
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f23f07-abdb-38d3-ab38-301c241dd221.roa
File: 89f23f07-abdb-38d3-ab38-301c241dd221.roa (raw, json)
Hash identifier: IKGpzA0RHiYsEEsf/ETbxgtvYX57jeKB9kbcXVZxrzg=
Subject key identifier: 13:A0:06:D2:77:E0:37:E0:E1:EA:EC:86:96:27:F8:4D:93:78:96:7E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BC270ACB5A8B2962C6D078B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f23f07-abdb-38d3-ab38-301c241dd221.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 396551
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:ac:b5:a8:b2:96:2c:6d:07:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=afaf46e3-e8d0-421f-8225-35c733a5981e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:11:8d:e5:dd:f3:1e:a4:42:f0:07:5a:d9:
a5:ce:9a:46:94:ea:ea:d2:8e:37:09:b9:9c:a6:f8:
0e:c9:45:84:d7:a8:0e:9f:ac:50:01:4a:d4:d3:3e:
9f:45:6b:a3:55:bc:5a:31:d1:e5:22:b1:4f:09:45:
2a:f6:90:9d:4d:e2:72:d2:d6:a2:21:1f:29:ff:25:
bf:39:68:7b:bc:80:ca:26:2b:8c:71:41:c3:ab:2e:
70:15:dc:30:dd:3b:8c:38:79:1a:41:93:05:75:7c:
69:ef:02:33:cd:70:08:a4:b4:09:81:d2:51:14:bc:
24:8d:29:87:82:a5:ac:4e:7d:4c:bf:da:55:f1:c5:
18:69:68:68:77:95:09:0a:fc:12:7a:67:f4:04:9a:
7f:25:f1:b0:7e:62:b7:d3:94:fe:5b:ea:72:ca:f5:
15:e1:8a:cb:99:35:93:e3:14:5d:01:a7:36:be:0b:
68:7d:b1:6f:75:5a:38:3d:f1:5f:4e:f8:e2:11:dd:
51:9c:27:f8:89:80:f2:49:a5:10:24:54:fe:08:3c:
e8:af:d5:26:fb:56:90:8e:89:6a:76:d2:23:21:54:
71:41:d1:14:e0:b3:95:aa:16:2e:c6:ac:cd:b1:f6:
fd:96:a8:a5:e5:34:bb:83:a6:b3:86:3a:df:1d:05:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:06:D2:77:E0:37:E0:E1:EA:EC:86:96:27:F8:4D:93:78:96:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f23f07-abdb-38d3-ab38-301c241dd221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:59:9b:e2:0a:05:e6:41:fc:36:5d:0d:72:11:3e:b1:cf:91:
69:e2:2c:7b:64:e9:4e:d8:29:89:cc:c8:f7:c6:28:5c:86:83:
85:e0:b0:ee:82:04:35:38:a5:f5:7e:73:bf:a4:f3:80:a9:2b:
94:9d:b9:c3:6c:5b:f0:0d:ce:cb:ad:26:b3:b5:3a:e4:ff:3c:
0d:fa:0c:57:1b:23:b4:b3:86:97:fc:8b:59:28:ea:6e:69:f3:
32:13:9e:64:76:5a:a9:30:5b:7f:60:73:04:8e:80:bc:9d:e6:
2c:a5:4d:ff:ff:99:97:bb:11:e0:65:5e:7d:14:14:69:2b:c1:
eb:5b:ea:f5:e6:73:3b:c3:22:96:36:31:e0:13:37:1c:99:10:
66:a7:28:4f:3d:3e:2a:1f:9f:df:c2:a3:08:70:6a:90:84:69:
18:b6:85:ba:a9:37:f4:c7:cb:94:b2:9b:a1:85:7b:6a:e5:d6:
68:88:ed:b7:c9:4c:68:71:03:20:73:09:7b:7c:18:46:cd:12:
bf:be:8f:cf:6b:68:de:47:60:86:30:c8:6c:fa:df:94:4b:23:
55:f2:43:25:3a:bd:08:62:cf:29:45:ff:63:9d:00:e2:99:8f:
23:2b:7d:28:fb:73:92:d4:94:66:82:5d:ec:3b:cc:8d:58:e5:
9f:2f:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:51:53 2025 by rpki-client