
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa
File: 67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa (raw, json)
Hash identifier: Td+CLSGYIf6py44yv1wmFG8z8rQcskYkeSE4WoThg5E=
Subject key identifier: 4D:27:4D:C0:BD:B0:DC:9C:DA:6A:BE:69:42:56:1C:E6:7A:D0:F6:F3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D4C2D6F5D1F125D96D300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 397206
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:4c:2d:6f:5d:1f:12:5d:96:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=fc006f75-ca40-44f6-b2af-3755f53aacaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:4e:a4:e0:c6:62:e5:33:9f:6c:f8:71:30:
44:58:83:2c:45:7f:3b:d8:ee:61:08:1a:1c:db:71:
e2:f7:ba:fb:74:46:81:1e:fa:03:d2:d7:fb:08:41:
9d:54:4d:1e:c7:2f:fa:ee:55:bc:be:ed:2c:29:15:
73:2e:5e:89:65:5c:d4:62:74:9b:ac:a9:8e:60:f5:
36:80:aa:c4:f2:ca:d3:4a:07:f9:49:88:ce:bb:8f:
24:61:a8:85:b0:d9:03:91:86:3a:0f:31:5a:da:e0:
4d:ba:1d:20:4c:8a:f0:6e:12:d7:b9:f8:8c:3f:5c:
41:39:85:45:2e:e8:1d:fa:c7:7d:12:19:25:33:2f:
96:84:17:8c:bc:2d:a5:5d:4c:b7:d9:03:02:73:73:
89:c1:a4:48:9d:26:f3:01:be:53:e3:93:73:c9:f2:
5f:cc:53:cd:ff:c9:a9:b6:ea:50:05:95:c8:9d:f6:
75:04:a5:b0:67:e6:21:11:b3:cc:b8:c7:89:31:d0:
02:f3:61:53:45:d7:dd:11:de:ed:78:07:fd:b7:3c:
05:e9:09:ff:f9:2e:5f:7a:ff:ce:96:13:fa:f2:79:
f0:b8:80:df:01:8d:5b:c9:29:b2:17:9b:23:aa:48:
35:c2:b4:f5:6b:76:43:fa:3b:9c:00:48:39:48:eb:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:4D:C0:BD:B0:DC:9C:DA:6A:BE:69:42:56:1C:E6:7A:D0:F6:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:4a:c4:b6:09:12:64:f9:5d:9e:44:2c:41:aa:5b:0f:db:92:
54:ba:fb:8d:e6:56:b9:45:35:90:91:4d:64:b8:84:cc:39:8e:
43:7d:c6:78:36:e5:84:16:1f:57:ed:61:fd:06:cb:09:8a:36:
f2:55:83:a0:3a:dc:a4:b5:97:b0:6c:fb:38:fa:57:57:e5:09:
40:b6:1a:dd:56:10:a8:10:83:f5:03:8a:57:40:fc:8e:28:31:
d3:06:ac:e7:ed:40:63:0e:7b:dc:d3:73:07:4d:ba:5f:c1:28:
68:7a:40:0f:d2:ea:31:a1:4f:61:75:85:76:38:8f:aa:ab:11:
7c:6a:f1:65:c2:68:37:5e:dd:aa:0e:27:ed:a7:9c:63:3f:79:
6b:ed:5c:42:30:cc:25:01:06:5a:f2:5d:b6:c2:14:80:f5:a0:
4c:24:73:f4:6d:13:b1:54:d1:8f:5c:b5:43:f2:a0:8d:ba:50:
3c:3d:89:16:a8:e8:27:bd:2e:b6:eb:c3:a0:c9:c5:d5:9c:dc:
c9:57:a5:39:88:e2:6c:a5:6b:ec:40:80:8e:c8:81:1c:f9:fa:
a6:b7:43:ac:08:82:50:f8:d5:f7:2f:75:d2:05:8b:90:7c:b8:
32:be:9c:64:e9:43:4a:e4:ce:a4:68:86:14:e3:af:b0:40:7d:
7d:3a:29:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:20 2025 by rpki-client