
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/bd3920e6-0520-30ba-9755-79cf833a409c.roa
File: bd3920e6-0520-30ba-9755-79cf833a409c.roa (raw, json)
Hash identifier: Pq+oeFrDTJ+hJDdafZ/K8nECrQFj24oPj9HaTp4xAys=
Subject key identifier: 92:29:95:64:21:9B:39:CC:1B:70:FE:8F:9D:95:7A:9D:C9:BB:1B:6A
Certificate issuer: /CN=86344825-5da6-48ae-b81f-d48fcd164530
Certificate serial: 010D0C9F4328584B9E07D44A4E59F06EDFEEFCB0
Authority key identifier: 39:3A:49:A7:FD:F4:63:75:AD:51:EF:D5:B1:AD:8E:1C:DF:C5:DF:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/bd3920e6-0520-30ba-9755-79cf833a409c.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 62893
IP address blocks: 2606:1840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:d4:4a:4e:59:f0:6e:df:ee:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86344825-5da6-48ae-b81f-d48fcd164530
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=f2778bd0-2e95-4256-be68-920a3fa1d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:03:81:68:53:ed:3b:7f:20:3d:4c:66:e6:
98:67:96:30:4b:60:50:13:3e:18:7e:ef:a7:80:3a:
b1:3e:a3:cf:0e:bd:4c:9e:27:d7:ae:02:0d:bf:e1:
2e:c9:9a:32:e5:1b:98:05:88:a7:7e:82:62:cf:4e:
b0:ab:f7:8d:ff:da:3d:15:eb:30:98:c3:eb:62:6e:
e8:11:82:0f:33:ff:35:42:bf:13:9b:82:7f:70:0f:
e6:ee:7d:c4:65:d2:5e:6a:13:07:4a:bc:f8:4b:f8:
b1:76:39:da:cd:7d:7c:71:df:de:06:84:a9:5d:74:
4a:41:dd:34:2c:81:e6:6b:11:bc:ef:ca:20:7c:39:
0e:8b:ed:62:9a:3a:56:3e:49:cf:b8:8e:11:b1:cd:
5c:9e:25:75:9c:bc:7b:e9:e9:1d:d2:b6:8e:d3:e7:
0a:fc:2f:21:47:6e:c1:f8:05:1e:66:cd:98:7e:cf:
8f:44:70:80:bc:96:53:ef:46:09:71:5a:76:f1:54:
1e:91:33:01:85:8b:44:c4:00:5a:92:79:48:d7:5d:
1d:2a:67:f0:40:02:30:dd:ec:9e:37:d9:c4:8a:29:
8e:97:94:1c:14:ae:83:1e:9e:87:2e:ff:4d:20:3f:
f0:8a:9e:36:73:33:3b:69:81:dc:6a:10:5d:13:08:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:29:95:64:21:9B:39:CC:1B:70:FE:8F:9D:95:7A:9D:C9:BB:1B:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/bd3920e6-0520-30ba-9755-79cf833a409c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.crl
X509v3 Authority Key Identifier:
keyid:39:3A:49:A7:FD:F4:63:75:AD:51:EF:D5:B1:AD:8E:1C:DF:C5:DF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:1840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:0f:2e:ad:e9:4b:be:0e:c9:1d:5b:81:1a:56:29:4c:56:a3:
65:1e:a0:12:93:79:af:bd:46:64:ff:6a:d8:5e:4d:48:28:7c:
42:77:24:07:41:bc:14:d5:6e:e6:21:c5:0b:a9:a7:91:c9:90:
f6:68:53:46:46:1d:ef:f5:4f:be:1d:d6:7a:0d:69:1e:bd:6f:
2e:5b:43:b8:63:75:5d:2e:a6:a2:b0:29:6d:e0:3c:48:d7:d0:
1a:10:ba:2c:4f:8a:b7:13:05:19:1a:4c:e6:fc:af:3c:4b:41:
93:bb:bb:ba:70:2d:96:f8:c3:93:db:e8:5e:00:ae:e9:96:6b:
b6:3a:4a:81:c0:67:73:f5:48:96:5e:b7:e7:bc:30:ac:07:4b:
19:ce:7d:11:ed:af:8a:89:04:92:27:c2:1d:99:64:4c:3f:bf:
b6:89:eb:ff:e9:21:eb:67:27:d0:e9:ea:d7:e7:ea:33:70:ec:
be:cb:4e:5a:7e:4e:a2:b4:39:30:45:aa:85:c7:43:6d:6b:0f:
bc:d0:8b:82:cb:94:9f:60:30:46:80:40:dc:2d:00:20:0f:c9:
b4:e8:20:c9:6c:88:7b:47:b7:40:d8:9b:52:97:c7:3c:2d:f4:
eb:d8:1a:fe:b2:e8:12:13:bf:0c:4c:3a:05:f8:e6:99:6b:23:
e3:e4:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:14 2025 by rpki-client