
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57241840-7779-393e-aa0e-8657fbe304a3.roa
File: 57241840-7779-393e-aa0e-8657fbe304a3.roa (raw, json)
Hash identifier: iz2QpVWuylpHmKlOgdNgD2L1BsAn36IdEqyLcw3dYTQ=
Subject key identifier: 02:BB:4E:B9:BC:51:0A:D6:C6:37:80:96:DA:E5:8F:8E:F2:33:43:74
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D46EB5B481952CD9C52E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57241840-7779-393e-aa0e-8657fbe304a3.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 396567
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:46:eb:5b:48:19:52:cd:9c:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=4cfd67e0-5109-4c84-9bca-11b4c197bcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:71:33:d3:63:70:37:e4:f4:87:fb:70:d1:
19:da:24:c8:1a:ce:d4:70:77:53:e7:d3:f6:ad:57:
98:44:bd:a4:5a:84:4c:20:ce:7f:d2:47:9c:29:b4:
cb:d5:fb:38:c1:4f:ae:9f:7b:11:39:bc:8b:9d:00:
3a:c2:86:cd:8b:2e:cd:c6:d2:a5:92:7f:81:ac:50:
21:09:49:64:8e:8c:82:31:e0:0e:13:e8:0f:c0:d0:
49:fc:44:94:bf:97:09:40:61:0d:cf:48:db:a5:27:
d6:2b:43:a3:e3:64:72:09:07:ab:b8:7f:1e:db:fc:
59:37:1d:60:8f:55:70:d6:bb:4e:62:7e:87:6e:8f:
d4:08:91:f5:d6:51:28:12:52:1f:11:4f:0f:c6:e3:
d7:2d:49:38:9a:9d:85:fd:58:2f:7f:02:0d:c2:db:
ee:09:43:75:0f:9a:0a:30:28:da:38:e7:a3:2f:aa:
f5:b7:90:da:b6:4f:8b:c2:de:08:af:95:f2:d5:0b:
ec:a9:dc:6c:21:fa:3d:4e:53:71:f4:6e:8a:50:e5:
73:cb:1a:95:3f:1d:27:8f:65:54:6c:9c:0d:8e:6d:
6d:da:1d:f1:cf:b1:f3:ee:5c:46:1a:92:2a:14:07:
b6:b0:fd:6e:ce:6e:2c:5f:4e:bf:c1:c9:1f:75:3f:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:4E:B9:BC:51:0A:D6:C6:37:80:96:DA:E5:8F:8E:F2:33:43:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57241840-7779-393e-aa0e-8657fbe304a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:c1:cd:33:db:7a:44:c3:28:35:13:70:e5:8a:ad:78:d1:9b:
d4:92:84:88:23:d7:b8:54:24:71:f1:03:bb:51:9d:54:b2:0d:
ea:68:3f:7e:5b:57:e8:e3:e5:7e:9b:8e:72:26:cb:e5:d8:b5:
64:a4:77:99:ad:72:28:3d:af:09:13:45:9e:4b:18:40:37:15:
6c:9f:13:80:ba:1d:69:94:0f:26:f5:46:ea:f5:56:ab:c4:0a:
34:39:59:a4:5d:92:d3:2d:f5:6d:a3:35:5a:62:fd:a7:b5:b3:
22:9f:3f:c4:46:89:08:be:38:7b:79:ab:96:a2:24:ba:3c:f9:
26:45:e7:6b:d0:a3:42:d1:83:64:ca:9e:b4:25:3c:45:df:f3:
8c:56:94:62:d2:66:c6:f3:0f:3c:be:18:44:6d:a6:24:41:53:
70:ee:b4:9a:f2:6b:c9:f0:3d:3a:d6:ad:c0:d5:7c:7e:82:65:
bf:89:cf:03:4f:21:6e:c8:5c:1d:2c:5f:d9:13:66:4f:61:15:
3b:7c:83:96:1e:5e:30:b2:eb:0c:99:3b:8d:a4:bc:c5:e6:78:
c0:4e:92:3a:30:5e:56:72:e2:9d:ba:b5:6c:61:60:49:f1:2e:
a9:19:17:b4:66:e7:f4:7c:b9:8e:5c:7d:41:1d:09:7c:57:9f:
58:51:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:26 2025 by rpki-client