
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d45030-bb02-3b3a-af86-83363c1bea2c.roa
File: 72d45030-bb02-3b3a-af86-83363c1bea2c.roa (raw, json)
Hash identifier: fyXNIgJyUxtUy4BtR6ofA2nswjBg8iQhoV3vClhSYAg=
Subject key identifier: D7:84:BA:6B:44:00:95:A7:5D:67:AE:D5:BE:82:64:E0:7D:7D:CE:2C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB02D17352234D9E248ABB720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d45030-bb02-3b3a-af86-83363c1bea2c.roa
Signing time: Thu 30 Oct 2025 01:00:30 +0000
ROA not before: Thu 30 Oct 2025 01:00:30 +0000
ROA not after: Wed 28 Jan 2026 02:00:30 +0000
asID: 396615
IP address blocks: 192.42.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b0:2d:17:35:22:34:d9:e2:48:ab:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 30 01:00:30 2025 GMT
Not After : Jan 28 02:00:30 2026 GMT
Subject: CN=0948b612-abed-4819-a86f-a56b502d9eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:71:35:4d:2c:2f:7c:b8:bc:40:7e:23:97:
b2:cf:17:5d:2c:c0:a3:25:31:2d:53:ce:8d:ed:05:
76:73:29:6e:8e:f1:d8:03:d1:6b:5b:85:ec:01:98:
57:cf:11:99:c9:38:50:61:5d:71:df:c9:9f:d9:6e:
40:61:8e:3f:7d:91:62:a0:30:74:18:85:57:09:0c:
44:4d:3e:07:91:39:52:40:e3:ef:60:22:43:10:d3:
49:98:b8:1b:13:46:2c:74:7d:6a:98:25:20:56:ed:
41:5a:22:29:4e:0d:79:b9:25:c1:b7:0c:7b:53:37:
f5:ad:e7:33:fc:40:13:ec:d7:7e:96:af:6f:6d:66:
7c:c0:c9:fc:a1:fe:3d:6f:97:ed:c7:84:af:1f:cc:
a5:54:2a:80:e7:e4:7c:98:58:37:67:f6:75:6a:f0:
d0:67:21:67:81:97:88:76:76:53:36:90:f2:ba:1f:
c2:b8:56:09:8c:5c:47:ce:cc:1d:1f:d5:92:be:42:
88:e0:f3:8f:f2:4d:6d:db:14:88:d8:04:9c:28:58:
aa:93:f9:09:fa:88:33:39:66:d2:90:8d:7a:b8:db:
91:f6:6c:2f:fe:fe:82:ac:54:27:0c:b9:c0:1a:18:
9c:bc:e1:55:fa:ad:fd:90:e9:6b:19:c1:9b:ea:54:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:BA:6B:44:00:95:A7:5D:67:AE:D5:BE:82:64:E0:7D:7D:CE:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d45030-bb02-3b3a-af86-83363c1bea2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:cb:0c:1b:41:a5:22:96:45:7c:bc:5f:fb:a4:59:5e:a7:40:
4c:0c:e9:e1:d3:4a:f2:e0:e5:bb:8d:a0:3b:98:9d:03:e4:fb:
7e:39:33:dc:fe:12:3a:23:1d:95:37:a3:10:d6:da:5b:cf:7d:
70:57:71:f0:07:f6:e0:5d:3d:a5:e9:ed:19:88:ea:9a:c7:6f:
e3:d7:a2:61:26:45:46:1c:e1:56:c6:bf:43:a5:ee:3c:65:dc:
04:a4:54:97:20:68:8a:37:60:f7:4a:1b:87:f6:e5:f1:41:ce:
f3:f6:71:d6:6c:e2:8b:82:d9:41:a2:09:0e:32:b5:e8:65:0c:
b9:1d:d7:42:cd:e6:9c:41:ca:15:2f:d8:0f:37:bd:40:e9:5c:
23:c5:86:9d:78:79:0b:bd:72:5b:c6:d2:5f:c3:12:3c:0f:ee:
6c:71:27:c8:dc:44:c0:a8:f4:b8:d4:a0:75:d0:12:d6:af:01:
1c:30:22:34:a2:47:d6:24:6e:54:67:dd:a1:05:02:8e:bd:ce:
21:c5:72:00:43:8f:67:74:59:a9:37:23:ab:1a:49:6a:63:e6:
7c:ba:60:cd:6a:dc:82:d8:67:83:87:f7:5e:9f:50:92:68:fd:
d2:f4:78:ae:c7:fc:01:b9:3b:d5:a3:23:00:44:a8:d7:8b:c3:
09:15:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:13:25 2025 by rpki-client