
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa
File: 707934f0-2be6-3cdf-a514-9b44c5ca443b.roa (raw, json)
Hash identifier: 6H2lonnqxsalp8L52zzmmlGB/e/Lq8uoyLW1bfEdb2g=
Subject key identifier: 9D:A8:5A:30:AF:12:7F:87:15:92:42:C2:88:3D:D8:5E:14:A7:6F:28
Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial: 010D0C9F4328584B9E07ABB836B3EFD46F14C840
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 21766
IP address blocks: 2605:6600::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:ab:b8:36:b3:ef:d4:6f:14:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=8d22d649-5ae5-4474-aa3f-c3252680fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:19:6e:da:33:6e:5f:84:5d:57:7d:cf:3d:
9d:47:cf:7b:2a:84:3d:4f:8b:9e:6a:e8:8d:8a:50:
57:00:cb:b4:a9:8e:58:e4:98:fc:df:cf:30:78:71:
71:f8:74:73:f3:73:6f:e6:9c:51:e1:04:74:09:fd:
29:79:38:70:ff:fa:86:e8:3c:51:ab:c4:d1:a1:8b:
db:59:ea:5d:66:99:d0:ef:cb:04:f5:33:6b:f9:7e:
ca:b4:eb:b0:e2:23:c5:39:67:80:d3:b7:95:34:81:
a7:cf:43:fb:a8:8e:ea:f9:d7:7c:b5:dc:35:54:96:
49:11:ec:56:9f:35:47:e6:c3:98:88:cb:64:6c:1c:
ed:12:65:d0:36:85:03:1d:74:5d:9a:d7:bd:7e:40:
fe:ae:50:7d:06:be:c4:b1:8a:5d:30:5a:26:08:dd:
71:6b:46:1c:f0:dc:f4:d4:70:ca:68:07:d1:0e:62:
8e:57:c5:98:05:28:24:96:39:80:aa:59:5b:9e:bb:
21:ac:c6:07:e6:5f:6f:be:22:73:51:e9:fa:80:78:
fd:3a:23:b3:36:d6:8d:71:26:ec:93:bc:c7:fa:76:
f2:4d:2b:05:b6:10:95:99:d8:da:3d:55:d7:65:ce:
2e:69:a2:e4:45:03:42:b7:44:0c:64:25:f6:7e:95:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:5A:30:AF:12:7F:87:15:92:42:C2:88:3D:D8:5E:14:A7:6F:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
X509v3 Authority Key Identifier:
keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:6600::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:0b:df:4c:e2:03:f7:9e:3b:67:ff:26:cc:7a:78:f9:c0:2c:
72:ff:0a:ca:3a:0d:91:fa:23:9b:0e:7a:88:00:a0:a0:47:b6:
de:13:13:8a:3d:6d:0d:93:8a:c8:f8:b1:02:48:ea:a1:9f:f8:
55:c4:dc:50:7b:8c:0f:c4:a4:df:c3:50:9d:ed:4d:3d:f5:44:
b7:36:a5:a6:90:ce:53:73:b5:6b:54:7d:62:00:4a:46:67:86:
64:cf:73:cb:42:f6:bb:66:fe:b8:ab:c9:c9:5c:a8:d5:71:79:
47:e1:c5:0b:b0:6e:24:b3:06:56:56:7e:b0:b6:95:92:93:36:
e9:37:ea:70:58:3a:82:45:f1:13:82:5d:ee:8c:c6:d3:e7:be:
04:32:26:f8:81:5e:94:db:c1:b7:18:b2:49:6d:4f:2a:20:88:
b1:50:01:38:4f:b6:c0:20:24:1b:5c:91:be:84:b6:f4:af:7b:
d0:21:7d:04:c1:ea:48:ed:d7:28:56:d1:27:48:50:94:13:48:
60:bc:4f:82:d0:b3:15:75:b6:d7:1c:98:e6:2b:c0:a5:41:13:
74:f0:cf:9b:ef:c9:fc:a2:d4:fd:f5:00:a0:8b:1c:7b:d7:e1:
20:6b:45:61:a5:7f:c6:7d:f0:b6:23:61:39:7e:6e:88:1b:9c:
dd:6d:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:22:29 2025 by rpki-client