
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa
File: 0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa (raw, json)
Hash identifier: gxmajvw7LwSTzWTQXgQIDSdLQoG6rABWWtuE2cW+rJ8=
Subject key identifier: B6:3A:F2:77:A5:F6:F0:EB:46:7E:BC:92:0A:96:E4:49:DB:88:71:3A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D49743F23EB3DE10A3668
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 396608
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:49:74:3f:23:eb:3d:e1:0a:36:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=0b102a04-4c15-41e0-8f68-37556a2ad0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:c4:ae:16:03:fb:aa:9d:ef:bf:53:06:c8:
40:92:1e:ba:b0:11:e3:0c:27:7d:8e:0b:47:5b:ca:
a4:25:34:3f:97:d7:1f:56:b5:0c:1e:b2:4b:32:98:
17:06:dc:c1:03:9b:bd:81:10:90:a2:89:20:0b:bf:
49:25:d6:9b:4c:88:0b:ee:23:57:b8:9e:97:3e:db:
cf:17:a6:ef:5a:90:d6:11:f3:80:de:10:7f:f9:da:
a4:d9:e7:b1:57:02:8c:65:c6:35:2f:aa:99:9d:e6:
9c:9e:a4:ab:d7:de:98:0c:0f:d0:f7:64:34:b6:30:
ce:7e:4a:fc:44:ca:29:9f:20:35:e7:5b:7f:62:54:
97:8d:cc:ef:6c:ae:47:be:3e:47:d2:fd:d9:99:af:
a1:4d:e0:15:f6:0c:2d:52:d3:28:b1:32:9f:d4:b9:
f0:f9:01:09:8d:cb:88:ee:52:1c:6d:a1:24:b0:f9:
07:8c:6c:1c:d0:a3:80:5d:fa:d6:60:5b:4a:bf:f2:
19:e8:a0:d5:13:75:c3:da:70:12:b2:20:ee:a0:fe:
0e:df:0e:e9:e4:55:a7:f6:d4:2a:3b:0c:f5:b8:c8:
82:51:f8:03:c3:6f:2d:2f:13:f6:ea:35:1d:30:cd:
8f:cd:15:11:35:0e:81:fc:19:34:fc:4f:7d:58:ce:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:F2:77:A5:F6:F0:EB:46:7E:BC:92:0A:96:E4:49:DB:88:71:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:36:da:5f:ce:a7:21:f8:ac:ff:ed:72:79:6b:2e:1d:0f:b1:
49:bf:8b:36:26:dd:10:83:05:ed:36:8f:65:cc:a5:a6:4f:08:
d6:53:d4:90:b2:b9:4f:a0:95:99:ba:57:10:37:09:fd:06:8c:
d6:d1:a7:67:a5:a0:25:c1:43:69:82:c3:af:7b:b1:0a:24:e1:
2c:97:53:1f:27:37:d7:2d:b2:97:06:f5:6c:40:df:16:d7:4e:
ed:21:17:20:a0:a3:f1:c5:c0:8d:e2:28:0e:ca:0d:3d:ce:a3:
78:a5:2e:ec:58:64:13:3a:1b:da:12:35:25:0e:d7:68:d5:45:
c8:b5:c2:73:22:b1:7b:38:d9:3d:35:d6:7f:3b:41:87:72:a6:
56:af:b6:db:2f:36:0b:bd:64:e1:72:b4:63:3c:85:40:fd:a7:
13:bd:31:33:62:e0:04:63:35:cd:67:4b:e3:d9:0f:3c:7a:6e:
28:2b:30:bf:a9:7d:84:f7:64:ae:f4:43:bf:0c:23:76:c0:12:
c3:7f:54:10:1c:15:d0:b5:82:18:c6:37:76:d1:44:a3:76:df:
54:1d:13:1f:5c:69:61:d5:b8:4a:f5:37:c5:0f:ed:42:60:27:
f1:5f:43:a2:77:2f:9d:a2:26:dd:cc:d9:2d:54:61:58:65:a2:
71:70:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:35:56 2025 by rpki-client