
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa
File: d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa (raw, json)
Hash identifier: DBHVAXVISjbpQ5Kpe//8Os+uSBdTOfuclXnYDSHwSo8=
Subject key identifier: C4:64:84:B6:AE:0F:09:71:7C:67:1A:5C:4F:2D:F3:7C:8F:BB:1B:AC
Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f
Certificate serial: 010D0C9F4328584B34B20CE4C82BCD6F37CEFD40
Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa
Signing time: Mon 15 Sep 2025 19:28:29 +0000
ROA not before: Mon 15 Sep 2025 19:28:29 +0000
ROA not after: Sun 14 Dec 2025 20:28:29 +0000
asID: 46309
IP address blocks: 2605:bc00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:34:b2:0c:e4:c8:2b:cd:6f:37:ce:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f
Validity
Not Before: Sep 15 19:28:29 2025 GMT
Not After : Dec 14 20:28:29 2025 GMT
Subject: CN=4956c322-3e13-4028-a656-cc50ff2e0ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:66:b7:3b:c1:2c:98:0b:05:04:8c:2e:00:
52:6c:9a:f7:71:f5:01:47:61:39:86:07:49:cb:9d:
4c:13:e5:51:df:5c:f8:0e:2f:cb:99:e3:58:cc:11:
fe:f4:f0:52:e3:84:f8:54:69:2c:06:51:b8:ac:3a:
8b:9c:50:78:43:e5:24:71:cc:6e:1f:36:67:77:10:
46:dd:a4:4b:fb:92:dc:33:87:96:7e:67:72:83:94:
9d:ab:ff:67:e6:06:90:0d:c0:3f:76:6f:ac:1b:84:
92:f4:0b:ee:52:ee:7f:e1:65:37:32:3d:b2:a3:01:
16:d8:5a:a1:99:4e:70:81:a8:4b:5a:3e:61:79:a5:
51:43:aa:41:b5:86:9f:b2:ed:90:5f:a2:6d:76:e1:
ac:be:47:ba:3b:d9:90:67:f2:4a:bb:7b:e6:d5:f5:
01:37:0b:79:ca:da:1e:df:db:22:d3:28:47:a0:06:
d4:ca:18:79:1a:67:6f:d2:54:b8:ee:ac:ef:f8:70:
b1:0c:61:02:d3:bd:f7:f1:eb:77:64:26:98:6a:3e:
72:29:6f:32:ab:ba:fd:1f:00:b7:be:4d:95:6b:59:
37:35:6d:39:3d:09:4e:46:d9:58:40:60:87:cc:5c:
fd:b0:6f:f0:4e:14:a4:b1:3e:b6:c3:d3:af:23:a4:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:84:B6:AE:0F:09:71:7C:67:1A:5C:4F:2D:F3:7C:8F:BB:1B:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl
X509v3 Authority Key Identifier:
keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:bc00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:3b:4e:ce:7a:ad:4d:90:3b:b1:28:d8:7d:d6:39:50:d0:62:
f6:95:a8:3d:bd:a6:59:aa:cd:7c:15:4c:1a:a8:d0:39:32:ea:
89:0c:3d:35:4b:71:cb:83:8e:d9:d1:83:d4:60:34:d1:bf:67:
33:b3:06:ee:14:e0:c6:a4:f7:62:a2:dd:ce:8a:35:9c:18:8a:
d7:e9:9b:72:aa:db:0a:74:e1:81:33:fb:6a:ac:8a:c1:c8:e0:
19:42:39:6d:fc:7e:d8:d1:ad:9b:d1:b2:b5:b2:0e:7e:f7:d4:
aa:06:f0:59:37:9e:93:9b:d7:e7:d5:d1:c1:bb:9e:18:bc:9b:
e1:f6:7a:5f:bf:73:27:7d:ed:1c:04:13:bb:d3:11:7c:19:38:
53:9d:b9:9e:e9:bb:24:f6:00:9d:75:8a:da:49:17:28:f3:7f:
75:bc:88:18:54:11:73:dc:4f:20:f2:99:20:0d:cc:a6:5c:c9:
14:15:16:bd:b7:04:5c:bb:03:31:5d:c3:3d:4e:79:13:43:5a:
ea:d7:8f:e9:4c:77:44:e2:9f:86:af:29:fe:b9:55:ee:44:bf:
86:25:50:40:b4:ae:39:a7:72:8e:c1:91:0e:f0:38:29:45:82:
ef:32:e2:af:d3:45:fe:da:00:76:86:bb:55:bf:04:81:95:97:
cf:b0:03:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:53:37 2025 by rpki-client