
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa
File: 512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa (raw, json)
Hash identifier: ThO3kTqdVUtF3j3gjfbF50JHEWD7FBtnlYBWqQuw4RY=
Subject key identifier: 70:D3:DF:5F:0C:47:13:42:D3:D9:48:E8:75:7E:25:1B:22:26:56:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584AFC0DC0DA2B06C742AF105500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa
Signing time: Tue 26 Aug 2025 12:32:11 +0000
ROA not before: Tue 26 Aug 2025 12:32:11 +0000
ROA not after: Mon 24 Nov 2025 13:32:11 +0000
asID: 397198
IP address blocks: 2001:502:7094::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fc:0d:c0:da:2b:06:c7:42:af:10:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 12:32:11 2025 GMT
Not After : Nov 24 13:32:11 2025 GMT
Subject: CN=1c75ee0d-4a30-403b-a2f1-93f02f3af14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:0c:9e:3b:bc:1e:00:2d:b6:10:01:e9:5a:
52:76:ad:c2:64:1b:43:2c:bc:1b:01:61:08:cd:76:
fc:be:85:5b:4e:94:96:a8:5f:82:da:63:8a:50:9b:
f4:0f:ba:83:cc:c9:55:4c:1d:7a:4f:c6:29:22:6b:
d5:c8:3d:33:51:bc:39:80:3b:29:f9:1c:96:9b:72:
ab:29:8a:7f:2a:8e:22:a4:75:77:16:00:f3:9a:a6:
56:ff:89:28:70:f6:6e:63:0d:d5:75:55:f0:03:c3:
3b:8d:29:7f:26:19:99:5d:e0:d7:2c:ae:d5:c1:c8:
e7:49:5b:b4:d6:5f:00:e5:89:6d:7a:30:e2:07:b8:
40:65:9f:7c:e7:69:83:44:db:51:67:d7:e7:35:b0:
7f:1c:65:af:35:5e:bd:8c:10:3f:2e:00:2b:15:c9:
13:26:76:fb:7f:21:1a:aa:74:a5:98:c0:06:cf:c2:
da:52:b4:2f:2f:9f:55:f8:18:69:8d:df:2b:4b:05:
30:7b:4a:28:03:2b:0c:8e:b8:88:83:df:bd:9c:e8:
ad:b5:35:50:73:06:dc:09:70:3b:67:e5:80:55:96:
3b:2d:dc:b1:12:fa:32:11:85:f0:a0:6d:ec:8c:06:
5d:10:36:33:4e:41:04:34:ef:92:4f:a1:90:e2:59:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:DF:5F:0C:47:13:42:D3:D9:48:E8:75:7E:25:1B:22:26:56:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:7094::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:6b:1f:48:e4:8f:15:ac:db:2a:a5:56:a7:36:d7:76:a4:96:
22:c1:74:1e:a3:2a:f8:ef:cd:f7:28:6d:e7:8b:bf:07:2f:18:
fc:c3:a8:85:b1:a9:78:85:94:ff:af:53:f3:b1:7b:32:5e:05:
e5:9f:85:76:c3:08:81:9f:f9:b9:15:53:fa:c4:c1:13:d7:17:
64:06:f1:24:99:ee:77:0f:c0:de:8c:08:c4:9e:7f:f1:8d:21:
ca:f9:16:07:1b:5a:02:7a:2d:fa:28:fa:cd:5b:e6:b7:a8:78:
a3:72:53:81:43:5f:f5:9a:c9:76:e9:af:e7:c0:52:96:5c:6b:
af:dc:0f:d1:12:c8:40:2a:a7:77:f2:60:b4:42:da:a4:d7:de:
20:c9:44:d2:39:43:05:fb:74:dd:3e:ca:5b:1f:64:93:46:cf:
74:e6:16:e4:d9:14:09:f1:a3:27:b0:63:b8:58:c5:dc:22:a2:
ed:f5:87:b5:92:aa:be:85:a1:86:9b:ba:d2:4a:02:1b:53:a8:
8f:4d:e2:29:f5:3a:71:bc:c0:63:60:ec:64:ac:50:9e:61:7c:
c4:1d:d5:42:7b:22:ff:fd:ca:61:6c:75:27:09:c1:a4:7f:49:
2a:bd:18:7e:fc:52:f5:45:76:00:14:71:ce:53:8c:1e:6d:2a:
f3:62:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:21:39 2025 by rpki-client