
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
File: 4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa (raw, json)
Hash identifier: /10/hVHMibvXDSglKJ2EFiMffo9uq3XjbSdtpL1Wwxc=
Subject key identifier: 8B:94:17:57:84:CD:78:6B:36:A7:45:76:F9:B4:C8:4F:B4:F6:8D:DF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B540C86BCD804CC05178A5E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
Signing time: Sat 27 Sep 2025 01:00:33 +0000
ROA not before: Sat 27 Sep 2025 01:00:33 +0000
ROA not after: Fri 26 Dec 2025 02:00:33 +0000
asID: 396573
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:54:0c:86:bc:d8:04:cc:05:17:8a:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 27 01:00:33 2025 GMT
Not After : Dec 26 02:00:33 2025 GMT
Subject: CN=b76402b7-638b-4cef-9673-8b7607900d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:64:d9:e5:8b:7e:cb:82:94:4d:0a:fd:78:
61:47:78:60:87:a8:1a:27:62:2c:58:7b:d7:bb:23:
75:a2:3b:93:81:9a:0e:1e:7b:e4:24:08:2c:be:77:
d7:21:1e:b5:b2:d5:03:f1:73:fb:44:ab:6e:d4:c8:
4c:d7:cd:e8:37:b5:17:66:14:c1:7c:2e:41:f9:3e:
5c:2d:3f:94:48:90:46:46:12:34:97:86:02:c0:c1:
ab:03:d4:e2:a8:b6:97:16:b2:5f:7b:4a:a2:d9:9b:
d0:08:f3:19:e5:26:d1:a7:03:aa:91:e4:cf:30:e5:
46:99:7e:d5:3b:fc:18:12:5c:be:30:75:2d:c6:f7:
ce:66:2a:90:21:fc:0c:91:15:7f:9c:38:14:bd:b4:
cd:c7:ce:f8:06:84:ee:9f:65:71:62:a2:8f:d5:32:
1b:51:03:b4:2d:e9:0a:d8:da:19:01:19:91:79:83:
0a:5b:3c:b9:d3:25:15:7c:0a:7e:11:6d:c9:88:40:
b3:87:3b:41:ce:ef:c7:d3:d3:87:af:75:79:13:13:
af:60:4e:92:52:03:d9:ce:51:2f:01:93:8f:60:79:
ce:8d:25:01:d5:43:af:6d:19:15:13:17:80:43:4e:
56:f2:67:01:6f:2d:89:1b:05:e3:02:e6:f4:a3:bd:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:17:57:84:CD:78:6B:36:A7:45:76:F9:B4:C8:4F:B4:F6:8D:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:7a:94:a0:3c:2c:dc:5d:99:65:09:7a:3f:92:cb:30:a6:bf:
06:41:04:b3:59:71:28:f5:98:b7:3e:84:c9:6a:62:79:08:d9:
47:e8:e6:b7:4d:d9:df:cd:a2:2a:16:b5:dd:4f:cd:8f:68:25:
a0:0d:c4:93:8a:49:90:e3:8a:37:9d:79:e3:f8:f4:ac:70:98:
c0:89:59:ec:40:93:00:a6:3f:f6:38:7a:17:a5:44:07:50:6b:
fe:59:2d:cf:fa:96:37:f2:b1:21:f7:e3:44:90:57:ad:4c:e6:
f5:16:15:6e:d3:cf:3c:f8:06:cf:46:a7:05:25:a6:05:33:90:
af:37:fe:b6:a6:99:65:29:aa:87:bb:3b:b5:0b:91:ff:ae:2c:
7b:ea:b1:15:59:00:ea:d7:3b:0e:ef:01:51:c3:ed:d7:48:e1:
4f:c8:94:c8:4d:9c:45:0d:5f:0b:1b:fd:6d:d7:1d:0b:10:ed:
36:7c:11:8c:ca:ea:b1:c2:a8:df:e0:35:b4:fb:bf:dc:49:fe:
9f:ff:5d:31:c2:4e:ca:55:8f:56:23:c3:f9:ab:47:bd:09:00:
94:69:6c:83:82:df:79:9b:da:03:ae:9d:2a:ea:09:65:a5:9d:
56:16:26:8c:64:0f:ed:97:06:47:ef:e3:1f:26:ee:e2:0a:d5:
b9:3d:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:21:45 2025 by rpki-client