
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
File: b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa (raw, json)
Hash identifier: dBnJJpDZaiBZjolvY7slr58cFcsvd4eq5hHz0IPG5UY=
Subject key identifier: 52:0D:23:76:B5:F7:97:CD:1A:83:AD:ED:7F:C0:42:44:F5:01:52:3E
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584AF5213362B01590B3A0A5BDC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
Signing time: Sun 24 Aug 2025 01:00:33 +0000
ROA not before: Sun 24 Aug 2025 01:00:33 +0000
ROA not after: Sat 22 Nov 2025 02:00:33 +0000
asID: 395831
IP address blocks: 2606:7bc0:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f5:21:33:62:b0:15:90:b3:a0:a5:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Aug 24 01:00:33 2025 GMT
Not After : Nov 22 02:00:33 2025 GMT
Subject: CN=bd9101b6-7861-4f01-aca7-1f74ee156a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:9d:1b:7a:fd:71:b9:5b:bf:63:d3:f4:70:
8e:e8:d7:8d:30:15:ed:ed:89:89:23:3c:91:99:3c:
2a:70:b9:79:38:cd:6c:74:37:04:31:4d:3a:b4:99:
66:c3:a6:98:00:85:19:3f:d0:9b:cb:25:62:a5:1e:
33:58:1a:f4:e0:d8:cc:2d:b7:0f:52:15:d6:8b:1e:
21:c4:79:09:8d:d3:16:bf:f1:31:23:da:d0:e1:86:
df:ae:0d:ba:1c:22:0b:16:2d:a1:7e:87:9f:78:0c:
13:68:54:43:de:50:e8:32:84:24:86:a3:f8:31:d9:
b0:af:16:ef:15:3e:fe:e1:32:c9:de:ce:21:62:00:
8a:aa:22:a8:e8:1d:38:49:03:5b:1a:51:32:ac:d5:
cd:eb:f8:36:6f:3a:c1:00:06:54:30:26:f1:88:4c:
d5:08:70:24:5d:6d:1a:41:44:18:d3:e5:3f:6d:e8:
ce:9c:cd:4c:88:ca:7e:59:16:74:3f:8d:59:b6:c1:
76:05:25:75:40:67:01:64:99:02:59:9a:69:6d:f5:
01:22:4f:ee:61:96:cd:eb:2b:76:6b:07:ea:d9:9a:
d9:ca:3e:73:97:8d:c0:1c:b8:8d:00:95:0b:9a:94:
83:ca:48:f7:b9:b6:1a:fd:65:4e:6c:37:45:68:70:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:23:76:B5:F7:97:CD:1A:83:AD:ED:7F:C0:42:44:F5:01:52:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1080::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:0a:5e:b2:9d:e2:4a:39:3a:ff:91:34:3f:7b:53:ac:56:a2:
39:b1:b7:80:2c:26:ff:42:e9:76:dd:89:c4:4a:27:f5:69:30:
f9:ad:1c:39:a8:fa:e9:5f:44:70:30:18:3a:d2:6d:65:f5:a5:
06:c7:3a:08:da:13:b9:6c:f9:13:70:e6:d6:24:d5:75:82:6e:
46:d0:db:04:7d:df:2a:33:93:6b:af:10:80:c0:9a:25:d3:e9:
f0:4e:52:d0:6f:23:0e:1d:c4:4e:05:cf:55:40:8f:62:28:d7:
b3:97:a0:5b:b8:97:0c:2d:75:41:f1:f5:3b:dd:6e:08:af:56:
11:04:dc:c0:84:66:7b:25:57:de:de:20:0f:b3:22:4f:1f:97:
b8:17:52:bc:b9:d5:93:1b:f6:7b:81:a6:fa:a0:2b:7b:cc:d9:
09:dc:d0:d7:6c:0c:7f:9b:33:3a:8e:58:64:73:a7:83:cc:b1:
c3:62:58:05:34:70:9c:d1:9f:4d:aa:21:ae:87:e6:5a:c3:16:
1a:d5:36:5d:ea:b3:45:44:ff:36:23:e3:1a:96:e6:70:cd:b8:
6d:e0:29:c6:37:63:31:25:56:e8:3c:f6:7c:b9:76:74:cd:a6:
06:06:fd:ce:d3:88:e7:20:bf:96:d1:56:1c:3e:4f:b0:27:fb:
75:c3:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:04 2025 by rpki-client