
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d095ba75-5040-3d21-b4e2-269411907702.roa
File: d095ba75-5040-3d21-b4e2-269411907702.roa (raw, json)
Hash identifier: ldJ7tVKWCOoKllpXFe7TMfbptdsjggE5ytpF0WFBOlw=
Subject key identifier: 2E:F9:62:F0:3D:CF:79:BF:6B:EE:76:88:82:FA:76:68:32:73:FF:22
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BC270D434693C1281EC1BC080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d095ba75-5040-3d21-b4e2-269411907702.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 36619
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:d4:34:69:3c:12:81:ec:1b:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=de4eeb21-f482-461b-93cf-e4fa236311a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:1b:d3:1c:22:84:46:3f:d0:cb:ca:3a:82:
fa:e9:b3:5c:46:de:f5:3f:81:0b:6d:ab:ef:65:35:
67:05:70:4c:72:fa:bd:63:b7:c7:c9:81:0f:62:59:
a9:e7:fc:f0:8f:79:cc:17:f2:c9:ad:e3:86:04:5d:
b5:57:75:f7:55:ab:08:06:32:a2:64:7c:12:21:e5:
de:95:fb:d4:36:84:fa:0e:5a:f5:83:f8:aa:05:6a:
3b:ef:9f:e0:2a:67:57:f3:cf:e5:11:c8:e9:fa:17:
05:ef:b4:3b:4c:77:c0:f1:23:26:ff:54:07:1e:f7:
ff:c0:4a:4d:58:95:23:aa:89:63:d7:24:9e:ba:8c:
c2:d6:a0:77:6a:9a:4b:5f:63:e5:26:c5:46:4d:83:
cb:8a:1f:da:4f:13:1c:06:b1:28:f2:8c:f4:4b:13:
bd:fa:ea:57:3b:09:94:f4:94:52:88:af:b8:71:cb:
c5:ec:cf:79:20:36:fa:88:35:5f:20:e8:23:4f:a6:
80:05:ef:a9:4b:b3:0e:80:01:c6:f8:0b:cd:69:e1:
be:2a:d2:59:60:08:1d:6b:d8:81:89:24:fa:8a:1a:
8d:e1:ae:fd:10:8e:5f:7b:fd:35:e5:23:19:3e:9b:
7d:a1:f9:7b:b5:4e:02:da:ce:f5:35:c7:83:18:54:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:62:F0:3D:CF:79:BF:6B:EE:76:88:82:FA:76:68:32:73:FF:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d095ba75-5040-3d21-b4e2-269411907702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d3:97:6a:85:a4:f5:e1:e5:e4:ac:4b:4c:55:31:83:10:18:
3e:53:6b:78:a8:8b:74:c6:91:1e:f0:13:83:ea:b9:37:6b:c8:
42:b2:8c:a1:94:fd:6f:ef:b5:3a:fe:93:15:dd:f8:d6:28:1f:
80:88:9f:f8:d0:7a:70:b1:02:42:ee:7a:88:aa:bc:68:ca:11:
b5:a4:05:ac:e8:93:90:26:e7:2e:03:9d:9b:e8:e0:ef:64:a8:
66:0a:fb:4e:01:7d:1e:ce:d0:25:38:a2:ab:38:fe:c5:e8:21:
ed:c4:43:5a:b9:1d:9e:ee:d4:c3:53:8b:75:3c:69:96:6a:ab:
93:3f:a4:5a:e9:b7:a7:7f:56:6c:81:7f:42:f7:a8:f9:b1:3b:
e1:f2:33:a3:5f:af:3c:bd:df:82:f4:78:06:0f:5b:d7:39:0f:
ef:45:bd:94:99:bf:80:20:48:c5:7e:64:70:12:25:91:7b:32:
c1:50:54:d7:20:88:b0:83:ee:03:2a:eb:f4:ce:aa:86:7f:e6:
74:cc:12:8f:74:c1:37:67:cf:90:76:8b:1a:16:01:4d:ee:72:
fa:e2:c4:66:8f:15:1d:09:30:c4:1f:c8:25:37:76:00:80:de:
78:6c:bc:37:54:f6:51:28:f5:be:74:38:6c:d8:25:38:d0:f9:
40:37:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:46 2025 by rpki-client