
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/20f9edc3-4240-36d0-b647-3d2816703cb3.roa
File: 20f9edc3-4240-36d0-b647-3d2816703cb3.roa (raw, json)
Hash identifier: EHymIfXf6Z32HF0BmTl3y1Y4EO+bjF8j7/EjJAxNDDQ=
Subject key identifier: 9D:FE:1D:4D:CE:8F:15:AA:78:99:A1:F9:F2:9B:76:C1:32:FA:5E:07
Certificate issuer: /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial: 010D0C9F4328584BBE405C9AF6FBE81FD0AFD6B8
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/20f9edc3-4240-36d0-b647-3d2816703cb3.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 62787
IP address blocks: 2602:f6d0:fd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:5c:9a:f6:fb:e8:1f:d0:af:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=e9c2b73b-6c27-44b4-8fc1-2d490caaa541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:6b:8b:e6:7a:1e:71:95:71:3c:61:6b:45:
2c:a5:a7:0b:d3:7c:83:25:f4:12:c6:b3:70:aa:ad:
78:6d:ec:1d:28:02:cf:f8:25:21:6e:a5:d7:9f:22:
62:8b:5a:66:f6:26:6a:41:75:92:eb:8e:0a:1b:46:
e0:c4:b6:5f:d8:07:dc:5a:7a:20:b2:10:8c:ff:40:
1f:46:a5:7b:14:ad:da:a9:f8:3b:64:05:45:b9:94:
82:94:08:87:4b:f5:12:32:8d:39:65:f4:49:f9:ed:
94:e4:cd:54:80:dd:f9:80:5d:a0:70:b5:dc:a7:0b:
97:73:63:c3:6c:18:bb:8e:d6:36:06:bd:d5:59:09:
1e:d1:7a:dc:2c:05:5a:8f:46:ca:f8:89:f1:f1:cd:
f1:f3:d6:a6:69:35:83:2d:55:e1:4a:cf:4e:c2:70:
e0:97:75:84:58:9b:92:73:51:3a:55:c9:cc:1a:8a:
8b:a0:3b:0d:c5:c7:d2:d6:74:9f:5b:cd:b9:c6:9f:
21:e9:4e:01:d9:bd:66:4f:2f:ae:34:c0:83:e4:0d:
62:79:40:e8:00:33:ac:16:e8:4b:70:c3:54:33:86:
6b:8c:f8:07:34:2a:61:4a:a5:7d:2b:6c:7b:64:7e:
78:56:96:22:49:20:d9:60:4f:87:93:2a:94:fe:1d:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:1D:4D:CE:8F:15:AA:78:99:A1:F9:F2:9B:76:C1:32:FA:5E:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/20f9edc3-4240-36d0-b647-3d2816703cb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
X509v3 Authority Key Identifier:
keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f6d0:fd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:3a:d0:bd:10:01:3b:45:07:0c:29:22:43:6a:fa:b0:1b:c4:
43:e2:e0:91:1d:cb:07:5f:f5:cd:12:43:d4:28:64:30:3d:83:
ce:65:12:5c:e9:57:11:73:39:70:d0:44:cf:00:e4:ea:2b:7a:
73:47:1c:2e:25:40:c3:83:02:33:43:ba:8f:75:cd:a4:4a:7d:
7e:b7:eb:aa:2a:73:02:38:2f:c9:14:58:0d:59:1a:f3:80:ae:
a5:ca:b3:85:b0:6b:25:eb:ea:ec:d6:07:22:57:77:dc:9f:e5:
ec:57:82:38:88:6d:4e:99:78:63:3a:ce:e6:d0:c2:70:aa:84:
70:7d:f6:5c:c1:a2:2a:8e:bd:94:79:c9:04:da:5b:03:a1:26:
f3:f5:f6:b7:b6:c5:b5:9f:e2:e8:5c:b0:0a:af:9c:83:ab:04:
e5:05:c3:d9:5f:99:34:47:e4:53:c3:65:33:ae:f8:b2:cb:bd:
1e:63:19:94:70:d2:45:d6:a2:a8:92:7e:6e:71:13:79:19:a2:
b4:ad:d7:cf:92:05:e8:68:06:51:f7:99:f4:69:ba:1f:70:11:
68:43:2b:0e:5e:ea:c8:73:86:da:2e:d1:9d:af:cb:18:83:94:
10:1a:c5:23:f4:84:a7:67:35:e5:e3:5e:f7:33:22:1e:b6:ae:
df:0a:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:37 2025 by rpki-client