
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa
File: 0f44003e-48cb-3fe5-97c3-09015e401420.roa (raw, json)
Hash identifier: RIBhvmUrzmoPYO4HmiN7BXVVSD47GBClARUqtP55U8o=
Subject key identifier: F3:DF:E1:E4:8C:24:91:23:03:3B:F8:37:59:B9:6F:47:72:2A:D3:63
Certificate issuer: /CN=ce78c233-fea8-412e-b7ae-1080a457c01e
Certificate serial: 010D0C9F4328584AEBEAF9B48FF6F5B2AB8BB380
Authority key identifier: 4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa
Signing time: Wed 20 Aug 2025 17:48:19 +0000
ROA not before: Wed 20 Aug 2025 17:48:19 +0000
ROA not after: Tue 18 Nov 2025 18:48:19 +0000
asID: 14618
IP address blocks: 2602:f669::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:eb:ea:f9:b4:8f:f6:f5:b2:ab:8b:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce78c233-fea8-412e-b7ae-1080a457c01e
Validity
Not Before: Aug 20 17:48:19 2025 GMT
Not After : Nov 18 18:48:19 2025 GMT
Subject: CN=41818be3-b4e0-4055-ad04-e57a731d6868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:0d:db:b5:0a:c8:79:f5:1c:ea:e7:01:60:
e7:7e:ce:f3:a6:9f:be:43:21:40:2e:5c:cf:3f:97:
da:ac:0c:e6:99:a8:70:b7:13:90:cf:74:81:73:d8:
b5:ec:91:9f:d1:3e:ba:c2:ed:64:b3:ff:60:eb:cb:
e2:99:da:fb:49:5a:31:a6:04:44:58:67:29:93:10:
fd:fa:c4:80:de:7c:93:10:bd:d7:d8:17:40:67:6c:
85:75:6d:ef:81:90:15:1e:b4:51:0c:07:32:7a:c6:
cd:01:36:80:2c:d8:c3:ed:01:93:44:2e:b2:f6:98:
99:2d:56:54:93:e2:fe:33:9d:8d:fc:33:6a:67:09:
76:ce:e4:8c:fe:85:99:43:37:33:62:09:a0:de:43:
d1:47:d0:9b:98:34:26:f5:db:e7:0c:28:fc:2e:3d:
c8:a8:3f:57:fd:82:e4:83:33:50:69:d1:cf:0f:b1:
6b:9e:f7:41:64:e8:8a:b6:98:e3:68:f6:4d:6b:17:
3d:36:77:13:6a:28:aa:89:cc:c0:7c:09:00:ea:15:
b2:e0:9b:20:7b:ba:ef:a0:b1:cd:e2:58:c9:ef:02:
08:bb:c0:35:46:70:b7:75:88:91:c6:ca:16:76:74:
ce:c4:d7:66:61:07:34:e2:6b:6b:7d:51:42:d4:0d:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DF:E1:E4:8C:24:91:23:03:3B:F8:37:59:B9:6F:47:72:2A:D3:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl
X509v3 Authority Key Identifier:
keyid:4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f669::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:85:7f:2a:c9:63:e0:a9:84:a4:87:6f:6c:81:13:70:cc:ee:
d5:82:4b:da:8a:17:1f:82:1c:b3:34:3e:84:64:04:f4:68:2a:
76:5b:ad:16:d2:39:54:43:f1:08:97:ff:e0:4e:ed:41:38:c0:
c1:94:e1:d8:41:c7:cd:3f:ed:43:48:4f:e0:c5:87:ad:f7:cf:
c6:41:59:37:ee:15:1c:9b:e5:7b:9c:a0:bf:6f:1a:16:5c:12:
9d:de:19:32:d3:38:69:f2:06:bc:96:1c:7c:25:b9:91:b7:53:
61:59:8c:32:9a:de:c6:7a:44:09:fd:6e:eb:17:7b:82:19:5a:
0c:98:c7:7b:6a:b9:7f:00:e1:68:4c:4c:72:7a:fc:c3:34:d0:
33:87:7b:ef:7d:2f:aa:ac:71:b5:77:5c:60:06:b9:08:c6:cb:
e3:8d:0d:72:48:1a:56:57:16:55:17:ed:47:47:98:40:71:9d:
f1:94:91:c5:fd:2c:d6:97:cf:20:f3:14:9c:f3:38:77:a5:11:
5f:06:92:ed:3f:65:6d:cb:05:7d:9e:85:c2:30:2d:2b:9d:58:
59:7c:2d:ca:5d:d7:a3:b4:ac:4c:0d:4b:bb:f1:42:86:19:06:
a0:9b:67:62:13:bc:72:57:e5:6c:1d:2e:95:a0:b5:f0:75:cf:
d7:c3:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:28 2025 by rpki-client