
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa
File: 7e325443-0f22-3427-b95c-d38a907b559b.roa (raw, json)
Hash identifier: ewLhUpW36Frt/OmoPDB+3eBZSWw5823TK0aJ+TPECr0=
Subject key identifier: 8B:5A:DD:B5:9A:38:2F:92:0B:97:48:A5:B8:5A:F2:77:88:09:F5:2E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B3DBA2781AA3F38B836027C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa
Signing time: Fri 19 Sep 2025 01:00:33 +0000
ROA not before: Fri 19 Sep 2025 01:00:33 +0000
ROA not after: Thu 18 Dec 2025 02:00:33 +0000
asID: 396600
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3d:ba:27:81:aa:3f:38:b8:36:02:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 19 01:00:33 2025 GMT
Not After : Dec 18 02:00:33 2025 GMT
Subject: CN=cb01423c-66b7-4b61-a8de-f62d5a918aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:7b:01:90:c7:dc:75:d0:8b:e6:ff:cd:81:
b8:99:e2:3d:6c:0b:a9:53:c0:63:c0:0c:e7:29:dc:
fb:96:54:76:2f:76:6e:77:e3:2c:c8:31:f2:b2:a2:
33:d2:95:89:a1:8a:a1:f4:f6:f0:52:9f:30:44:42:
d3:0e:2c:74:60:2e:a6:34:b5:2b:8c:99:d5:25:7f:
df:e2:3d:ab:c9:a6:0d:0f:a8:fc:ed:bc:d1:d1:82:
e7:60:3a:74:88:da:11:6b:18:4a:4f:16:30:71:58:
a4:5d:4a:b5:ed:b1:6d:b2:21:09:88:c5:f3:d9:37:
ed:40:b0:f4:68:6c:98:9f:00:57:ac:fa:3d:91:aa:
5e:be:bc:9a:ea:ad:d4:bf:e0:1a:26:d4:ca:91:52:
21:15:ef:8e:2a:b6:c9:64:5f:7e:cf:35:aa:76:83:
ae:f0:c0:d4:32:25:3e:7d:01:20:3d:27:63:db:53:
2c:98:d2:df:55:e4:2f:dc:21:8a:1b:a8:4e:92:fd:
96:e3:e3:88:1e:85:ef:6e:57:c8:5e:eb:2a:4c:01:
0e:d9:00:be:e1:5c:53:1f:ee:cf:89:9f:14:2b:d3:
a8:f9:fe:75:42:78:3b:6d:87:a5:6b:b7:48:49:02:
32:7a:e1:1e:c8:4d:7d:f0:4f:99:ab:11:54:2d:2e:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5A:DD:B5:9A:38:2F:92:0B:97:48:A5:B8:5A:F2:77:88:09:F5:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:22:75:86:14:3b:0d:75:17:95:83:aa:ad:60:2e:43:09:1f:
05:f5:bc:35:8d:08:1f:ed:1c:f0:3d:3a:dd:01:64:47:0b:42:
53:8f:94:7e:e5:d7:66:01:f6:e8:39:e3:45:c9:01:96:de:70:
fc:c0:9a:ea:1e:c7:df:db:a5:aa:db:8c:07:d4:f0:82:37:b5:
79:31:3c:71:62:e6:6d:c7:7d:a7:96:96:c1:ed:ff:99:f4:a5:
bb:68:34:62:f1:9d:06:5f:1d:ca:9d:74:66:f2:80:77:b9:3e:
a7:b2:95:2a:73:07:7a:1e:5c:96:00:f3:45:59:e3:cf:83:9d:
91:b5:4e:75:27:cc:24:3c:1a:88:f8:4e:c0:bd:b8:cf:a0:96:
51:f0:c6:c2:0a:d7:7a:fb:ec:37:5d:dd:79:d0:ac:c2:d9:70:
e5:51:59:da:20:9e:81:a1:a1:91:e0:68:ae:76:ba:03:17:9b:
54:1a:67:8b:ce:68:69:88:94:94:7c:42:de:a6:ef:b1:b5:37:
02:ea:43:8e:58:ca:06:46:15:96:f3:99:d5:d4:61:37:48:66:
b9:c4:73:51:1d:1f:0e:b7:eb:1c:68:20:56:08:86:9f:95:33:
b9:d7:92:73:49:dd:83:00:a3:4c:5f:80:22:e0:6e:bf:2e:48:
1c:32:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:31 2025 by rpki-client