
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa
File: 084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa (raw, json)
Hash identifier: 4PyVouq6WM7TEHlUBeynIIafJx0FpQfrpnelrUqwypc=
Subject key identifier: 8B:20:AA:F9:64:13:76:AD:FC:50:B9:50:97:C3:9B:26:EC:83:67:05
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B0A11962A7AB37A3E989A4600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa
Signing time: Sun 31 Aug 2025 13:00:42 +0000
ROA not before: Sun 31 Aug 2025 13:00:42 +0000
ROA not after: Sat 29 Nov 2025 14:00:42 +0000
asID: 396573
IP address blocks: 2001:502:1ca1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0a:11:96:2a:7a:b3:7a:3e:98:9a:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 31 13:00:42 2025 GMT
Not After : Nov 29 14:00:42 2025 GMT
Subject: CN=ae24f868-150d-4b68-9a2f-0387f5d17528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:7f:d2:ec:ed:e3:1e:03:25:48:ed:43:a6:
cb:6a:42:b2:d1:24:49:88:68:6a:74:5d:d8:7b:8b:
93:5d:6c:3a:e4:a5:13:47:b3:65:af:0a:6c:1c:d9:
2d:bf:3a:53:12:b8:fc:9b:b2:af:d9:f1:72:b3:60:
8e:05:c3:a2:31:3b:49:cc:96:ea:10:87:ce:71:47:
63:8b:37:a7:f0:d2:f3:1e:2d:b8:6a:d7:42:a2:5d:
27:45:b0:f2:06:a2:f9:8d:6c:5b:97:e8:30:bf:42:
2d:8f:01:74:70:0c:a5:58:0d:2b:5c:b2:34:9a:c8:
d6:a9:85:e9:6c:5a:20:44:d2:01:b2:d8:35:34:80:
04:6c:f7:28:38:92:0d:3a:f3:44:d9:54:ad:f6:2d:
38:d5:b5:71:d7:01:f1:28:f9:89:f9:84:6b:39:18:
7e:17:2e:04:82:7b:68:fa:4d:72:cb:59:71:9e:c1:
3b:0b:b8:62:6a:9f:5c:fc:4e:b2:cd:d1:79:6f:58:
85:5f:9f:5d:48:b3:e5:e5:0a:3f:3a:fe:eb:08:a0:
5f:39:1b:96:30:d0:fb:31:b1:a7:fa:38:03:73:ef:
a1:9f:12:89:06:f9:9a:b3:fd:48:83:78:5e:5c:a8:
32:e3:bc:fb:e3:63:35:b9:ea:3a:e0:50:ac:ea:f3:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:20:AA:F9:64:13:76:AD:FC:50:B9:50:97:C3:9B:26:EC:83:67:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:3d:5c:98:5a:df:e0:d4:ee:3b:94:c6:02:b1:8a:19:c7:95:
41:b6:e0:a2:9d:83:c4:d6:64:05:65:6b:38:65:07:e7:0b:80:
92:ba:94:e8:e3:52:3d:a3:5a:f7:54:b4:b5:ff:91:79:8f:a9:
ac:43:67:86:78:0c:d6:2d:d2:07:dd:60:c4:54:e4:5c:1c:e5:
0f:9c:51:7d:64:c4:51:5b:f8:92:72:83:38:a5:67:22:5f:4d:
fc:30:f1:c5:fd:05:2b:37:8a:ec:49:f1:2d:f8:10:e8:92:6e:
a2:3f:29:8b:48:d7:56:28:8b:f6:d8:19:94:6f:04:9b:da:ce:
d1:02:ad:7f:21:bb:3d:27:6a:97:ba:be:df:54:42:12:d8:a6:
8d:e9:e8:87:01:aa:8b:b7:91:8e:01:fc:b3:4b:2e:5f:4f:07:
cb:0f:cc:67:83:05:e1:69:b2:98:93:8c:44:0a:a6:02:61:3b:
b9:5a:58:1e:a2:15:c2:0d:88:a4:62:39:0e:58:b0:f7:93:12:
f4:08:dd:5a:dd:1a:44:dc:37:75:9e:3e:ab:41:3b:16:a6:60:
45:0a:73:36:a8:54:be:83:1c:b4:90:52:56:7c:64:af:f6:38:
a3:9b:1b:d5:f8:2a:b8:f2:db:3b:67:d9:46:c1:d3:86:1a:19:
d5:04:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:16:37 2025 by rpki-client