
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa
File: baae2628-02ca-3879-87d5-5af017ec5583.roa (raw, json)
Hash identifier: ABHv5IU1LzxpeHUFrQKwlwCAQn1tHD1zI9at6EuCViQ=
Subject key identifier: 68:77:02:B9:64:14:33:82:AD:2E:29:58:79:37:CB:BC:DC:74:1D:94
Certificate issuer: /CN=c892586d-1638-476b-994e-499f179da6da
Certificate serial: 010D0C9F4328584BAA979B96B5BC5D2837226440
Authority key identifier: 8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 177
IP address blocks: 2607:f018:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:9b:96:b5:bc:5d:28:37:22:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c892586d-1638-476b-994e-499f179da6da
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=929d3cf6-1c9a-49ec-b38c-85bdf424aac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:35:3f:20:85:2f:3e:e0:c0:3c:63:48:d4:
5e:4c:93:98:23:50:b1:76:8d:57:1c:c1:17:26:f7:
7b:f4:0f:b6:bc:09:ad:fc:3d:89:f8:97:06:04:b8:
16:81:84:35:a2:28:6a:98:df:84:cd:17:0f:44:89:
80:2c:6a:38:16:1d:1c:52:fd:62:4d:a4:f1:0f:08:
ff:ba:cf:02:64:d3:57:a4:4c:e9:64:b9:07:43:a4:
41:a5:39:d6:72:b1:ae:14:fc:ff:6f:5b:c2:13:87:
f6:fc:a8:9a:46:38:66:52:03:fb:69:4b:ba:bc:1e:
c8:06:a3:7c:b1:2e:43:d3:f5:df:e6:0f:c2:66:c6:
a1:2a:12:60:99:90:7e:0d:02:26:8f:be:f1:92:4d:
ee:9b:6e:60:f4:7b:9e:e3:e6:87:c2:a7:06:43:81:
db:67:33:7b:04:f7:fc:52:c7:20:ff:a4:87:08:c2:
55:58:50:df:f3:86:44:01:7f:50:a0:85:23:f9:62:
2d:64:a7:84:3e:b9:ce:82:ae:11:8d:f6:ad:89:9b:
e5:0b:87:6b:16:2a:8a:ad:eb:b4:0a:65:d2:50:68:
06:42:ee:0a:18:0a:28:fd:b7:84:d8:fc:a7:37:58:
89:8e:67:f2:8c:09:ea:a3:9b:e6:c7:f5:e5:c5:2f:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:77:02:B9:64:14:33:82:AD:2E:29:58:79:37:CB:BC:DC:74:1D:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.crl
X509v3 Authority Key Identifier:
keyid:8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f018:fffe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:52:fc:14:47:ba:31:fa:b2:01:81:64:c5:9c:a2:6b:81:35:
1c:1d:5e:f4:54:24:06:d9:11:da:de:8e:55:6b:f1:c3:c9:9f:
6d:98:df:f0:84:ea:bd:a4:18:e1:d8:c0:63:3f:8d:be:c2:a6:
d1:84:bb:19:df:7d:2d:c6:8c:46:c0:5a:d9:f3:fd:74:8c:42:
53:06:a5:04:17:b8:65:bf:2b:e6:a5:93:62:fe:58:b9:fb:05:
ea:14:40:98:bc:c0:19:8a:f2:09:78:9a:12:13:81:8d:22:51:
4a:1f:bd:8d:61:a6:91:56:b0:46:e2:e1:cd:52:a9:45:0d:f9:
9c:7d:64:30:e7:4a:fa:b0:9b:7d:b7:92:5b:05:18:7d:c3:19:
f3:39:51:3e:b6:24:7a:8c:78:34:f1:e6:55:f0:61:75:e8:db:
02:79:a2:2d:48:07:49:54:d6:1b:1e:8d:4e:fa:74:3a:ba:91:
28:7d:5f:fb:0a:be:7d:cf:34:d4:10:22:eb:30:8e:f1:c1:ab:
66:23:bf:ba:37:10:9e:94:cc:bf:07:01:7e:39:47:b3:70:e8:
95:f8:fd:29:fc:e6:a4:47:6a:0a:6f:d6:31:60:6e:b9:9e:25:
f1:27:13:3a:50:2c:9a:6f:ff:c0:3d:4a:9f:13:0d:e0:a0:6a:
ad:4e:17:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuql5uWtbxdKDciZEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5MjU4NmQtMTYzOC00NzZiLTk5NGUtNDk5ZjE3OWRh
NmRhMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
OTI5ZDNjZjYtMWM5YS00OWVjLWIzOGMtODViZGY0MjRhYWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv01PyCFLz7gwDxjSNReTJOYI1Cxdo1XHMEX
Jvd79A+2vAmt/D2J+JcGBLgWgYQ1oihqmN+EzRcPRImALGo4Fh0cUv1iTaTxDwj/
us8CZNNXpEzpZLkHQ6RBpTnWcrGuFPz/b1vCE4f2/KiaRjhmUgP7aUu6vB7IBqN8
sS5D0/Xf5g/CZsahKhJgmZB+DQImj77xkk3um25g9Hue4+aHwqcGQ4HbZzN7BPf8
Uscg/6SHCMJVWFDf84ZEAX9QoIUj+WItZKeEPrnOgq4RjfatiZvlC4drFiqKreu0
CmXSUGgGQu4KGAoo/beE2PynN1iJjmfyjAnqo5vmx/XlxS+XEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGh3ArlkFDOCrS4pWHk3y7zcdB2UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODky
NTg2ZC0xNjM4LTQ3NmItOTk0ZS00OTlmMTc5ZGE2ZGEvYmFhZTI2MjgtMDJjYS0z
ODc5LTg3ZDUtNWFmMDE3ZWM1NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg5MjU4NmQtMTYzOC00NzZiLTk5
NGUtNDk5ZjE3OWRhNmRhL2M4OTI1ODZkLTE2MzgtNDc2Yi05OTRlLTQ5OWYxNzlk
YTZkYS5jcmwwHwYDVR0jBBgwFoAUj7aOg1maLdRVPndqRwtJRlpZJBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jODkyNTg2ZC0xNjM4LTQ3NmItOTk0ZS00OTlm
MTc5ZGE2ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwGP/+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABRS/BRHujH6sgGBZMWcomuBNRwdXvRUJAbZEdrejlVr8cPJn22Y
3/CE6r2kGOHYwGM/jb7CptGEuxnffS3GjEbAWtnz/XSMQlMGpQQXuGW/K+alk2L+
WLn7BeoUQJi8wBmK8gl4mhITgY0iUUofvY1hppFWsEbi4c1SqUUN+Zx9ZDDnSvqw
m323klsFGH3DGfM5UT62JHqMeDTx5lXwYXXo2wJ5oi1IB0lU1hsejU76dDq6kSh9
X/sKvn3PNNQQIuswjvHBq2Yjv7o3EJ6UzL8HAX45R7Nw6JX4/Sn85qRHagpv1jFg
brmeJfEnEzpQLJpv/8A9Sp8TDeCgaq1OF1U=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:06:20 2025 by rpki-client