
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa
File: f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa (raw, json)
Hash identifier: Xv8b+dSh6FRGw1tEF1Sf5ESqRY0hhKBQDHbBIR6gyv4=
Subject key identifier: 06:09:42:27:B4:64:09:0A:B5:8F:5A:F6:42:6A:45:24:AF:6D:7A:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BB88D4DD55600C4F541BA5580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 396577
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:4d:d5:56:00:c4:f5:41:ba:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=4a259b92-b557-4918-b7d2-51a89de42d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:c1:0a:a9:56:ec:02:87:a5:df:66:13:b7:
b7:01:fe:68:0a:ef:27:e2:27:20:2d:86:6d:50:78:
d3:f3:4d:fa:66:ab:54:de:ed:a1:67:00:5e:a9:a7:
69:0b:5c:d1:10:f7:24:60:e9:da:de:a6:81:6b:aa:
5c:e2:75:32:0c:e8:49:79:1d:d6:d7:52:8b:21:69:
ad:5f:4f:82:67:f3:ab:88:1e:c1:9d:9a:41:f5:bc:
1d:be:b9:9a:29:8a:25:d7:34:a6:a5:a7:19:ba:0a:
a2:d7:8b:1e:c8:44:e7:0b:4d:f8:45:89:5c:d1:e7:
fe:13:b0:ef:a5:54:69:fe:4a:6a:a4:73:af:a5:25:
e5:a3:ea:f2:46:bd:c9:d3:08:9c:57:b2:3c:a2:1f:
e4:6b:62:44:7b:e7:32:0d:7e:af:87:69:d2:e2:1a:
ce:e8:2f:c1:10:75:88:61:cf:ba:94:1c:ab:68:d9:
98:94:2d:5a:4f:b1:23:df:b5:47:7e:7f:d3:54:71:
c1:ab:e4:0e:4c:54:f7:d6:de:58:93:d9:4d:a3:59:
5e:6e:cd:fc:3f:f0:d9:51:5c:df:85:c0:f7:66:38:
27:37:48:1b:fa:ff:35:2b:77:4c:6d:8b:51:2d:aa:
52:43:29:09:b7:6c:1e:c4:3e:21:a6:90:06:1b:5e:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:42:27:B4:64:09:0A:B5:8F:5A:F6:42:6A:45:24:AF:6D:7A:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:a4:4a:50:33:6a:5d:d1:4b:47:a2:f4:14:ea:d1:25:1e:87:
2b:76:2f:2b:5a:99:30:8f:7b:b0:29:ee:fe:74:e7:00:ee:48:
05:62:24:47:d9:be:9a:37:9f:f2:25:88:24:c8:d4:58:b3:44:
c7:6c:72:51:e4:97:07:30:dd:f7:01:b8:27:17:38:e3:f2:f8:
a5:7b:2d:af:cd:45:b6:79:06:f0:27:25:e8:39:e3:3e:08:6b:
3e:78:8d:e7:36:38:13:6e:ce:2e:0e:4e:96:ca:23:e2:13:43:
f4:ff:10:19:aa:dc:9c:1f:cc:1b:3a:de:2e:f7:3f:ec:19:07:
f2:6d:5b:e4:e1:d0:3d:5d:8a:3c:dd:f8:b5:49:e2:fb:a0:e1:
3a:7f:3d:a4:dd:bb:e3:48:f6:c9:47:9e:44:73:85:dd:bd:03:
f6:04:b3:0e:1f:ba:9b:7e:eb:68:f5:ab:c7:2d:9c:fe:9e:5d:
d0:18:30:be:1b:bc:a5:9c:db:68:6b:36:92:df:46:c6:ed:32:
95:b9:1e:a8:e9:b2:55:5a:54:86:28:54:85:6a:25:b0:40:2a:
24:9a:99:87:cc:9e:e6:a2:86:22:11:59:c8:52:58:0b:98:64:
8b:dc:02:75:f8:d6:16:f0:6b:ce:e9:f4:be:78:ae:fa:d4:a2:
9a:f5:0c:eb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jU3VVgDE9UG6VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NGEyNTliOTItYjU1Ny00OTE4LWI3ZDItNTFhODlkZTQyZDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq97BCqlW7AKHpd9mE7e3Af5oCu8n4icgLYZt
UHjT8036ZqtU3u2hZwBeqadpC1zREPckYOna3qaBa6pc4nUyDOhJeR3W11KLIWmt
X0+CZ/OriB7BnZpB9bwdvrmaKYol1zSmpacZugqi14seyETnC034RYlc0ef+E7Dv
pVRp/kpqpHOvpSXlo+ryRr3J0wicV7I8oh/ka2JEe+cyDX6vh2nS4hrO6C/BEHWI
Yc+6lByraNmYlC1aT7Ej37VHfn/TVHHBq+QOTFT31t5Yk9lNo1lebs38P/DZUVzf
hcD3ZjgnN0gb+v81K3dMbYtRLapSQykJt2wexD4hppAGG15l7QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAYJQie0ZAkKtY9a9kJqRSSvbXpFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjcyMmNiY2UtOWRiYi0z
NGExLTliZWEtNTRjYTJiMmU0OWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAMpEpQM2pd0UtHovQU6tElHocrdi8rWpkwj3uw
Ke7+dOcA7kgFYiRH2b6aN5/yJYgkyNRYs0THbHJR5JcHMN33AbgnFzjj8viley2v
zUW2eQbwJyXoOeM+CGs+eI3nNjgTbs4uDk6WyiPiE0P0/xAZqtycH8wbOt4u9z/s
GQfybVvk4dA9XYo83fi1SeL7oOE6fz2k3bvjSPbJR55Ec4XdvQP2BLMOH7qbfuto
9avHLZz+nl3QGDC+G7ylnNtoazaS30bG7TKVuR6o6bJVWlSGKFSFaiWwQCokmpmH
zJ7mooYiEVnIUlgLmGSL3AJ1+NYW8GvO6fS+eK761KKa9Qzr
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:25 2025 by rpki-client