
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a60c765a-7f01-3363-af6b-4c4c2f468cef.roa
File: a60c765a-7f01-3363-af6b-4c4c2f468cef.roa (raw, json)
Hash identifier: /9kWb2davh2fPpa6yyZP0kXqZJPzgpyyVEgUoSZKvqQ=
Subject key identifier: C3:0E:6D:6B:5D:6C:AE:FB:2C:DE:CC:70:68:45:FC:EB:82:61:A1:83
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584AEC0956ACB6BAE0BC77E19E80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a60c765a-7f01-3363-af6b-4c4c2f468cef.roa
Signing time: Wed 20 Aug 2025 18:50:21 +0000
ROA not before: Wed 20 Aug 2025 18:50:21 +0000
ROA not after: Tue 18 Nov 2025 19:50:21 +0000
asID: 31898
IP address blocks: 2603:c002:a700::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:ec:09:56:ac:b6:ba:e0:bc:77:e1:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 20 18:50:21 2025 GMT
Not After : Nov 18 19:50:21 2025 GMT
Subject: CN=e4a5bd06-2a7e-497e-a48c-fbec82ced80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:76:35:37:52:45:28:4f:7d:22:64:2e:b3:
2b:42:e4:b2:8f:6a:f6:82:26:2a:8d:dc:83:46:8d:
1d:d4:00:0c:ea:4a:4e:3a:59:e4:42:4b:c6:48:9a:
34:72:9a:f6:2f:53:94:c0:74:ae:99:c1:2b:41:ee:
af:ca:b2:b6:e5:4b:f9:8b:3f:91:f1:83:1c:a9:37:
5d:f6:2a:06:e8:c3:b0:5a:22:73:02:49:58:87:6f:
44:14:43:ca:36:9b:ab:7f:d3:47:b8:39:99:62:e2:
8b:e1:d8:b3:16:31:33:28:da:5d:af:6a:3b:f0:f3:
66:d9:16:a2:9c:e6:f1:6d:e7:c4:f2:ef:f4:9c:fd:
c7:e0:5b:db:84:e8:2b:17:90:d2:00:de:60:f9:c5:
b0:f6:5c:61:54:48:93:46:4c:c6:65:13:83:ea:44:
d3:f7:c7:ec:49:e0:18:84:e2:61:89:22:a0:56:23:
89:97:80:59:ea:16:6c:a4:39:51:9b:77:d8:2f:03:
0d:2a:73:f6:4f:14:9b:6f:93:6d:62:f8:8c:24:91:
f2:b4:f7:4a:d2:46:61:67:ad:b9:1b:57:69:ff:d6:
c7:35:bf:43:52:ae:6c:96:da:ee:af:81:e7:0a:3f:
c3:2c:e8:e2:73:4f:0e:c2:c8:13:75:ca:10:b4:f6:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:6D:6B:5D:6C:AE:FB:2C:DE:CC:70:68:45:FC:EB:82:61:A1:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a60c765a-7f01-3363-af6b-4c4c2f468cef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:a700::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ce:73:25:62:4f:13:c1:9f:bc:0f:0d:46:a7:a4:04:0b:7a:
ea:95:c1:f7:20:bd:d8:21:f4:dc:f6:85:ee:72:e9:86:39:b2:
ea:ee:8b:95:87:e6:61:9a:02:23:2f:09:c8:96:f0:ba:31:14:
54:e1:dc:f0:47:18:13:b3:d1:c0:d4:72:21:e3:27:c7:b4:68:
51:02:4c:41:4d:2b:33:e1:f1:8d:97:de:4f:82:49:96:b1:52:
60:2e:b6:3d:d3:61:10:2e:bd:e7:4b:36:a2:f6:ca:55:7d:d0:
0a:cc:10:08:0f:9c:a8:a1:17:8e:ec:8c:f3:99:86:77:17:62:
70:f2:bd:74:d0:5e:07:36:48:8f:ce:b7:e9:40:a7:0d:4b:1c:
7f:1a:75:11:af:cc:b6:e7:96:6d:20:9f:3b:71:62:a5:13:6e:
84:2a:13:3c:24:9a:93:79:51:c9:00:03:0a:fe:51:59:24:d7:
d4:af:39:66:2f:c2:41:18:ab:05:15:e0:5a:ce:60:c3:d8:a1:
60:04:14:5d:c4:de:d0:cc:cf:da:13:bc:a6:72:e1:0a:be:3e:
2c:b4:f3:f8:c9:18:bb:a5:c3:97:de:a8:a2:d5:c1:a8:46:9f:
b3:55:83:59:9b:bf:9f:c9:03:ca:73:9b:c0:2c:2c:c5:99:e8:
9b:de:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:59:04 2025 by rpki-client