
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa
File: 679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa (raw, json)
Hash identifier: hrD5n9SNMROBJtEZCz5L239FrfPzWSkD5hweM8GSyyA=
Subject key identifier: 13:41:59:F2:2A:CA:9F:27:51:5F:8B:5E:2B:BF:D1:22:93:19:72:19
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D47EB39BC58DEE21D2B60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 397195
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:47:eb:39:bc:58:de:e2:1d:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=d2e92f2e-e627-49d8-945d-515fc4755257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:89:6b:15:a9:2b:c5:9b:31:fc:64:54:d3:
90:1f:c4:46:c1:96:41:bd:e0:bd:f3:e1:99:2c:ca:
fd:1c:38:ee:9a:bc:32:83:a8:a3:09:38:5e:99:89:
bb:11:bf:4e:f3:12:a7:a8:48:43:59:0b:1a:7c:fc:
84:e5:74:27:31:6e:7d:7e:23:fe:c0:9b:ae:f5:27:
0b:f2:c4:42:a6:88:9d:4f:09:ec:5a:4f:21:ee:31:
34:0c:62:8e:76:f6:42:21:d3:de:46:4c:f3:c4:ac:
d8:52:43:43:15:04:00:2c:cb:a6:6e:0f:0a:f0:8b:
2d:14:a9:f2:3c:8b:07:c5:58:5b:af:1a:21:36:3a:
3e:df:41:3d:12:d6:d5:6a:0b:ab:13:ac:4a:a7:b5:
ab:e4:ae:45:ca:2a:e2:8c:77:09:88:48:82:db:3b:
47:56:5b:08:e6:59:56:a2:22:11:90:44:d5:1e:8d:
94:f6:1d:55:a2:1f:31:dc:56:6c:de:45:ca:01:89:
a6:44:88:71:f1:c5:b9:66:d8:19:62:94:a4:5d:fc:
32:c1:ba:b8:ad:cd:b0:e8:c6:6e:2b:c4:23:38:1a:
3c:37:63:89:e2:b2:cf:a8:28:d4:65:19:c4:73:e9:
45:48:59:ad:e4:2b:50:12:81:79:1b:29:19:86:b3:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:59:F2:2A:CA:9F:27:51:5F:8B:5E:2B:BF:D1:22:93:19:72:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:19:8d:d6:e7:da:7e:0e:15:fa:9b:17:89:30:51:d1:bb:d2:
72:e6:fd:f4:22:b2:90:20:f4:22:54:57:7a:e2:8b:6c:87:fd:
47:0f:a5:59:62:dc:66:2c:3a:43:72:a4:bd:9d:3a:b0:ce:e1:
ac:76:0f:60:18:a8:1b:b4:cc:08:36:81:43:db:ac:85:1c:de:
bd:5c:bd:11:2f:1a:0d:3e:56:3f:be:0b:74:40:66:0b:18:0b:
29:63:3a:f2:bc:98:88:49:6c:b9:18:4c:a1:5a:83:c9:b2:a4:
df:00:f8:5f:65:05:98:dc:ba:60:18:ec:5b:4a:5a:19:2f:1c:
1d:2e:f9:2e:f8:dd:9f:d8:34:dd:fe:83:eb:99:e0:a9:ed:7a:
3f:ec:5f:6b:d9:be:2d:d4:3e:ba:c7:fa:aa:e2:e2:2a:af:89:
80:23:68:2c:6e:d8:36:d7:f1:db:92:0b:a1:f8:c3:1a:7e:ec:
14:24:41:86:f0:c0:1c:de:c9:d0:a5:bc:90:fa:9d:79:26:d4:
e1:3b:5a:91:b9:45:df:24:48:f7:63:e6:b5:30:dc:43:5d:10:
24:95:8a:c5:a0:78:2a:2f:82:cf:b8:60:89:86:39:06:94:b8:
bf:f7:90:8c:ad:83:3c:00:ba:4d:2e:39:ec:58:6f:26:f8:39:
da:05:f6:bc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUfrObxY3uIdK2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDJlOTJmMmUtZTYyNy00OWQ4LTk0NWQtNTE1ZmM0NzU1MjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5+JaxWpK8WbMfxkVNOQH8RGwZZBveC98+GZ
LMr9HDjumrwyg6ijCThemYm7Eb9O8xKnqEhDWQsafPyE5XQnMW59fiP+wJuu9ScL
8sRCpoidTwnsWk8h7jE0DGKOdvZCIdPeRkzzxKzYUkNDFQQALMumbg8K8IstFKny
PIsHxVhbrxohNjo+30E9EtbVagurE6xKp7Wr5K5FyirijHcJiEiC2ztHVlsI5llW
oiIRkETVHo2U9h1Voh8x3FZs3kXKAYmmRIhx8cW5ZtgZYpSkXfwywbq4rc2w6MZu
K8QjOBo8N2OJ4rLPqCjUZRnEc+lFSFmt5CtQEoF5GykZhrOx4wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBNBWfIqyp8nUV+LXiu/0SKTGXIZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjc5YzMwYmMtNmFjMy0z
ZjczLTk0MzktYmNiODViZDFhYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBvGY3W59p+DhX6mxeJMFHRu9Jy5v30IrKQIPQi
VFd64otsh/1HD6VZYtxmLDpDcqS9nTqwzuGsdg9gGKgbtMwINoFD26yFHN69XL0R
LxoNPlY/vgt0QGYLGAspYzryvJiISWy5GEyhWoPJsqTfAPhfZQWY3LpgGOxbSloZ
LxwdLvku+N2f2DTd/oPrmeCp7Xo/7F9r2b4t1D66x/qq4uIqr4mAI2gsbtg21/Hb
kguh+MMafuwUJEGG8MAc3snQpbyQ+p15JtThO1qRuUXfJEj3Y+a1MNxDXRAklYrF
oHgqL4LPuGCJhjkGlLi/95CMrYM8ALpNLjnsWG8m+DnaBfa8
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:10:56 2025 by rpki-client