
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/b5784807-f51a-3658-bbff-8bbca2851962.roa
File: b5784807-f51a-3658-bbff-8bbca2851962.roa (raw, json)
Hash identifier: kjKACS1zOPjMhc14grE+XKJI9NJoVwBXGmUP9dfjsX0=
Subject key identifier: D1:13:2B:35:5B:07:1F:45:BC:CE:B1:11:6A:FF:5C:36:13:1E:66:EB
Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial: 010D0C9F4328584B1AD179839AFF32CA022E9280
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/b5784807-f51a-3658-bbff-8bbca2851962.roa
Signing time: Sat 06 Sep 2025 13:00:41 +0000
ROA not before: Sat 06 Sep 2025 13:00:41 +0000
ROA not after: Fri 05 Dec 2025 14:00:41 +0000
asID: 843
IP address blocks: 2607:f698:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1a:d1:79:83:9a:ff:32:ca:02:2e:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Validity
Not Before: Sep 6 13:00:41 2025 GMT
Not After : Dec 5 14:00:41 2025 GMT
Subject: CN=eb3f490b-fa51-4d59-bb0c-e53a6033869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:ab:78:d2:f3:f2:7d:92:75:86:5c:98:d8:
ad:c6:57:81:38:5e:a9:3a:07:d8:81:a2:c3:0c:f8:
5e:b0:b7:86:85:8d:01:42:fc:ad:dc:ff:95:1b:24:
e9:0a:95:9d:99:18:86:ec:43:11:c1:2f:02:96:65:
b1:ac:85:40:32:5c:38:10:bf:e5:70:d2:f0:b6:fe:
2b:01:a9:2b:39:b0:46:a8:0e:be:13:d9:dc:96:70:
7e:78:88:4f:e3:2e:f8:f3:39:8d:55:23:c5:c9:49:
12:df:91:2e:2d:6f:a1:60:a2:c7:f4:02:5b:b3:fe:
21:01:20:bf:82:6e:bc:4b:2c:79:53:37:89:2e:81:
8d:d0:60:f7:ce:5c:92:bf:31:55:91:f5:6c:86:ee:
11:af:bf:69:32:09:df:7a:5b:e1:f3:ba:a2:b2:bd:
75:96:fc:1f:2f:ae:94:50:bc:8c:45:8a:99:4b:c2:
f7:f9:1b:25:9d:37:d6:dd:34:25:90:ef:08:83:98:
6d:d8:0c:1a:33:64:aa:34:f2:24:4c:92:36:d4:3f:
44:f4:0b:4f:c9:e5:d1:86:11:ae:46:7d:11:99:2d:
c0:6d:7c:32:3a:c3:b1:73:44:2b:83:ad:d8:d7:60:
d1:bb:be:32:6e:03:a6:4d:f0:f4:84:f0:04:4b:99:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:13:2B:35:5B:07:1F:45:BC:CE:B1:11:6A:FF:5C:36:13:1E:66:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/b5784807-f51a-3658-bbff-8bbca2851962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
X509v3 Authority Key Identifier:
keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f698:ffff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:2b:63:44:93:ff:96:83:d5:e6:02:59:71:9d:53:c5:c2:9d:
bd:f2:3c:bf:27:86:34:72:86:7d:f7:0e:20:5d:09:80:9f:17:
9d:7b:34:b2:9b:19:36:a5:a7:c2:d1:39:e4:d1:3c:48:29:5b:
fe:67:62:81:d3:03:2f:3c:85:7f:9f:79:42:27:57:68:c4:d1:
75:7a:06:a1:75:7d:bd:db:61:86:c7:e8:f3:2b:ea:ae:66:06:
4b:14:04:75:b0:b0:fe:aa:3e:02:83:60:d3:44:b0:e2:34:b6:
04:07:25:de:69:ec:44:9d:f9:c9:58:e1:67:2b:ec:1e:95:3c:
db:a3:5f:19:ef:4a:65:8a:df:81:1b:5a:2f:61:e5:b5:cb:1f:
88:a8:4e:22:2a:40:0f:ab:4b:36:6d:5b:d0:f0:3b:82:64:f3:
09:9e:73:60:dd:c8:99:7a:4e:1f:46:1c:2d:22:e4:36:ee:86:
15:42:07:05:38:06:47:5a:f6:0b:ea:3c:eb:26:ab:79:84:79:
36:f8:fb:cc:6e:39:d6:87:6d:a8:95:01:0a:ca:64:6a:47:a7:
5f:14:51:95:6e:d9:ab:75:b7:8e:d8:46:f0:4c:8a:7d:ed:95:
69:e4:07:4b:5f:29:c4:67:c2:58:60:be:64:19:fa:1c:00:6d:
22:f7:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:32:13 2025 by rpki-client