
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa
File: d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa (raw, json)
Hash identifier: wl8ZFh0dJzNgZRh7ykyA6WVwPm0+gHtQADxjd5FSpk8=
Subject key identifier: 41:9B:00:80:4F:EA:A8:51:52:D1:B6:B4:B3:56:AD:E9:47:EE:F5:0C
Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial: 010D0C9F4328584BB02CF1A701B87DC59B8F2700
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa
Signing time: Thu 30 Oct 2025 01:00:30 +0000
ROA not before: Thu 30 Oct 2025 01:00:30 +0000
ROA not after: Wed 28 Jan 2026 02:00:30 +0000
asID: 401243
IP address blocks: 2602:2b5:16::/48 maxlen: 48
2602:2b5:17::/48 maxlen: 48
2602:2b5:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b0:2c:f1:a7:01:b8:7d:c5:9b:8f:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Validity
Not Before: Oct 30 01:00:30 2025 GMT
Not After : Jan 28 02:00:30 2026 GMT
Subject: CN=035e948e-c9e1-4923-8ba5-c1d1ad8c2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d1:35:06:5b:ce:48:0d:9d:71:9e:3f:08:b5:
ef:32:a2:41:ef:bf:e5:98:0f:10:3f:87:ae:88:02:
b5:99:8a:85:d6:ec:e0:34:5c:70:50:2b:c6:83:af:
09:92:27:a9:70:6c:e5:b0:50:81:20:39:93:80:39:
0a:6f:83:95:8c:34:d9:6c:ad:4a:9f:a1:ac:69:76:
42:dc:ef:49:07:73:09:d2:69:ae:92:45:66:9a:b5:
91:d5:fc:ee:c5:ac:fc:45:74:74:59:f5:44:b5:9d:
d9:43:0f:5a:6f:7b:b0:36:6f:ec:7c:05:74:77:c2:
b4:b1:2f:fd:7b:9b:84:ec:c4:73:f7:6e:5c:8a:c5:
51:f1:80:f2:8f:77:b5:df:66:c5:3c:d1:7c:59:a5:
49:93:96:3f:0e:49:a1:92:5d:99:fe:d1:11:b5:43:
09:be:6b:36:96:75:5f:de:88:20:d7:b5:e2:b0:30:
b4:3b:0a:0a:7b:89:08:ca:0e:aa:fe:4d:5d:1b:9d:
b1:b4:24:5d:6a:aa:5c:bb:7e:fe:3b:3a:1d:a6:d4:
36:60:ee:c4:bf:8a:0f:f2:fb:6e:9a:13:c9:cc:fb:
42:a4:3b:8d:e5:54:ef:c0:73:91:42:aa:e7:50:07:
e2:a4:a7:fb:32:56:2d:09:47:55:28:cb:c3:27:41:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:00:80:4F:EA:A8:51:52:D1:B6:B4:B3:56:AD:E9:47:EE:F5:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
X509v3 Authority Key Identifier:
keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2b5:16::-2602:2b5:18:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:37:e5:3c:17:30:9f:28:8d:43:26:b6:8c:bf:f3:55:10:ec:
12:fa:ef:ec:bb:7b:af:f6:8f:d5:90:09:7c:31:b9:ea:99:0f:
91:db:a3:3b:b6:b9:45:9c:75:37:d5:fb:82:c4:ba:d5:9c:35:
bf:b6:de:0a:6c:59:03:e6:dc:bc:a4:78:6b:35:83:31:d5:da:
b0:2e:b8:1d:63:e9:0f:d8:a9:a7:18:d8:4a:b0:80:21:ab:95:
50:60:6c:8d:10:9e:55:95:4c:da:72:fc:b9:b6:a3:b2:a9:18:
5d:c1:c4:bf:13:44:46:32:ed:8d:13:8c:5c:2a:a5:8e:0d:18:
6c:54:cd:68:8f:57:3b:ea:a1:53:f8:e5:f7:8f:81:74:08:72:
84:08:92:e3:8e:2f:ab:b7:b1:cf:19:ad:39:2b:4b:f7:ae:99:
91:c1:18:6a:e5:17:c5:fd:d4:dd:3a:2e:e1:2b:93:f5:a9:af:
a7:5e:9a:7f:0c:5a:6d:d8:a9:36:81:a2:42:9b:c0:e8:1a:06:
0a:46:35:2d:19:ce:fe:a4:26:79:3a:a4:45:6c:a5:e1:f6:e1:
14:0d:8e:05:23:e3:85:34:da:d3:fa:45:b0:d5:5c:00:33:8d:
98:f8:93:a7:5d:1c:2e:cd:81:8f:77:40:12:4e:b7:60:2b:ce:
7d:12:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:11:23 2025 by rpki-client