
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
File: 3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa (raw, json)
Hash identifier: v4ytZZL3fIkyrPlduNkvyvB/dx77byr/mxz9qpt7ulg=
Subject key identifier: CC:58:33:2B:97:B7:B3:4D:32:77:9E:D3:40:21:3C:16:B2:1F:81:19
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD627DD50EFBBDF7A3EAD280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396710
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:7d:d5:0e:fb:bd:f7:a3:ea:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=1af32155-b79c-4d4f-97e8-e150c76746ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:fe:a5:e4:34:1e:a8:a5:5d:6f:42:27:b3:
cf:4a:78:5d:3e:59:60:ab:13:d0:a9:8f:1c:25:5b:
ef:09:b2:c0:c9:8f:76:80:12:12:db:83:8b:20:b7:
07:28:7f:ae:98:9f:a9:65:dd:1c:51:59:f6:47:27:
91:05:cd:3b:a7:03:4d:49:b3:1b:92:6c:c3:e6:e2:
3c:be:b0:63:16:59:55:cb:0e:4c:5c:08:48:75:fb:
38:9d:a4:6f:5a:bd:68:bd:e5:00:73:51:a3:c3:38:
6c:b7:20:54:33:e1:f5:f7:c4:56:02:9c:c4:42:91:
84:a0:9e:cd:c7:0e:3a:9d:68:8c:49:64:a9:e4:37:
c5:9a:0b:52:7b:c8:2d:02:17:98:64:3f:58:f5:fc:
c8:bb:a3:64:75:36:dc:d8:33:7f:cf:d8:b9:ec:5f:
6d:af:1c:59:01:e1:02:82:5d:7c:b9:f0:f5:42:bd:
b3:ad:fc:e5:aa:0b:80:6e:30:1a:3c:c4:f8:99:cb:
48:50:b9:5f:01:d1:9f:55:f3:3f:50:2b:77:d8:29:
07:fc:11:dc:f1:9a:5e:54:f3:fb:55:dc:39:0e:0a:
32:8a:b1:10:7a:01:1d:5a:5f:9d:1f:86:cb:df:20:
d7:52:88:94:0d:79:69:a3:f2:ee:38:8e:1c:28:51:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:33:2B:97:B7:B3:4D:32:77:9E:D3:40:21:3C:16:B2:1F:81:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:1b:9a:87:ea:2d:26:f1:21:bf:d2:9b:67:f5:55:bf:17:4f:
b9:36:b2:ed:a6:28:e4:cb:64:bf:f9:d1:6b:a2:09:ef:93:1a:
4a:3f:34:db:b3:5a:01:c5:0d:bd:07:86:ac:a0:26:ed:8a:56:
0e:14:34:83:a4:93:1f:9e:94:9c:63:b1:52:c1:80:64:41:bf:
c4:de:58:8f:f9:54:50:90:98:5f:d9:8d:dc:23:8b:5c:59:55:
9f:11:32:04:e8:0a:32:dd:09:84:dd:ea:39:05:8e:a8:0f:63:
52:8c:cb:44:73:8f:a2:da:65:cd:e4:5d:db:d2:af:94:9e:a6:
5d:7a:3b:9b:35:da:a9:37:d3:ff:66:79:3b:dd:36:b7:b4:45:
6d:fb:3f:dd:83:48:97:a3:97:7d:c0:2c:6d:74:7c:d4:21:e0:
aa:f9:8c:03:e7:d6:cd:eb:9a:fb:8d:43:11:9d:0d:0a:29:69:
45:11:42:7f:85:a6:da:b3:89:9f:de:c5:a8:05:7d:49:d6:e0:
50:42:55:35:84:b6:48:1a:55:1e:89:43:a5:80:5c:cc:1e:8e:
0c:36:4d:d6:ea:48:2f:91:96:67:e3:2a:50:4b:29:75:42:e7:
f4:9c:dd:26:48:f6:d8:47:93:80:90:60:dd:3e:13:19:e5:59:
76:ce:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:23:26 2025 by rpki-client