
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11/a22a362d-fc7b-35e6-9a46-8bab90178fe5.roa
File: a22a362d-fc7b-35e6-9a46-8bab90178fe5.roa (raw, json)
Hash identifier: DJwIXbF+gM0OlgIVgzvee0d4ALQmgMUiPCaLmjDxb5c=
Subject key identifier: 17:4E:A8:E5:41:F4:85:90:44:B2:92:F9:1D:90:E9:DF:91:EA:D3:71
Certificate issuer: /CN=fd104d8b-b6f1-4415-b1ae-ffb8af8acd11
Certificate serial: 010D0C9F4328584BB2F830A789DA5D14EC551500
Authority key identifier: B8:F4:4F:7F:43:A1:1C:A4:E5:63:DD:68:F7:75:7B:11:C8:B2:4C:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11/a22a362d-fc7b-35e6-9a46-8bab90178fe5.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 33091
IP address blocks: 2620:42:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f8:30:a7:89:da:5d:14:ec:55:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd104d8b-b6f1-4415-b1ae-ffb8af8acd11
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=a833360b-5fd8-40af-9660-d4dda33dfcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:96:7f:f2:15:55:a5:01:1d:0e:aa:1d:8d:
35:67:b9:44:99:db:c6:ad:b8:b9:38:8e:7b:6d:a9:
3e:de:72:bf:35:d2:68:67:7e:51:10:4f:2d:bb:1a:
53:08:96:c0:88:8f:98:86:38:c9:e9:ce:58:77:4d:
da:40:ac:81:ec:04:6f:5a:7d:c9:ea:9f:a7:d3:ec:
5c:b5:ec:d3:2b:bd:97:bb:7d:c0:4d:a3:ed:9e:78:
86:82:7d:40:3d:24:00:12:5e:cc:d6:18:78:01:a6:
93:6e:03:3a:07:bc:10:fe:16:39:d8:6c:20:8e:b6:
91:fe:08:db:88:80:9f:e8:a5:31:ac:e3:63:8d:02:
a2:b5:97:c1:e2:c6:e0:92:f9:96:6b:d8:96:18:75:
f5:be:18:cd:84:2c:31:29:e6:e1:11:1a:2e:e6:34:
6c:04:1c:59:f9:59:0c:9c:21:d3:85:ef:c4:59:e7:
75:f1:1e:9a:2d:69:00:e5:a4:44:c0:da:0a:61:21:
86:71:05:9d:8d:80:11:67:10:39:ab:fc:15:46:e1:
91:88:0d:6c:3d:55:64:46:cd:3a:77:53:85:97:10:
5f:d3:0b:a1:29:bc:cb:03:95:7a:be:3c:2b:44:7d:
40:c6:11:3d:10:e5:52:a8:86:18:05:54:50:68:1e:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4E:A8:E5:41:F4:85:90:44:B2:92:F9:1D:90:E9:DF:91:EA:D3:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11/a22a362d-fc7b-35e6-9a46-8bab90178fe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11.crl
X509v3 Authority Key Identifier:
keyid:B8:F4:4F:7F:43:A1:1C:A4:E5:63:DD:68:F7:75:7B:11:C8:B2:4C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fd104d8b-b6f1-4415-b1ae-ffb8af8acd11.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:42:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:51:78:bb:00:05:06:72:4d:3b:08:c0:1b:b5:4e:6f:55:d4:
94:e7:68:6f:55:92:00:af:2e:ec:29:e7:63:dd:23:96:f0:56:
c7:06:9f:70:7c:56:93:e7:98:53:76:9d:73:5a:68:7d:e6:62:
89:f3:1e:9d:39:eb:04:b5:7c:72:05:10:06:9c:f2:44:3e:79:
6f:95:ef:72:a8:e3:03:cb:5a:28:17:3d:f7:47:c2:bb:06:aa:
fe:1e:7a:d2:49:c0:7b:3e:64:ad:d6:d1:16:5e:10:dd:48:32:
b1:c0:a9:bf:48:a8:9a:89:a6:40:3d:23:f4:71:24:fb:4e:66:
85:04:cc:bf:88:ae:16:0e:f9:e7:29:a1:31:dd:a3:2c:b1:e8:
15:8a:5c:de:34:ed:f2:c1:61:f3:e2:13:3b:39:34:8d:58:21:
66:72:93:64:84:0d:d6:24:e2:2e:f3:04:c2:ee:59:ec:c3:12:
69:37:d1:62:b7:30:80:68:c6:24:aa:20:28:c5:43:a7:cc:7e:
6a:0c:b4:da:50:5c:01:7e:f1:ff:c3:76:b4:02:7f:4f:71:80:
dc:f1:32:bd:e7:92:e0:f8:a3:e1:0e:5f:fb:5f:6e:42:5e:97:
9f:71:56:50:ac:29:6f:93:10:fc:83:50:9a:b1:4b:2d:84:da:
ae:3f:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:49 2025 by rpki-client