
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f8cdbcc-7b20-3b56-befd-6872eb24aff7.roa
File: 0f8cdbcc-7b20-3b56-befd-6872eb24aff7.roa (raw, json)
Hash identifier: AMrakOmdoyenkL+oF6qBfPMD9kybo7vFRf0IwJQS9PU=
Subject key identifier: 0C:42:9C:2D:7E:45:BE:9D:27:DB:B6:4A:48:55:82:65:5D:D5:B2:18
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B9CA23D19CBAFFF5D91C09500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f8cdbcc-7b20-3b56-befd-6872eb24aff7.roa
Signing time: Thu 23 Oct 2025 01:00:31 +0000
ROA not before: Thu 23 Oct 2025 01:00:31 +0000
ROA not after: Wed 21 Jan 2026 02:00:31 +0000
asID: 396565
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:a2:3d:19:cb:af:ff:5d:91:c0:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 23 01:00:31 2025 GMT
Not After : Jan 21 02:00:31 2026 GMT
Subject: CN=6c7c3dc5-45f4-472f-9ce8-978e725c7803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:ea:25:cf:3f:4f:60:25:60:11:dd:87:e3:
be:73:82:81:b1:d0:6e:14:6a:03:ee:f1:2f:93:56:
2d:68:69:3e:ca:c3:eb:0c:a3:68:ff:cd:fc:6a:f7:
4a:80:ff:2c:f2:7c:8e:96:4e:60:36:8b:8b:a2:9b:
fc:ea:fb:5c:a8:65:8b:4c:4f:f7:45:39:74:39:e5:
82:49:7f:09:d8:cc:5b:7a:35:50:26:82:3e:03:cb:
88:cd:08:86:96:fe:99:c4:ea:cd:53:27:cb:a1:f0:
6e:9d:21:5d:26:2f:2b:3c:94:8a:16:f8:8f:a9:27:
d5:1f:f2:54:e0:17:b3:6f:e4:62:d2:78:b4:12:f9:
27:cf:e9:3b:2b:a7:05:72:9d:7c:64:5e:a4:82:e5:
5a:aa:d9:c5:35:e8:bf:02:dc:70:93:38:46:82:ac:
65:06:3b:23:fe:2b:e0:94:d8:05:a5:11:4f:82:ad:
f4:69:61:47:d5:dc:ee:df:c0:41:77:5e:ca:3f:82:
71:1b:6e:27:ea:00:78:83:fe:7a:03:d2:63:fc:a4:
a3:e9:c0:b8:d4:f1:9d:d5:f2:c2:f2:a4:e9:c9:c0:
e8:ef:6e:ca:f7:ab:4f:41:0d:f9:aa:4c:50:15:c8:
98:ca:34:10:a4:f0:63:00:ad:4f:cc:79:48:bd:44:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:9C:2D:7E:45:BE:9D:27:DB:B6:4A:48:55:82:65:5D:D5:B2:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f8cdbcc-7b20-3b56-befd-6872eb24aff7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7d:63:c0:17:1b:51:d5:69:1f:f4:e2:5b:0d:a9:62:ca:0a:
26:24:ae:0c:da:94:f7:7f:2f:1b:81:66:6d:08:5e:ef:4e:d3:
b9:d0:b8:f5:0e:87:d3:db:d4:8f:94:20:48:e6:65:b0:1e:e7:
76:b5:62:ad:b0:88:56:6e:a3:73:a8:f9:88:26:b4:c3:ba:81:
9d:9e:83:36:1a:a6:58:87:9e:22:be:bd:65:56:0e:99:c4:27:
cd:4d:66:8a:41:f6:9e:57:72:af:6c:0e:67:2f:4f:8b:3c:36:
c9:a9:00:43:0f:f8:67:16:05:45:7d:a7:5f:07:8b:da:06:da:
b9:36:ba:0e:46:98:de:a6:b4:ee:d5:1d:0a:8a:84:63:00:f7:
7e:86:77:5c:4e:94:b3:3a:cc:d9:50:f3:7d:47:e9:d0:67:27:
dc:f6:07:89:7b:f9:8b:3d:bb:28:92:72:0a:23:2d:56:2b:32:
dc:42:b5:aa:39:08:91:8f:49:84:c4:eb:e7:ee:dc:0d:0e:e2:
8a:b6:d0:db:8f:de:ff:78:21:bf:f1:ce:00:b1:0e:06:f7:c0:
75:22:e1:d6:55:32:49:18:86:9c:dd:9b:87:a5:b5:30:27:37:
d5:fd:d5:fc:1b:ff:5a:ad:32:7d:e6:84:95:2f:21:93:2a:35:
71:54:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:22:43 2025 by rpki-client