
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa
File: 3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa (raw, json)
Hash identifier: 9VwbAFf4ka2mzbjNEybLn+RfU107IONiUzHOjxPaqgc=
Subject key identifier: 58:91:90:52:EB:AC:20:52:FC:FB:76:1A:A3:8D:B8:D3:70:0A:CC:76
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584AEB8B94BD504356B0FD982BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa
Signing time: Wed 20 Aug 2025 14:36:58 +0000
ROA not before: Wed 20 Aug 2025 14:36:58 +0000
ROA not after: Tue 18 Nov 2025 15:36:58 +0000
asID: 396596
IP address blocks: 192.54.112.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:eb:8b:94:bd:50:43:56:b0:fd:98:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 20 14:36:58 2025 GMT
Not After : Nov 18 15:36:58 2025 GMT
Subject: CN=91f1d755-6487-470b-874f-cf5399df85af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:35:04:19:88:c7:9d:c2:83:ea:18:fd:4a:54:
12:22:5d:93:6d:c6:8d:78:ad:1e:8f:d1:39:08:31:
51:3d:dc:3c:02:3d:77:36:7e:fd:97:30:f2:14:62:
33:14:78:df:eb:cf:c1:86:60:19:94:4d:a7:0e:9a:
fc:be:27:7c:3a:f4:cf:5f:67:b3:06:11:ae:31:00:
fd:3b:2b:42:e9:d9:d9:30:9f:4e:28:a7:f4:16:52:
e8:9b:92:15:a0:3b:5c:a9:87:17:46:c5:96:5e:42:
79:41:1b:ff:ba:7f:79:04:2f:03:f2:1d:72:36:ba:
bf:6b:95:dc:87:01:9d:bd:55:51:07:7f:1e:32:9f:
13:53:ae:35:f7:c5:cb:f7:3e:15:bc:04:f8:ca:57:
6e:7a:60:9b:1e:72:94:79:83:e7:c9:94:b3:16:e1:
a4:f7:bd:4c:07:c0:c3:99:8d:d5:6c:81:ae:42:c3:
74:f4:72:94:3d:f8:40:50:8d:04:23:77:80:4b:23:
7b:1a:cb:22:7d:65:ea:10:ea:a9:52:11:11:a1:08:
7b:8e:96:d9:10:0c:2c:af:b8:80:df:70:9c:ee:a8:
67:e5:ec:b8:7d:c9:4e:96:e3:e7:16:66:c5:a7:4c:
77:0a:5b:d8:0b:88:b5:13:80:a0:bb:b8:fa:62:bd:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:90:52:EB:AC:20:52:FC:FB:76:1A:A3:8D:B8:D3:70:0A:CC:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.54.112.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:5d:a0:17:61:e7:bb:d0:4c:58:d3:a7:67:31:20:27:35:1b:
98:b3:4f:14:b3:e5:3e:2c:13:52:42:85:26:08:3c:ea:4b:e7:
3d:b2:9b:95:91:61:69:4d:1c:ff:28:c4:c2:0a:ed:91:07:e4:
0c:52:82:16:01:e5:13:f6:d7:d0:00:59:7a:88:28:cf:96:74:
9b:35:fa:95:6f:17:e4:ee:d7:f1:35:2d:2e:b6:34:24:68:85:
8b:fe:61:bf:fc:c9:1d:26:36:69:35:63:ab:2b:61:c9:14:5f:
99:2c:d1:23:df:b5:1b:60:ef:8d:e2:f5:18:b8:6b:10:2f:59:
77:ae:06:07:32:d8:52:c1:ba:7a:6a:b0:f3:39:0e:2f:67:3d:
21:84:c5:a0:e3:77:1b:df:6d:aa:9c:7a:18:6f:b4:b5:35:20:
9c:15:b3:fa:6a:4c:21:07:35:74:26:df:ca:d5:f0:90:34:53:
5a:26:09:bc:54:f6:f9:f6:1e:9a:6f:c0:92:8e:7b:55:41:bf:
45:3a:f4:67:f9:36:09:e3:6b:79:ec:99:8c:f3:1b:c0:8f:25:
5e:16:f1:2a:a6:ae:3e:9f:d6:5c:f8:52:3e:50:90:ac:02:30:
6b:73:7d:57:5f:9a:d6:07:97:e0:9b:c7:e1:57:7c:e6:70:d8:
1d:8e:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:12:45 2025 by rpki-client