
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477dc74-eaf2-3705-b909-1d06cff0fdb8.roa
File: 3477dc74-eaf2-3705-b909-1d06cff0fdb8.roa (raw, json)
Hash identifier: VPBn+atDv31YVOwJfaA52Az3wi3DeORL7rG/ekGUlGc=
Subject key identifier: DD:DB:64:C6:36:D2:F9:50:72:93:40:D3:D6:FD:5A:02:57:61:76:59
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D4B37D34F1EBFD34EDCA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477dc74-eaf2-3705-b909-1d06cff0fdb8.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 397196
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:4b:37:d3:4f:1e:bf:d3:4e:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=9c455e68-56b0-469d-b4f5-c998e063cc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:14:09:d1:5f:65:e5:69:ca:8b:8a:fb:c8:
9d:66:c2:d8:1a:64:2a:77:2c:52:c5:4d:40:32:f0:
63:6a:6a:c9:0a:b0:db:8e:eb:be:ca:86:ba:ec:ca:
b5:b0:a8:50:5d:c8:39:51:aa:15:93:8a:75:27:52:
40:30:07:a6:f3:48:15:25:7c:c8:21:a9:01:9f:0b:
b1:ae:39:fd:90:45:13:24:37:ca:4a:02:75:48:2c:
56:46:82:c2:55:ee:10:39:95:c7:8a:17:7a:c9:64:
81:72:ed:b6:7d:10:25:a5:83:cc:1e:3c:df:3c:bd:
de:a0:26:54:4e:d7:c9:71:f8:61:ee:08:8f:48:fc:
a3:6a:60:d6:a4:21:e5:4a:77:48:6d:5c:45:ea:94:
aa:08:a0:d9:3b:bb:aa:3e:d5:49:3f:f3:f4:0c:70:
4c:e2:e9:fa:2a:0d:c3:4a:57:8e:30:09:ee:b9:80:
9d:52:b0:24:64:ef:45:86:1f:7e:b2:58:bf:77:d6:
eb:9d:be:37:0e:b8:86:78:43:76:ac:84:08:06:7a:
6e:04:89:06:5a:64:73:f6:fb:eb:97:9e:94:c2:3f:
0d:b7:0a:02:bd:0c:cb:13:34:93:06:e4:dd:cf:9f:
ed:0a:ac:16:bf:e8:a1:1e:23:36:17:e5:42:9c:bf:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DB:64:C6:36:D2:F9:50:72:93:40:D3:D6:FD:5A:02:57:61:76:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477dc74-eaf2-3705-b909-1d06cff0fdb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:8e:76:d1:14:23:3b:f5:39:4f:a4:ff:d0:48:ba:95:fc:44:
17:62:ca:39:12:00:93:2b:9f:b1:51:2a:42:ba:48:3a:03:05:
3a:04:a7:01:54:9c:a7:ed:eb:ad:c2:7b:6b:38:ba:02:e8:be:
d7:59:d4:25:8a:d8:4a:22:c8:28:30:a6:01:02:9f:1f:18:a8:
94:05:0a:9b:41:94:a4:16:d6:88:82:d7:47:06:8a:73:70:ed:
0a:45:02:5d:e5:72:2c:c7:d3:10:3f:50:8b:eb:98:0e:b2:f5:
c0:be:0d:70:cf:57:9c:55:de:92:29:65:1a:0a:e1:f9:7d:bb:
e6:52:49:17:46:d5:a9:7e:7a:bc:4d:45:c2:5d:aa:36:cd:0b:
40:39:6f:ac:ca:6b:d4:71:e1:12:79:2b:a0:2b:ec:ef:44:91:
bb:d5:3b:13:f8:4b:69:30:d9:9e:0e:8a:9d:b5:af:f1:69:d9:
01:c5:09:82:f5:a4:73:7b:48:37:4e:60:ab:13:ff:ab:da:3b:
cb:33:88:ee:3e:42:75:ac:dd:0a:f8:67:e4:ba:18:a0:ff:ac:
66:d5:6a:cf:12:83:ad:81:0c:20:9c:f7:8f:98:57:e0:12:6d:
04:7a:63:60:c2:8d:bb:83:1a:b5:7b:61:e9:ae:c8:39:36:04:
a7:f3:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:45 2025 by rpki-client