
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c701385-c7b8-3936-917d-62620ddf5599.roa
File: 4c701385-c7b8-3936-917d-62620ddf5599.roa (raw, json)
Hash identifier: VhRC/QG7ZMfifS1yiZouXD4BHQ5UR9EI8Ft0UXyu8Qc=
Subject key identifier: 44:F4:17:3B:23:E8:B3:CE:0B:D1:8C:DF:31:DA:63:A2:C9:1D:7C:1E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B9CA23A6959FE7189FABA0980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c701385-c7b8-3936-917d-62620ddf5599.roa
Signing time: Thu 23 Oct 2025 01:00:31 +0000
ROA not before: Thu 23 Oct 2025 01:00:31 +0000
ROA not after: Wed 21 Jan 2026 02:00:31 +0000
asID: 397197
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:a2:3a:69:59:fe:71:89:fa:ba:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 23 01:00:31 2025 GMT
Not After : Jan 21 02:00:31 2026 GMT
Subject: CN=c0a7615b-f4f0-437b-b615-2844f810bac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:a2:85:25:65:e0:b6:c0:27:4a:98:1e:8f:
0f:5e:5c:bc:20:d5:a0:d7:c9:1d:12:0c:49:bd:0b:
b2:be:63:0c:6e:8c:b0:42:92:0f:a8:59:f9:ca:c2:
54:2e:0b:d7:20:29:df:52:6f:2d:05:f6:b4:a5:82:
19:fd:aa:44:ad:76:f1:56:04:04:4f:f5:40:06:48:
e2:dd:47:e8:50:95:ce:62:98:3b:9d:e3:11:6c:31:
ce:b1:db:0f:87:52:82:fc:ba:38:e3:28:ad:e8:5f:
a4:c0:5e:82:61:ba:95:69:5d:14:cd:78:e3:45:f4:
af:c4:32:3c:22:df:e6:52:e8:f1:f0:36:a2:8d:a8:
e8:0f:2c:a4:f6:00:82:95:b7:d8:c4:b3:4b:cc:13:
6e:93:02:63:f2:e2:b3:9f:15:b2:0a:a4:56:b6:af:
dc:ff:a5:ac:2a:82:ff:22:bc:4a:25:fd:ac:52:38:
8f:81:8a:21:4d:53:bf:36:d0:1e:97:80:ad:73:f2:
09:fe:71:77:b9:8c:3a:78:d8:86:68:62:bb:60:b3:
66:05:36:87:88:a4:d2:46:e0:d0:9a:e9:91:19:54:
8c:98:6d:35:0c:35:6e:a1:ae:15:b3:4c:82:24:5b:
bf:4b:09:b2:a9:8e:4a:0a:ad:43:1d:a9:31:0e:63:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:17:3B:23:E8:B3:CE:0B:D1:8C:DF:31:DA:63:A2:C9:1D:7C:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c701385-c7b8-3936-917d-62620ddf5599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:7c:f8:19:98:ab:09:1f:42:f6:b4:50:71:f3:b5:74:23:27:
d2:35:93:a0:34:71:d6:0e:ba:13:e1:f3:f1:fd:f5:9e:0e:6c:
d5:b6:e9:55:7e:3b:95:b4:56:d3:97:17:dd:7c:51:ab:ac:92:
51:47:1c:14:86:07:67:2c:6c:d7:bd:ae:67:1a:00:98:3b:28:
82:6b:a5:32:88:8b:f0:9a:86:b7:52:5a:40:96:3b:c5:cf:5b:
8b:b1:0c:96:7f:20:de:33:e4:b8:30:a7:4f:b7:fe:da:4b:3a:
fd:b0:e3:5c:a4:c0:5d:7d:7c:06:d2:87:29:53:21:f7:ad:4c:
d1:bd:93:20:88:27:de:e2:12:de:3f:be:1c:d7:52:b1:f8:ae:
8e:40:71:ed:b9:23:e7:ce:ae:91:1e:50:b2:54:64:08:29:5a:
fe:af:3c:ec:45:f4:a3:fe:37:54:ab:cc:05:4f:be:9f:84:97:
57:42:ae:26:c6:82:e3:2c:6d:00:c9:e7:21:f9:62:aa:67:07:
85:de:3d:12:f4:a4:4c:1c:f3:af:42:80:4f:77:d1:8c:0a:20:
4e:bc:d0:6e:65:47:45:36:1b:0b:7e:18:60:df:fd:39:f9:77:
c0:c2:d0:da:51:aa:27:4b:1d:43:20:a8:7c:d3:49:df:36:b7:
09:cd:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:21:47 2025 by rpki-client