
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
File: 0f45d07f-7df4-315d-9785-ca26ab59efe3.roa (raw, json)
Hash identifier: VurIAABH2oyeEE1R0SHyucqE3YKOdp6tHOClf8e2QHM=
Subject key identifier: C0:E0:E5:BD:AF:9C:3C:2F:63:40:0D:0F:C9:54:0F:BD:34:49:2F:AF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584AE031A5380B037AEB1F60DFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
Signing time: Sat 16 Aug 2025 13:00:42 +0000
ROA not before: Sat 16 Aug 2025 13:00:42 +0000
ROA not after: Fri 14 Nov 2025 14:00:42 +0000
asID: 396586
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e0:31:a5:38:0b:03:7a:eb:1f:60:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 16 13:00:42 2025 GMT
Not After : Nov 14 14:00:42 2025 GMT
Subject: CN=b1ceaa60-5d64-47b9-8799-38f69d6ea462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d0:4f:34:08:85:1f:c5:30:fe:29:75:9b:96:
35:26:10:7b:85:cd:11:c6:0e:f5:87:38:77:57:d2:
ed:1c:a7:be:f3:2c:b4:f2:b9:f0:74:f9:c5:8b:a1:
74:e2:92:c1:39:38:2f:9c:07:2c:6a:1a:e3:30:b2:
1a:3f:c7:24:1e:7f:38:1f:5c:79:85:6f:a7:ce:16:
3b:8c:d5:25:1e:5d:6e:43:a6:bf:3e:55:0b:b2:3d:
20:c9:14:ed:d1:42:6b:72:0e:b7:de:80:da:39:93:
c4:87:7a:fb:82:9c:25:76:56:9a:03:d2:19:61:28:
74:73:0d:68:80:d5:d8:b9:a2:7b:76:bd:9b:04:9c:
62:ac:d8:07:30:bc:73:97:ad:30:9b:62:b6:55:18:
98:c1:37:ab:ca:ce:8f:e8:d6:ec:78:ab:7a:4b:5f:
6e:c1:23:ec:2b:07:fa:0e:a3:8a:36:c2:f7:b6:e7:
e4:35:74:4f:18:25:25:cd:88:d1:fa:b2:d0:50:bc:
0a:24:91:0c:b5:56:e3:b8:d7:40:77:11:7f:0a:30:
08:79:8b:56:92:c3:d1:c6:4b:22:5c:b0:4a:f2:66:
49:79:f4:f5:f8:96:4d:c5:24:e8:c7:71:91:4a:c9:
71:5e:ec:76:d8:fc:f8:9b:8d:4f:e7:08:64:f1:01:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:E5:BD:AF:9C:3C:2F:63:40:0D:0F:C9:54:0F:BD:34:49:2F:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:cb:54:f5:54:d7:ae:4e:d3:ab:65:a9:b4:f0:93:28:b3:eb:
f1:29:0d:44:09:12:0a:ef:32:18:ec:67:b4:3e:9a:ed:04:af:
38:67:2c:66:02:eb:ec:3e:52:bf:e9:59:32:b5:9f:ee:bc:0c:
02:f8:5f:55:cb:13:17:76:01:c2:c7:d0:47:40:d6:7d:99:10:
9f:77:e3:03:2f:08:61:3a:2e:dc:8e:83:e4:9d:f7:ee:79:f3:
cc:1e:51:76:f9:d1:f3:de:0f:1b:7f:85:7f:13:8d:08:cc:72:
b3:9a:cc:76:96:73:3f:dd:89:c6:8b:eb:bc:a1:aa:e2:fb:4b:
ac:1a:f6:9e:54:30:3d:aa:5b:16:c9:08:1e:f4:38:67:85:d3:
61:e0:fa:c1:16:e0:b0:61:49:77:1b:bb:21:e2:11:b2:96:8d:
68:d8:43:53:17:15:31:0c:7f:f9:7a:32:6b:17:ce:55:79:a0:
8c:57:5f:b7:e5:61:0e:25:eb:85:d0:15:00:e2:ab:18:3e:2e:
4a:c0:b1:0f:bf:e7:9c:16:a2:1c:77:48:49:64:47:3a:e2:ea:
27:60:8e:d5:0c:32:c0:f6:51:4f:f2:78:c4:7a:40:65:c8:42:
ea:3c:9c:c8:09:27:c3:37:53:de:68:cd:9e:0e:48:90:07:67:
9f:8a:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:12:42 2025 by rpki-client