
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2de37ee-a655-3240-a582-2b311f795081.roa
File: d2de37ee-a655-3240-a582-2b311f795081.roa (raw, json)
Hash identifier: 5QHWXW8wzpE5ME5wd2R59PN9KsnU85NFEM4u9WSqSZk=
Subject key identifier: 19:62:BB:29:C0:1C:8E:CC:CC:42:06:AE:40:43:26:83:87:B3:79:63
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BC270CF64B71B6BA109336220
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2de37ee-a655-3240-a582-2b311f795081.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 396576
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:cf:64:b7:1b:6b:a1:09:33:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=7530bb2d-65c3-4109-a8d7-21bf365d1bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f3:5b:c2:af:b4:62:2d:b6:4a:a0:e2:bb:9a:
d6:bc:e5:9e:27:22:b7:cf:04:47:ec:97:75:ca:c7:
4f:c8:a1:00:6a:a2:26:96:aa:ef:d1:54:ba:a7:cb:
72:a6:59:b6:61:e9:e6:80:a1:9c:c1:b0:2d:c7:22:
ce:79:87:f5:ab:31:6a:60:c7:c4:1c:6c:fa:2b:3f:
8b:55:e3:88:9a:c5:72:e6:31:93:a3:b7:a4:95:4e:
82:36:79:96:82:28:f3:a2:70:97:8d:5a:4a:35:31:
ff:ab:55:75:f4:31:2e:94:4d:e4:37:c1:6f:15:47:
af:07:b8:35:32:58:33:bd:00:6a:10:88:f4:c7:e6:
92:a9:1d:e7:a0:d4:9b:1c:94:d5:48:6e:10:45:ce:
a0:19:6e:10:c9:6d:94:93:18:f5:06:27:13:dd:31:
36:fa:f3:82:a5:23:d0:09:b0:09:eb:c2:57:f0:03:
ba:f7:95:29:f4:e5:e8:a2:da:76:9f:ff:75:76:4e:
0e:80:b9:54:f6:9e:10:27:8f:56:2b:de:20:6b:ee:
50:92:34:74:3d:25:87:b7:15:f1:d6:93:8b:c3:20:
e3:f6:f9:3a:a3:bf:24:56:d6:ce:5c:bd:65:4d:81:
a1:42:92:b3:81:c6:e4:8e:9c:07:4d:60:cd:f4:e3:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:BB:29:C0:1C:8E:CC:CC:42:06:AE:40:43:26:83:87:B3:79:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2de37ee-a655-3240-a582-2b311f795081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:31:4c:6f:fe:15:0e:2c:3d:14:6e:71:aa:47:e1:99:15:29:
3e:be:8d:f2:8d:56:97:19:31:da:ef:e3:49:6c:bb:cc:24:24:
89:25:1a:ca:d3:25:47:7f:67:57:f8:76:b6:0e:10:a9:ed:87:
84:1b:bd:fa:48:fd:e7:78:b5:f6:3d:c8:35:48:af:14:35:43:
50:8e:92:82:56:68:95:8e:e5:37:94:52:d6:78:ed:d4:c0:60:
59:f8:52:f6:60:02:a1:7f:7f:d0:ed:23:01:0a:4c:34:2f:00:
97:fd:6d:03:21:f9:d4:99:05:c8:fd:b9:78:3a:81:f2:46:21:
50:33:b1:56:d9:4f:70:91:0c:0c:cb:c2:64:e7:82:82:d3:6c:
40:79:6b:8d:d1:9c:9e:65:98:ae:a9:aa:8b:09:7e:10:2f:28:
f0:63:d2:a4:af:71:04:0a:bc:2c:cb:86:e5:07:42:42:4a:20:
79:c4:7f:70:fb:64:96:09:ec:43:a5:57:64:13:65:5f:e6:1c:
c1:0e:a5:08:ea:71:33:a8:ef:26:38:39:9d:28:c2:4e:c5:a1:
31:a8:91:aa:8c:7c:f3:5c:3f:85:7f:f3:9e:5f:54:39:d1:da:
b6:b9:91:3c:2a:ee:68:20:0e:77:b9:34:fe:7f:eb:95:b7:ca:
a8:47:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:19:28 2025 by rpki-client