
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa
File: 0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa (raw, json)
Hash identifier: 7qHnmaY3c6Fpq0uR6FTxtNyFu72tP+Rr2nICWPhwm00=
Subject key identifier: 9E:38:AD:F4:49:6C:EA:DD:6C:69:2A:E0:10:52:5E:E1:19:5E:FF:B9
Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial: 010D0C9F4328584B2496D5C36E5DF02F58941D00
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa
Signing time: Wed 10 Sep 2025 01:00:33 +0000
ROA not before: Wed 10 Sep 2025 01:00:33 +0000
ROA not after: Tue 09 Dec 2025 02:00:33 +0000
asID: 25664
IP address blocks: 2607:cc80:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:24:96:d5:c3:6e:5d:f0:2f:58:94:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Validity
Not Before: Sep 10 01:00:33 2025 GMT
Not After : Dec 9 02:00:33 2025 GMT
Subject: CN=e0a591a6-b53f-4b53-8763-d0958b7b1a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:57:b1:1b:13:f4:24:db:b2:9e:f0:0d:0c:
82:fd:cf:2c:60:1d:2b:59:eb:b8:6e:54:45:2a:0f:
2f:1f:0d:12:20:63:55:3d:76:fc:06:32:5c:c1:95:
ce:f5:d8:87:da:09:8f:4f:6b:0c:ca:88:6d:18:6f:
3c:9f:a3:3c:00:f5:e3:14:2f:7b:87:c6:02:26:c7:
a8:55:ed:98:c0:30:cb:33:90:27:73:a4:46:34:eb:
4f:87:0c:7f:0a:d6:3e:40:4d:1a:3e:fc:a8:07:5c:
2b:de:37:01:03:37:ed:aa:f1:5a:e9:27:9c:81:6c:
9c:82:64:5d:04:77:6f:91:e6:f0:85:ee:a6:3e:73:
f9:75:9c:2a:b6:6c:88:f8:02:ad:fa:38:fb:e6:ab:
96:c3:94:29:3f:44:e6:f2:ee:7c:66:2c:15:15:db:
52:a7:de:2e:e2:cf:59:d5:e7:b3:57:b4:fb:70:29:
4d:47:26:6c:9b:87:af:a8:5a:3a:96:75:3c:24:89:
6e:43:b9:e7:62:b3:95:3e:4e:d2:72:8e:e4:f0:2e:
e0:c0:d9:a4:02:4e:af:50:54:5d:b2:8e:25:73:52:
57:2f:2d:95:9f:45:a5:a1:13:4f:d1:1a:4a:99:98:
0a:9b:91:40:aa:eb:b6:05:b2:57:61:21:68:d0:26:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:AD:F4:49:6C:EA:DD:6C:69:2A:E0:10:52:5E:E1:19:5E:FF:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
X509v3 Authority Key Identifier:
keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:cc80:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ad:62:37:80:1e:75:9f:bf:be:62:49:80:4d:43:a1:e2:d2:
d3:2e:05:69:a1:ab:2b:7f:63:9b:2f:16:48:22:e6:b1:bd:f9:
25:a8:3f:d2:a1:5c:ab:33:d8:a8:ca:9d:bb:bb:30:b0:e2:cb:
c6:3d:4f:3a:3a:ec:56:ea:be:be:7e:b4:44:54:d8:a0:4e:43:
31:dd:0e:28:25:ce:fe:10:c7:5b:b2:4e:88:5a:66:0a:59:da:
e5:97:7d:c9:e0:d1:b7:f8:b8:99:7f:5b:6a:d9:49:a9:bd:f7:
10:17:fc:90:93:e7:b9:66:b3:84:cd:a7:57:4e:aa:f0:88:4e:
06:c5:54:b8:fd:0f:34:eb:d0:fa:3c:d1:14:be:8a:e3:d9:d1:
ba:57:18:73:1b:61:c2:2f:c6:e3:77:f1:5a:dd:b9:21:0f:00:
30:88:5a:af:62:00:bd:db:43:c9:51:b8:8e:5a:68:8d:6f:87:
f8:d2:9a:d1:31:06:90:ce:85:f8:93:70:56:25:5b:1e:f1:e6:
17:54:72:6d:69:b5:f7:6a:46:e9:88:22:c7:b0:58:b7:a9:89:
a0:5f:85:4d:64:2d:f5:3d:ae:8c:3f:92:d1:64:46:a9:29:59:
7c:7a:23:48:a7:8a:bd:11:d2:8c:c3:7b:89:7c:5d:f3:de:f3:
91:96:de:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskltXDbl3wL1iUHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0
MDc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZTBhNTkxYTYtYjUzZi00YjUzLTg3NjMtZDA5NThiN2IxYTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/JXsRsT9CTbsp7wDQyC/c8sYB0rWeu4blRF
Kg8vHw0SIGNVPXb8BjJcwZXO9diH2gmPT2sMyohtGG88n6M8APXjFC97h8YCJseo
Ve2YwDDLM5Anc6RGNOtPhwx/CtY+QE0aPvyoB1wr3jcBAzftqvFa6SecgWycgmRd
BHdvkebwhe6mPnP5dZwqtmyI+AKt+jj75quWw5QpP0Tm8u58ZiwVFdtSp94u4s9Z
1eezV7T7cClNRyZsm4evqFo6lnU8JIluQ7nnYrOVPk7Sco7k8C7gwNmkAk6vUFRd
so4lc1JXLy2Vn0WloRNP0RpKmZgKm5FAquu2BbJXYSFo0CbmcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ44rfRJbOrdbGkq4BBSXuEZXv+5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk
M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvMGFlOGNmNDgtODZkOS0z
NmU4LTg5YmMtMDljNDIzYWQzZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3
MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm
NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2
ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAOtYjeAHnWfv75iSYBNQ6Hi0tMuBWmhqyt/Y5svFkgi5rG9+SWo
P9KhXKsz2KjKnbu7MLDiy8Y9Tzo67Fbqvr5+tERU2KBOQzHdDiglzv4Qx1uyToha
ZgpZ2uWXfcng0bf4uJl/W2rZSam99xAX/JCT57lms4TNp1dOqvCITgbFVLj9DzTr
0Po80RS+iuPZ0bpXGHMbYcIvxuN38VrduSEPADCIWq9iAL3bQ8lRuI5aaI1vh/jS
mtExBpDOhfiTcFYlWx7x5hdUcm1ptfdqRumIIsewWLepiaBfhU1kLfU9row/ktFk
RqkpWXx6I0inir0R0ozDe4l8XfPe85GW3ic=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:04 2025 by rpki-client