
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
File: 404cefd8-7ea1-3fe6-b88b-275975481a6d.roa (raw, json)
Hash identifier: baQPaYzj8RBcBD/AtJTBoH0jMj7O1nno7jqs9equ3P0=
Subject key identifier: 86:F9:CB:33:6F:03:EC:20:CD:29:5A:64:56:89:DD:27:59:66:07:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD627C22483066A9564E2240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 36616
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:7c:22:48:30:66:a9:56:4e:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=827c2693-ef8c-46d4-bbb8-00d3c2786f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:aa:2a:ee:bf:50:8a:31:3b:71:ce:37:b0:
e7:31:88:01:0e:46:35:b3:3d:55:6d:16:c1:cc:8f:
53:fc:62:0c:ae:44:f8:06:fa:d3:d8:e1:bd:88:c4:
ed:fe:63:ae:47:2d:23:2d:0e:dc:c0:65:b1:24:56:
24:02:b2:4d:34:43:4e:4a:d5:fd:08:7a:11:7d:09:
39:02:21:48:c2:c9:65:9e:82:4a:be:30:c5:cd:8e:
d7:d8:e7:89:99:25:15:0e:19:d4:3a:b3:76:94:9f:
a3:fa:7e:32:a6:df:7c:b0:40:4e:4b:f9:7d:17:fc:
0d:b7:ee:61:9f:fb:af:68:f1:ab:2f:7e:8b:d8:c5:
56:74:de:09:e2:73:78:66:8b:df:11:80:c4:d4:df:
a4:44:09:db:18:5c:c2:7a:0b:c3:0e:45:ac:a1:2b:
6c:22:19:9f:ac:24:b7:b4:ce:69:d8:64:dd:09:52:
48:a6:98:84:85:b2:52:27:a9:8c:48:82:03:30:2b:
7a:54:8a:4d:e0:ca:f9:7f:4c:32:82:43:a8:ae:8f:
12:4d:42:81:27:96:55:b4:38:02:02:cb:5a:85:50:
8c:38:c4:40:26:10:4e:85:9b:c6:0b:88:ca:04:06:
82:24:7f:b1:c6:3d:1a:ae:b8:98:6b:05:26:7b:a2:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:CB:33:6F:03:EC:20:CD:29:5A:64:56:89:DD:27:59:66:07:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:9d:fd:b4:e1:3c:0a:98:63:f6:5d:97:b4:c9:9a:23:a5:b6:
e5:a9:88:18:b9:95:c9:5e:cd:7c:7e:56:06:a6:d5:2d:91:ae:
40:ce:15:f3:bf:fe:7b:55:a9:53:56:b3:29:16:a3:aa:53:c9:
a9:90:c8:49:b3:df:15:67:3a:17:d5:35:58:a2:28:db:73:9d:
eb:ef:ef:0a:dc:10:c4:89:f6:ec:60:e8:eb:ad:d8:07:8b:cd:
0e:e1:c4:16:2a:2d:8d:4c:7c:31:f6:37:c3:fd:97:88:18:14:
dd:00:c5:b7:49:b4:8f:9d:e2:de:b4:87:6b:3b:06:35:74:cd:
d3:71:49:94:c2:85:5c:b1:8a:de:61:16:c6:19:68:aa:b3:61:
c1:3e:21:ba:a2:5f:87:f8:f3:e9:ce:f3:fa:37:c9:a6:20:fd:
2f:a8:90:e3:a0:b8:2f:7d:50:c6:c9:ea:81:47:45:54:1d:ff:
dd:3d:e5:e3:02:0e:86:ae:44:ea:db:15:14:78:df:10:62:07:
db:b4:74:49:72:a4:c5:03:04:1f:3a:59:76:25:55:08:55:a3:
82:52:3a:31:ac:8f:1d:3d:ac:41:36:4c:2f:dd:71:e7:04:1e:
6d:92:4b:7f:33:ec:af:df:a2:a6:0e:e8:4b:55:9c:34:09:2e:
c5:2e:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:16:26 2025 by rpki-client