
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa
File: 2a558d44-067a-30ea-be58-ab9bcb245d34.roa (raw, json)
Hash identifier: iCSI+LP4U73QByjXN3nqQQPsnnYa/pKKSVt+9TpQu+U=
Subject key identifier: C2:5A:8B:3B:24:50:0C:07:67:C5:D9:84:00:97:0B:9B:1E:BD:CE:94
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584B377B05C15E880D6673A96B50
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa
Signing time: Tue 16 Sep 2025 19:25:02 +0000
ROA not before: Tue 16 Sep 2025 19:25:02 +0000
ROA not after: Mon 15 Dec 2025 20:25:02 +0000
asID: 54253
IP address blocks: 2603:c0f4:2000::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:37:7b:05:c1:5e:88:0d:66:73:a9:6b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 16 19:25:02 2025 GMT
Not After : Dec 15 20:25:02 2025 GMT
Subject: CN=98188537-c5dd-4480-9e0a-9fe678d70d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:30:2e:00:ff:f4:e1:60:e8:ce:de:e4:c2:
72:bb:b6:c9:70:ce:56:57:72:9b:e4:b6:8b:33:e9:
61:37:cd:c0:b9:9e:37:97:d3:d9:8b:86:f2:a4:03:
17:72:64:f5:9f:f0:6f:7f:06:a4:5b:21:fa:a7:7e:
f1:5d:c7:f8:51:a0:48:26:6d:e1:f0:09:87:66:f6:
5f:c3:56:58:29:62:0f:f9:fd:20:5c:0b:18:38:c5:
f6:b7:72:41:9d:68:30:fa:82:e2:3b:da:cf:3d:c1:
64:7f:4b:88:cb:a2:0a:c5:e1:46:3e:a6:4f:96:84:
a7:42:fc:e5:ee:1c:ea:b7:6f:61:4b:a0:85:0a:ec:
43:21:66:26:da:f4:65:1f:7c:59:c9:b1:65:53:20:
2a:5f:7b:ca:e7:fe:a4:04:da:ad:58:4a:33:c0:e6:
4b:01:8e:8c:05:b5:6f:36:bd:8e:b9:49:4c:13:c8:
29:08:9c:18:fc:14:e2:5b:3e:90:b5:f7:ff:84:4d:
b0:84:be:62:b1:5e:7a:dc:a2:9c:ef:e5:c8:76:85:
72:76:50:13:e7:29:3a:e6:eb:f7:fb:f3:59:d3:27:
1e:b9:90:5b:56:71:7a:14:ae:b4:e2:39:55:e6:69:
d2:35:d1:72:b3:c0:57:c0:27:ae:1a:cc:17:c1:89:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:8B:3B:24:50:0C:07:67:C5:D9:84:00:97:0B:9B:1E:BD:CE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a558d44-067a-30ea-be58-ab9bcb245d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c0f4:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:7c:e2:3d:34:ef:e9:c5:18:af:8d:1a:12:c7:68:7b:b7:ec:
c4:58:56:16:54:63:72:8b:1f:c5:61:dc:7d:4c:75:39:41:38:
96:66:22:e1:ee:52:dd:e2:95:4e:fe:9f:01:de:d8:55:26:f6:
d5:cf:26:39:71:1a:a5:f5:f2:f7:0a:e3:7b:a5:b9:c5:d2:b4:
3f:b4:0d:8e:d1:c4:6c:b8:5b:15:1b:52:a8:60:59:71:81:9b:
e5:5c:46:fe:9f:ac:ff:cf:95:56:fe:71:9a:75:60:c2:60:12:
dc:ff:8c:7e:b5:26:8d:07:a7:0c:9e:e8:b9:ae:e7:93:98:ee:
b4:49:7f:63:c0:f9:ec:90:ee:8b:ea:31:d7:c8:ab:95:a2:06:
dd:4a:3e:14:71:00:27:1f:95:c6:98:95:c0:af:79:7b:2c:68:
92:11:9a:29:36:79:07:24:cc:1a:2f:ba:23:de:20:12:dc:d3:
2a:55:57:df:76:94:40:c7:61:15:70:0c:4f:4b:56:a8:99:c1:
55:60:8a:10:92:6b:bb:bb:0f:2d:1e:c7:26:9e:1d:c3:c5:ce:
04:dd:03:a0:4c:e6:8a:7f:0e:73:6d:d9:2c:99:d1:dd:69:53:
2c:c7:8d:03:62:22:7c:3f:29:bc:58:d2:45:a8:0b:2c:48:3c:
57:42:0a:9d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs3ewXBXogNZnOpa1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDkxNjE5MjUwMloXDTI1MTIxNTIwMjUwMlowLzEtMCsGA1UEAxMk
OTgxODg1MzctYzVkZC00NDgwLTllMGEtOWZlNjc4ZDcwZDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtowLgD/9OFg6M7e5MJyu7bJcM5WV3Kb5LaL
M+lhN83AuZ43l9PZi4bypAMXcmT1n/BvfwakWyH6p37xXcf4UaBIJm3h8AmHZvZf
w1ZYKWIP+f0gXAsYOMX2t3JBnWgw+oLiO9rPPcFkf0uIy6IKxeFGPqZPloSnQvzl
7hzqt29hS6CFCuxDIWYm2vRlH3xZybFlUyAqX3vK5/6kBNqtWEozwOZLAY6MBbVv
Nr2OuUlME8gpCJwY/BTiWz6Qtff/hE2whL5isV563KKc7+XIdoVydlAT5yk65uv3
+/NZ0yceuZBbVnF6FK604jlV5mnSNdFys8BXwCeuGswXwYmDrwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMJaizskUAwHZ8XZhACXC5sevc6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmE1NThkNDQtMDY3YS0z
MGVhLWJlNTgtYWI5YmNiMjQ1ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA9CAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOHziPTTv6cUYr40aEsdoe7fsxFhWFlRjcosfxWHcfUx1OUE4lmYi
4e5S3eKVTv6fAd7YVSb21c8mOXEapfXy9wrje6W5xdK0P7QNjtHEbLhbFRtSqGBZ
cYGb5VxG/p+s/8+VVv5xmnVgwmAS3P+MfrUmjQenDJ7oua7nk5jutEl/Y8D57JDu
i+ox18irlaIG3Uo+FHEAJx+VxpiVwK95eyxokhGaKTZ5ByTMGi+6I94gEtzTKlVX
33aUQMdhFXAMT0tWqJnBVWCKEJJru7sPLR7HJp4dw8XOBN0DoEzmin8Oc23ZLJnR
3WlTLMeNA2IifD8pvFjSRagLLEg8V0IKnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:14 2025 by rpki-client