
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6975b1c1-af06-3124-a003-cbf5e2b25deb.roa
File: 6975b1c1-af06-3124-a003-cbf5e2b25deb.roa (raw, json)
Hash identifier: Sx+drwkURwvyWSIE+IQ5y0m9qzolIrs7Nn775he8cCo=
Subject key identifier: A0:AE:80:B7:9E:AF:25:84:35:B2:DB:E3:FB:FA:34:E0:30:9F:3D:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D4DF88C101113DB5F068E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6975b1c1-af06-3124-a003-cbf5e2b25deb.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 397200
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:4d:f8:8c:10:11:13:db:5f:06:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=94a78c26-78af-43ec-af4a-1c900719198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:51:04:00:88:71:8f:38:10:e9:4e:f5:fa:
3b:42:75:c5:21:ff:02:df:dc:24:19:3a:9d:86:95:
1f:b1:34:c6:32:37:ea:60:95:2b:e0:7f:45:52:71:
56:86:cc:2d:ca:fb:0d:ad:a5:ba:6c:5c:87:f4:1a:
ee:22:b5:a5:07:c8:3f:4f:30:24:4a:86:19:7a:e2:
d8:1e:77:a9:b9:da:08:f4:83:eb:58:62:fc:c2:99:
c3:77:4a:c8:2b:9e:ad:db:15:e3:59:bc:df:85:97:
b2:5e:f3:33:f7:79:a6:13:dc:29:5d:91:69:68:23:
16:a4:5a:44:e8:de:d3:ee:97:a8:55:df:78:e6:f5:
ec:7a:e8:b3:4c:16:89:bb:2c:ca:48:7f:e9:cf:f9:
03:a9:c7:eb:1f:61:18:b9:34:e8:89:a2:5b:9e:d6:
87:10:e3:0c:be:aa:44:2a:8b:2a:51:72:53:55:9c:
ce:bd:2c:6b:75:a1:0d:d7:7e:fe:9a:a3:68:5a:20:
e4:60:5b:9f:f3:da:ef:5f:f4:66:eb:5b:8d:16:ab:
af:7a:df:76:9a:06:1f:87:c1:44:d4:9e:f6:a0:46:
2b:97:7f:78:a3:35:b6:59:02:1c:a8:f8:27:d7:e7:
88:a2:23:b5:ed:ab:b9:51:a6:04:36:db:42:65:5d:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:80:B7:9E:AF:25:84:35:B2:DB:E3:FB:FA:34:E0:30:9F:3D:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6975b1c1-af06-3124-a003-cbf5e2b25deb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:40:3f:47:1e:b7:81:99:d1:ee:a3:77:43:a1:f3:9f:62:d6:
a7:2a:67:01:42:9d:26:18:05:8a:a6:e5:eb:32:7a:7e:52:53:
6f:03:24:fa:c0:c1:73:c1:05:d4:0b:17:a4:29:92:ef:0a:e8:
2d:09:19:b1:d3:3a:cd:e3:39:88:62:cb:06:16:65:c0:84:5f:
5c:74:e5:fb:d7:b0:51:47:a8:31:f7:32:24:40:0b:c1:bc:e1:
7a:d6:6f:25:97:9b:c9:34:71:2b:a0:34:92:b3:ad:68:44:f5:
f8:57:25:43:38:c7:86:e1:3e:fe:4e:f6:ee:90:ad:85:cb:89:
d4:ca:48:d5:3c:83:fe:98:8c:14:38:4a:90:5e:01:99:0e:46:
86:cc:ee:2f:58:97:0c:17:bc:dc:30:bd:dc:eb:61:0d:56:79:
f9:26:98:d4:0d:a7:57:4a:76:7c:df:b0:e7:ff:37:69:4e:c8:
d6:3b:13:f3:ca:cd:48:79:f8:c9:24:a5:46:e5:d0:19:df:9e:
dd:48:0d:7d:72:fb:08:76:94:80:55:72:70:64:a0:c4:0d:50:
37:f7:42:b9:84:6a:93:17:27:eb:74:c8:41:2f:81:62:f1:e1:
35:39:1a:fb:42:aa:22:b7:17:c2:6a:ac:bc:55:39:e0:a8:10:
89:2e:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:49:32 2025 by rpki-client