
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890b8d7a-9202-3ffc-9145-1641b74d5f83.roa
File: 890b8d7a-9202-3ffc-9145-1641b74d5f83.roa (raw, json)
Hash identifier: oujmCt9miuMDIGx4Pdv4VBDWErtCzK8ej0Cluzrf6aI=
Subject key identifier: 5D:29:73:77:DB:64:01:83:49:E5:99:EF:8E:5E:E1:2C:B0:F5:E6:AA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D4C9359B60C88F7530900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890b8d7a-9202-3ffc-9145-1641b74d5f83.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 396609
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:4c:93:59:b6:0c:88:f7:53:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=3918ec08-d896-4810-8f51-7cc7efde1c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:46:dc:d1:53:b2:e1:2d:84:d1:f5:b7:e7:
34:e8:03:dc:99:bc:a6:be:17:78:18:cf:43:64:bb:
6a:9e:43:17:56:38:de:e0:14:f2:97:c9:ad:67:96:
bc:0f:9b:be:e3:35:58:82:6b:db:80:0d:cb:bc:e3:
03:3d:f8:44:20:29:81:64:17:d0:94:c7:da:85:c4:
1f:29:79:5e:38:93:af:cc:3f:e7:35:79:d5:53:c9:
62:31:a8:2c:65:3d:9e:4d:ed:04:0a:d1:a4:8f:7c:
f3:48:84:25:68:8b:3b:8b:2b:f7:8c:f5:08:d3:18:
14:08:ad:02:d6:56:e2:63:83:bf:23:6c:71:81:7e:
45:84:21:d1:df:52:5d:48:d4:50:11:4a:66:99:a7:
43:56:cb:cd:98:9c:6d:9e:3a:48:71:aa:2e:f7:f8:
6d:ea:26:7d:15:ad:c8:80:0b:2e:4b:87:2a:3b:b5:
dd:7e:08:02:9c:a1:72:8c:a5:35:9c:62:5a:14:95:
72:23:f4:ee:c9:ea:a3:e4:82:35:65:23:49:67:ad:
8c:6f:6f:60:98:89:23:95:12:cf:62:f0:f6:b4:4e:
c0:bf:9b:2b:3f:18:be:6e:9e:20:42:3e:c0:3e:69:
b0:0a:7b:cc:19:d7:d8:4b:cf:bc:72:e0:15:27:50:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:73:77:DB:64:01:83:49:E5:99:EF:8E:5E:E1:2C:B0:F5:E6:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890b8d7a-9202-3ffc-9145-1641b74d5f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:46:dc:de:08:0d:c0:53:26:e1:b0:2c:6f:6f:6e:78:9a:34:
2e:a7:86:05:66:a4:14:67:dd:e2:12:1c:12:ad:2e:b4:3d:5d:
d6:0d:93:c6:11:8b:49:5c:56:42:aa:4c:8e:b0:5f:1d:93:65:
82:50:92:94:8e:05:09:b1:e5:17:6b:3d:ec:d3:1b:9e:65:7d:
ab:37:9b:73:88:2e:d1:6e:de:51:09:80:59:fc:70:5f:f7:be:
0c:ff:7d:21:12:c6:77:5f:10:ba:e7:82:33:09:c7:79:d2:9d:
0e:96:d3:81:c8:80:0b:69:08:24:09:c0:0f:dd:ad:b8:e7:ce:
4a:12:5f:6c:17:20:3d:fb:19:e8:eb:b4:2a:0c:e1:58:02:46:
6a:0b:37:a6:4e:8c:f8:d3:97:66:81:80:3b:8a:ba:fa:e5:44:
e0:fb:f3:7b:46:6b:6a:78:1b:17:e2:f8:b7:28:8f:66:92:be:
1d:ae:ed:48:2b:8d:57:1c:88:22:56:4f:4e:9a:14:f8:7c:1e:
c5:29:a0:b2:de:03:41:4a:3a:16:75:65:74:11:07:a9:6f:8f:
88:7c:d6:39:af:90:e8:2e:22:4f:ca:a9:bc:b4:1a:78:9d:3b:
0b:7b:5d:a4:eb:5e:b3:d7:da:27:81:5a:e8:ed:db:cb:88:ee:
31:cc:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:12:17 2025 by rpki-client