
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8611835a-4174-32ed-8b4e-cbd57c37a52b.roa
File: 8611835a-4174-32ed-8b4e-cbd57c37a52b.roa (raw, json)
Hash identifier: NIWXOoM8PsFc5g+tX+3tghmtzE0DPkGHaN+zuDA0ZXk=
Subject key identifier: 10:9A:03:E0:78:9A:63:9F:16:2B:19:68:BF:F7:5D:08:A2:9B:2D:A5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B98723E03EA82885CBACA0800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8611835a-4174-32ed-8b4e-cbd57c37a52b.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 396594
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:3e:03:ea:82:88:5c:ba:ca:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=6047e93a-bb32-4d28-a7bd-b1e57eaef678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:cc:1e:76:84:8c:04:31:6c:7a:de:a2:8d:
4d:19:83:cd:9d:39:9e:e8:13:22:3f:0f:6d:45:e4:
e3:91:ef:98:9e:6b:3e:fc:4d:1d:52:0f:1b:4d:77:
08:cf:e9:77:3d:38:34:73:aa:24:10:87:38:bd:11:
29:3d:88:99:51:3e:1e:c6:63:61:de:71:fa:1b:e3:
e6:8a:95:80:d9:cb:7f:9a:00:43:a7:74:53:90:c7:
73:74:e3:c4:38:d6:19:31:9e:68:f8:7e:e5:9c:8f:
55:91:a9:d2:08:01:b5:83:0e:dc:97:00:a0:17:42:
77:35:d9:f5:b7:86:d6:6a:be:f0:e0:28:8d:7b:7d:
de:38:2c:41:21:2b:44:12:50:a5:fa:9a:aa:08:67:
34:8c:10:7e:97:c6:e8:89:9a:36:79:2e:98:47:59:
da:1d:a6:13:fd:4b:f2:62:4c:17:d1:08:c7:64:c4:
c9:52:76:9c:9f:24:59:f0:8a:f3:7e:b2:e8:81:31:
c4:68:0f:0c:f8:b2:79:6b:87:6c:76:0a:a8:d2:1a:
65:e8:71:0e:7c:e1:93:9b:6f:34:de:8f:91:fe:45:
11:31:af:51:1c:c1:69:59:3f:9f:29:d3:18:44:a9:
54:ac:5e:62:54:12:d0:b4:9c:69:d3:69:10:f9:7b:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:03:E0:78:9A:63:9F:16:2B:19:68:BF:F7:5D:08:A2:9B:2D:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8611835a-4174-32ed-8b4e-cbd57c37a52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:d4:02:c6:da:7a:dd:36:fb:eb:b3:93:50:a4:2a:23:66:39:
58:c1:5a:c2:31:c1:14:31:d9:15:8f:2d:29:5c:b6:26:52:9b:
e0:18:e9:90:1f:c5:99:0b:3e:e1:ea:bd:ee:f9:93:a3:8e:30:
db:b4:fc:ef:66:2e:e7:44:54:b0:5d:76:fe:c7:71:8e:40:d8:
18:6b:78:2c:1b:73:4a:3b:bd:52:c4:a6:73:9f:96:e7:ce:8a:
ff:7b:a5:61:e6:b8:4c:23:d9:f9:33:f9:c5:32:86:1e:d3:cf:
94:ce:4b:55:3a:b0:9e:49:27:71:e3:fe:f3:04:92:d4:a6:af:
b6:e1:91:8b:74:17:ef:8d:cc:34:9e:85:18:d0:a0:ca:e1:1f:
88:61:0f:c5:c0:a3:0e:5b:b3:78:ff:8f:d7:ab:26:5e:aa:fe:
bc:81:44:65:e8:61:94:6d:a1:b0:cd:de:e6:38:f4:b8:68:50:
c0:55:19:ee:7f:15:51:3f:41:19:c2:4e:74:49:61:ca:81:fe:
c6:0a:68:93:bf:ee:13:89:e7:af:25:42:1c:b4:27:bd:6e:88:
10:df:d8:ba:5a:13:7f:56:f7:db:e2:f0:93:f5:fd:28:41:68:
46:b4:65:1e:ba:25:e1:ca:af:7c:84:56:b2:4c:fa:67:0e:b5:
95:9c:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:18:08 2025 by rpki-client