08:
f4:ba:05:10:52:5c:40:08:e5:9e:ea:56:e5:e5:80:cc:3e:ac:
cc:d4:a2:4a:ca:2c:35:75:b7:f4:7f:0a:15:18:e8:a4:32:e4:
bc:27:8d:1e:f3:87:ed:cc:03:84:35:f8:9e:4d:09:32:17:6c:
86:35:8a:56:31:da:3c:26:36:6d:7d:8b:51:32:61:4e:32:d4:
39:51:97:47:3a:4e:d2:81:6b:36:49:9c:d9:d0:67:3d:95:9a:
c1:c4:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:37 2025 by rpki-client