
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
File: 963de827-0eb3-39c8-8bee-3f01a20ec876.roa (raw, json)
Hash identifier: OFQUF3d/izUQdnSgqRmvUENDgeN3pnMnTaVzmYunnYI=
Subject key identifier: B2:90:2B:73:F2:F7:7D:A5:BB:EC:84:CB:A3:71:65:70:BB:2C:F6:CA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7F5845B35A87B09BFC5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 212955
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:f5:84:5b:35:a8:7b:09:bf:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=9bd4b5b8-9f72-43dc-9cd9-9cc5547c5af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:a3:a1:18:ed:e1:5f:98:85:5e:cd:06:1d:
0c:85:79:f5:d9:fa:28:21:0a:30:bf:eb:c0:a3:7d:
9e:f2:6a:59:88:f0:bf:bc:ab:a7:63:05:88:b1:b6:
fe:7b:81:ce:a0:8b:0a:39:f4:52:38:85:b7:c3:18:
95:fb:25:17:d8:0c:d1:6e:f4:64:43:79:60:5b:f8:
4d:05:46:5f:18:fa:f2:d3:d3:d1:a1:c3:ba:7b:64:
58:fb:2f:e9:46:be:8f:a4:b5:a4:43:7b:a1:d4:5c:
7d:96:e3:5c:1e:69:9f:a6:4d:35:96:db:7d:d5:c6:
a9:bd:38:99:b8:67:61:f5:04:a0:7a:52:f5:20:13:
4b:17:54:4a:0b:c4:74:4b:bc:95:d4:62:0c:b0:47:
96:61:f0:3d:9e:11:7d:e3:1e:73:99:e1:84:92:db:
ce:b1:16:98:d7:77:ff:84:89:7c:ff:23:62:2b:b1:
47:10:f6:e2:6a:2b:9e:54:21:2c:c3:f8:65:2b:a1:
29:62:80:92:1f:a8:eb:35:a5:8f:cf:6e:ec:0c:25:
0b:7d:87:97:43:78:29:14:5c:6e:44:55:47:21:7a:
41:81:65:95:ec:33:ad:cd:8c:fd:bf:1c:dc:4a:ed:
2b:b9:35:b0:aa:6e:91:7e:bf:11:79:f8:d8:28:ce:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:90:2B:73:F2:F7:7D:A5:BB:EC:84:CB:A3:71:65:70:BB:2C:F6:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:22:f1:53:2e:02:23:82:02:3e:67:38:c4:fa:b5:f4:e2:24:
8f:bd:eb:41:04:a5:61:4a:f5:e4:6b:28:3e:fc:17:cb:8d:3d:
64:d9:dc:8d:5a:0a:8d:f8:3f:6d:52:c7:a7:96:8a:cd:dc:1c:
e9:34:e6:c9:88:a9:32:d2:5c:b2:de:9a:e1:2f:85:93:62:79:
91:00:64:6a:1c:e1:95:f9:4d:30:71:4c:ea:37:52:00:aa:1d:
53:89:cf:64:73:de:c5:51:0f:72:b1:11:b5:c0:d5:a7:d4:75:
07:5b:31:aa:49:51:91:02:5d:f9:1e:b9:41:f5:39:da:bd:37:
c3:6a:7e:fc:24:29:27:8a:b6:b1:f3:50:b1:1b:12:cb:41:39:
b2:6c:01:bb:f0:4c:bd:ad:d1:50:a0:20:16:6f:f2:bc:71:18:
e7:4f:f5:e3:c7:77:28:ac:46:4c:bf:99:99:4c:e2:d7:22:78:
7e:59:a8:ec:bf:2f:d2:0d:a9:51:82:67:85:89:a9:bb:98:2b:
f4:a5:90:0e:25:c3:ae:5d:2d:c4:94:60:92:e7:71:3a:64:c6:
4c:82:f8:66:7a:57:f4:59:92:8d:82:36:5b:f8:1a:4e:b1:10:
6d:d3:9d:60:11:f8:ea:62:15:0f:06:00:ca:85:6e:af:c2:84:
3e:d3:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:24:16 2025 by rpki-client