
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa
File: cd942d33-d988-3945-ba55-c98341144167.roa (raw, json)
Hash identifier: ANo90nUAskqFIEKE/ccKFkFuS+NJg6otlMlQNLAh7/U=
Subject key identifier: AB:8E:4D:39:E1:D1:F2:BC:03:55:E5:71:8A:8A:D1:EE:2F:F4:C0:22
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584B2CF6EA78404BF3C0A3469F00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa
Signing time: Sat 13 Sep 2025 01:00:33 +0000
ROA not before: Sat 13 Sep 2025 01:00:33 +0000
ROA not after: Fri 12 Dec 2025 02:00:33 +0000
asID: 30103
IP address blocks: 2620:123:2086::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2c:f6:ea:78:40:4b:f3:c0:a3:46:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Sep 13 01:00:33 2025 GMT
Not After : Dec 12 02:00:33 2025 GMT
Subject: CN=f8ec1f97-3378-4005-a346-7dc25073a4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:47:d1:43:27:d7:ea:7d:1a:48:18:64:61:
b8:e2:5f:11:eb:b4:01:88:dd:5c:ef:05:72:5c:70:
a7:4f:8e:0e:0b:c3:e8:25:f9:3d:79:6d:93:af:cf:
e2:ab:92:3f:19:db:d5:fb:49:91:df:89:61:63:f2:
fb:a1:f2:82:67:62:6f:15:61:78:e9:6c:15:e1:21:
70:ba:6b:2d:b2:59:2c:69:06:a7:07:16:92:81:ca:
9e:66:74:53:37:07:d4:b9:51:e8:be:8a:46:da:09:
27:9c:9a:71:dd:93:51:a3:f3:47:ec:66:52:30:f5:
1f:b6:be:b4:bc:ed:2b:9e:bc:40:16:bd:05:bd:0f:
58:2a:16:6f:84:6a:01:7c:06:39:76:92:93:5e:0e:
39:97:2a:b4:b5:d7:52:b2:40:39:f0:f6:60:98:8d:
31:08:cc:48:63:f0:3e:e1:74:8e:fb:32:de:af:9c:
da:13:26:54:f0:69:65:81:a8:2a:dd:dc:d2:93:4f:
01:6a:7e:fb:b9:12:a0:80:ff:24:e8:80:90:cd:dc:
38:5b:ef:0e:67:25:bc:c3:dd:d7:48:06:10:01:f9:
5a:29:7d:4a:77:df:43:ed:74:69:11:f7:40:e7:b1:
41:e9:65:20:4d:3c:69:f2:45:1a:90:71:fa:5c:1c:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8E:4D:39:E1:D1:F2:BC:03:55:E5:71:8A:8A:D1:EE:2F:F4:C0:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:123:2086::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:a6:7d:bc:2b:00:35:13:1e:5b:a0:75:df:da:b9:f1:1e:1c:
87:65:8c:8d:50:6a:61:6e:da:27:32:70:75:78:6b:5d:bb:12:
5d:17:cc:d0:89:7a:94:1c:99:15:3a:84:24:31:8c:60:be:dc:
66:39:a4:2c:ad:79:11:4d:53:9f:10:25:fd:db:85:61:28:de:
e2:d1:16:3d:9c:e9:d6:a3:de:d6:24:32:fa:09:26:c1:a7:d5:
72:9b:07:88:c2:64:78:8f:a5:37:eb:16:51:0b:60:46:0f:c2:
48:8c:f9:01:1b:84:b9:84:68:41:2a:81:6f:c6:70:b8:8c:83:
91:db:62:45:01:86:58:e7:81:3b:71:e4:c0:02:c1:f0:de:c2:
30:ce:84:01:c3:61:8b:29:7c:fc:8f:ea:50:b5:71:86:e4:f6:
67:19:b4:89:f6:54:4f:1b:f0:18:22:14:d9:b6:73:11:45:e6:
4b:f7:5d:f1:bc:74:30:42:4d:ae:3e:ac:ea:00:f3:80:48:9c:
3b:7b:65:ae:db:6e:dc:4f:a1:d1:ac:00:1a:9e:e4:39:50:3d:
51:77:80:d6:9b:bc:24:be:f8:a9:d1:6c:84:a9:b2:81:24:db:
3e:83:84:6c:e1:bf:cd:67:ac:0c:21:3d:74:a3:d5:d1:36:38:
7f:73:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:45:59 2025 by rpki-client