
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7394e4d-56dc-3e94-975b-06f3bd526f40.roa
File: b7394e4d-56dc-3e94-975b-06f3bd526f40.roa (raw, json)
Hash identifier: 3AuCZVCjqZcYtgVi1lDyjwXDHl0AKCL+oPAzjNXsfcQ=
Subject key identifier: E8:F7:73:B6:01:39:7C:B9:64:8F:07:49:E7:82:77:3E:1F:26:EF:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BC270D837A9296BF74CDDB200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7394e4d-56dc-3e94-975b-06f3bd526f40.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 397207
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:d8:37:a9:29:6b:f7:4c:dd:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=51c3bdb5-7e67-407e-91a8-1a16dc3fe782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:b8:38:e9:f1:ff:01:4d:1c:0d:a3:56:b1:
75:00:e5:8f:77:9b:57:a7:63:0c:37:3c:ab:55:55:
ad:33:7e:71:9c:67:d4:d6:b0:82:05:c0:24:a8:0c:
bf:79:26:13:9a:fa:50:7b:16:da:0e:f8:a1:b9:d4:
db:f0:1d:61:74:51:0e:03:c9:cf:dd:81:df:97:1c:
72:d0:91:96:da:e7:48:e0:8e:50:71:a4:74:13:2b:
42:21:51:99:1a:68:a2:eb:ed:07:a6:09:d8:0a:06:
9a:38:ff:5f:ad:53:c4:95:0d:a3:40:67:ca:33:cc:
d2:82:d7:30:19:2e:d5:a9:53:ee:65:80:c8:05:f3:
b2:1a:ef:51:56:33:45:fe:8a:b6:56:42:7b:e3:ae:
d8:48:2c:f3:1e:67:94:99:78:fb:5c:1c:39:a5:db:
77:3c:0e:ee:d0:9e:1e:4f:62:be:0b:5f:89:6f:3e:
0e:a9:94:f6:63:a4:88:23:60:3e:f2:32:4e:0c:93:
45:17:66:a9:61:94:9f:ce:03:77:db:87:6e:6e:b7:
66:d6:01:16:16:ba:51:85:46:26:32:f2:b0:9a:06:
21:7f:56:cf:78:d2:6c:98:c1:cb:1a:8e:43:00:56:
40:14:6d:a2:4a:e2:00:60:3e:b6:6b:88:c7:07:3c:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:73:B6:01:39:7C:B9:64:8F:07:49:E7:82:77:3E:1F:26:EF:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7394e4d-56dc-3e94-975b-06f3bd526f40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:32:dd:8f:f9:c8:8a:61:14:8d:ca:f9:30:9c:29:ff:15:60:
69:99:68:3c:9a:f4:a1:46:d0:3d:e6:d9:b7:cc:8b:54:8c:b0:
1f:4c:6d:f8:66:eb:8b:4e:9b:2e:4a:1d:03:ff:a9:41:29:47:
85:7e:98:68:87:21:9b:c1:56:55:3a:bf:cc:ee:d3:1f:b9:a7:
77:9a:4d:3b:a8:94:57:cd:b3:e4:8a:20:d7:6a:ce:8d:c4:a7:
ed:33:6a:f2:84:5b:47:94:03:0e:e5:da:ce:08:05:a5:f9:a9:
dc:17:99:e6:97:e1:86:cc:e2:10:dc:de:b9:28:cd:09:cc:d6:
c1:29:72:3f:0b:2c:ce:66:3f:51:a6:9a:8e:c5:a4:c4:17:5f:
9a:ff:ec:2c:27:c2:0c:0c:7b:60:ed:76:9c:27:d4:bd:84:15:
bb:27:c7:8d:1e:68:3a:6b:25:8d:9b:a8:b7:26:bc:4b:24:bf:
a1:79:f1:32:7e:eb:00:e2:d2:bb:6d:de:6e:a6:44:40:49:8b:
36:54:99:bf:9b:6b:d7:65:0a:03:44:73:35:a3:72:c2:6d:e3:
45:2f:2f:ce:80:ff:99:6c:4d:56:3a:ae:d9:bd:ae:05:d8:22:
67:45:a2:c2:04:a4:20:39:a8:5b:79:c1:0c:59:bc:e3:54:c3:
d3:a8:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:49:06 2025 by rpki-client