
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9599e1a8-9987-3795-b4d0-2bd40a5750ca.roa
File: 9599e1a8-9987-3795-b4d0-2bd40a5750ca.roa (raw, json)
Hash identifier: HSmtOzET5Hv4PILVN4vTHrLa/nYKHYFSnPZaufxH9ok=
Subject key identifier: 92:DF:DD:85:60:24:C2:04:52:A7:26:F2:2A:66:A4:DA:18:13:9D:25
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B9CA23DD8A56EE73FDF62E480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9599e1a8-9987-3795-b4d0-2bd40a5750ca.roa
Signing time: Thu 23 Oct 2025 01:00:31 +0000
ROA not before: Thu 23 Oct 2025 01:00:31 +0000
ROA not after: Wed 21 Jan 2026 02:00:31 +0000
asID: 396592
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:a2:3d:d8:a5:6e:e7:3f:df:62:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 23 01:00:31 2025 GMT
Not After : Jan 21 02:00:31 2026 GMT
Subject: CN=952184ea-2d57-41a7-9203-09e0af5e2a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:3c:86:bb:69:7e:7f:b0:ba:bd:f5:36:73:
e8:be:ce:e7:00:b3:be:93:e5:29:6b:bf:34:f0:16:
29:fa:5a:41:72:a2:af:0e:ac:ff:45:c8:54:4f:18:
34:0f:e4:1b:1a:33:90:49:5f:71:de:3d:c4:3f:4d:
0b:b1:71:14:1f:ae:89:93:3b:e7:37:a1:93:0c:0d:
c4:c0:77:64:65:a1:37:23:c3:8b:75:3d:53:35:6b:
b6:ad:54:34:90:37:3d:f4:fa:8c:a7:38:58:4f:17:
49:7b:3e:e2:cf:1b:4c:9e:bf:17:b4:9a:48:0d:4d:
5d:f1:17:76:d8:2a:0e:19:89:9b:99:e0:57:bc:6a:
40:85:d9:5b:a8:93:1f:74:5d:70:71:dd:55:9c:59:
1b:5a:9a:f5:1a:a9:e4:83:e0:35:c9:7e:e7:34:7f:
fe:a8:3c:84:b0:6c:a3:b1:43:fc:d8:88:ae:b4:d2:
de:c4:f2:cf:5b:2f:83:59:8d:a4:d7:67:75:04:fa:
25:6e:83:da:25:f0:3b:cd:19:21:7b:6d:93:f8:ea:
82:c3:fa:f1:f1:16:1d:2f:d9:b3:42:83:58:f1:50:
65:0b:bd:c7:7e:2f:ed:09:64:e5:d1:24:e2:ac:20:
7a:25:ae:ab:dd:31:0a:73:a3:c7:52:37:10:05:9d:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DF:DD:85:60:24:C2:04:52:A7:26:F2:2A:66:A4:DA:18:13:9D:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9599e1a8-9987-3795-b4d0-2bd40a5750ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:54:11:29:dc:cd:95:bf:01:8d:69:a6:9b:0a:ad:a3:2f:6d:
68:26:8e:9b:f4:c3:15:e3:e4:d3:8e:63:a7:dc:64:3c:3a:e6:
dd:8e:89:44:22:78:37:f3:50:95:3d:d4:77:56:c9:35:fd:8e:
0f:fa:c8:71:54:0e:54:9f:58:e4:79:51:34:d7:a2:93:67:c2:
6e:97:8b:ac:5a:7b:d2:d5:f2:34:c0:b6:1b:7a:7e:5b:d9:0d:
e7:24:f2:57:80:cd:de:49:44:39:82:38:93:ef:14:03:75:cb:
c6:aa:61:a5:7d:58:a8:e8:fe:4a:c8:3a:6f:a4:55:43:50:0e:
53:91:75:2b:e1:dd:d1:99:d2:7f:1f:68:72:43:fd:8d:fa:fe:
c0:e2:1e:13:9a:a2:a3:b4:f9:7e:d0:02:98:e8:6e:0d:ff:2a:
eb:f7:94:cb:85:ba:de:19:d9:42:4c:02:ee:8a:e7:59:85:bc:
8e:0e:82:f6:3f:78:9f:67:06:27:c0:1c:21:b8:bc:bb:23:6a:
fb:41:18:e7:75:42:3e:0a:52:7f:ca:4e:69:aa:d8:1d:00:dc:
3b:ba:81:95:17:b4:1c:b5:5d:d9:3c:b5:fb:fa:25:ce:f3:c8:
f1:49:6f:62:dc:75:7c:94:08:7e:8c:a7:0d:59:7d:4e:0e:eb:
34:7f:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:15:12 2025 by rpki-client