
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b59c8f7-20c4-3052-a642-1395a6870f68.roa
File: 0b59c8f7-20c4-3052-a642-1395a6870f68.roa (raw, json)
Hash identifier: nVJpcYc//QChbU1i6kfJ72zS3NwDYK2WB/UV880xyWE=
Subject key identifier: 65:13:E6:33:C4:65:C5:58:FD:82:55:3A:00:03:D7:05:D0:90:7A:DC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B9CA22AFD32B312B75D4FD020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b59c8f7-20c4-3052-a642-1395a6870f68.roa
Signing time: Thu 23 Oct 2025 01:00:31 +0000
ROA not before: Thu 23 Oct 2025 01:00:31 +0000
ROA not after: Wed 21 Jan 2026 02:00:31 +0000
asID: 396563
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:a2:2a:fd:32:b3:12:b7:5d:4f:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 23 01:00:31 2025 GMT
Not After : Jan 21 02:00:31 2026 GMT
Subject: CN=1a4f2465-df65-4344-9877-020a0cf0493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:23:63:72:9d:28:12:6e:d3:d1:8f:a5:f5:
0a:98:67:8d:da:e3:f5:93:0a:d0:37:15:5b:df:19:
66:01:5d:1a:8a:d2:24:00:38:08:49:cd:20:59:86:
d8:49:b3:a1:b9:14:56:cb:3f:b3:d9:39:1d:fe:32:
96:ec:10:56:e7:97:2f:ed:eb:a7:58:fe:ff:8f:58:
af:3b:e8:2d:25:47:b1:03:51:76:56:a1:ff:d0:aa:
b7:eb:20:f6:54:f9:3d:fe:9d:f4:ff:10:d2:2f:3d:
b9:8d:40:d6:ba:d7:a5:e3:f9:a6:b1:97:6a:25:bf:
44:30:2c:c4:f4:20:93:d7:a3:91:5d:4a:c7:0b:cc:
fc:f5:5c:24:30:af:9d:c7:a2:60:26:9e:5e:8e:4f:
e4:3f:8b:de:9c:55:e8:98:7e:70:34:78:dc:53:7a:
9b:14:1c:63:84:e2:34:e8:fe:74:24:fd:db:71:d7:
e4:f7:c0:ea:11:f1:6c:67:2d:08:62:b7:f0:63:63:
97:d9:fb:a5:23:93:23:07:ec:c4:9c:12:34:7c:2f:
44:f2:df:77:79:21:26:95:40:25:87:1d:6d:21:05:
e2:96:fc:4a:6e:d4:f4:e8:03:17:0f:42:36:ec:0d:
63:c5:73:6c:1a:17:c8:40:5f:38:2e:e9:c1:e1:e3:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:E6:33:C4:65:C5:58:FD:82:55:3A:00:03:D7:05:D0:90:7A:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b59c8f7-20c4-3052-a642-1395a6870f68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f0:05:c6:8c:dd:f8:76:df:52:4d:99:85:86:5a:16:09:b5:
99:91:af:e0:dc:d8:ae:5d:11:43:9f:62:50:f1:03:b3:72:16:
1f:4a:be:fc:6f:be:ef:a0:20:fa:51:2b:b4:78:52:dd:7c:c7:
75:71:bb:5c:ce:95:c9:5a:4d:0b:47:1a:dd:e0:82:50:54:71:
20:ca:1d:ee:d6:ae:a8:dc:37:4e:32:43:39:6c:2b:87:00:6c:
44:b9:8b:14:f2:c4:b8:52:fb:bc:a6:2f:fb:18:6c:3b:aa:bd:
9e:54:62:fa:e6:a7:fb:31:9c:e0:f5:c3:0a:28:e6:ef:08:a3:
51:38:7c:1b:31:e3:fd:9a:15:b0:f4:05:b8:1a:23:65:76:d3:
31:c9:c3:68:f6:5f:0b:2c:49:d0:84:1b:b6:bd:a9:6d:a9:5f:
23:1d:6a:59:ed:46:54:be:74:33:94:79:62:d6:bd:56:96:15:
91:90:37:ad:f9:8c:88:3b:3e:99:06:36:16:79:32:f9:06:2f:
2c:bb:c3:5e:25:4b:c2:fb:6e:7e:4a:80:00:9b:46:0b:33:67:
e5:5a:22:a6:88:08:75:23:c0:e0:3c:c0:fa:24:e2:d9:83:d8:
0a:ae:ee:3f:22:6e:ee:a5:cd:89:66:8a:3f:bd:34:d3:a3:e1:
e1:e1:48:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:23:23 2025 by rpki-client