
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
File: 97689e81-de50-349b-9e06-604ef847971c.roa (raw, json)
Hash identifier: IxWvEzCPNG+bOVFROeZydkNJijP3MPZZE/PF04vjKeE=
Subject key identifier: AE:C8:A7:9E:65:C4:AC:A5:DD:70:07:AB:BB:98:C8:5D:3F:C4:9F:EF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B3DBA23DA83F94C363AFD8300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
Signing time: Fri 19 Sep 2025 01:00:33 +0000
ROA not before: Fri 19 Sep 2025 01:00:33 +0000
ROA not after: Thu 18 Dec 2025 02:00:33 +0000
asID: 40647
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3d:ba:23:da:83:f9:4c:36:3a:fd:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 19 01:00:33 2025 GMT
Not After : Dec 18 02:00:33 2025 GMT
Subject: CN=422efd65-7081-4f3a-a9fa-82795a80470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:d2:c0:71:9d:78:75:fc:51:99:92:c0:7e:
04:aa:46:6d:9f:63:29:b8:43:5b:34:1d:61:a9:6b:
e2:7d:67:45:ec:9f:ce:ad:90:e8:35:e1:c8:e4:06:
18:b3:01:36:36:ed:60:1a:c4:a9:df:58:dd:06:9a:
fb:98:30:07:72:21:c0:a7:d2:ca:c5:b7:21:6e:f9:
9b:2c:8d:8d:e2:bd:76:4e:22:6f:0f:35:a4:b1:85:
39:8f:4e:b3:72:fa:99:e2:06:85:70:96:8f:72:74:
59:3a:77:c5:c3:55:e5:bf:1b:bc:61:83:c8:27:d9:
04:cb:c4:dd:5d:8c:0b:ae:b0:70:af:19:9d:67:d1:
0b:02:5b:30:3a:36:17:00:5e:b9:53:06:b3:2d:a6:
bd:9b:3a:0d:ea:7f:28:a3:e4:35:46:db:2e:10:01:
fb:35:ac:b3:c4:dc:6d:c0:e4:e5:02:c4:6f:d7:fc:
f1:6e:27:1d:71:b1:37:a8:d1:6c:a6:0e:94:01:14:
68:19:7a:b1:a0:4c:54:ad:2a:0c:0f:01:dd:b7:0c:
e5:e1:cd:62:5e:64:6d:93:6a:2c:0d:cb:13:71:a3:
29:63:ea:3f:b3:30:89:35:95:28:49:0e:29:d5:04:
fd:58:77:7c:16:3c:59:85:91:07:d3:54:88:49:c0:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:A7:9E:65:C4:AC:A5:DD:70:07:AB:BB:98:C8:5D:3F:C4:9F:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:a5:f9:ba:51:0a:c0:6d:fd:1e:37:aa:a2:7e:2c:1f:ff:b5:
a6:4a:66:df:66:a6:da:2d:4c:93:22:9f:fb:b8:09:f6:09:54:
a2:ae:f3:40:51:a4:96:18:7b:f0:54:cb:a6:50:f7:1b:c2:4f:
e0:bd:63:6c:e2:04:78:4e:37:70:73:16:f4:4d:68:a2:8a:32:
3c:e0:ce:c7:a2:97:fe:36:b5:06:13:11:e9:e9:38:d9:97:e1:
98:ad:39:bd:8d:2a:d6:ec:b1:73:f6:5a:4f:09:0c:ff:05:73:
1c:c2:95:a5:1a:38:c5:0a:b3:df:3e:4b:ed:ce:a5:5a:2f:b2:
dc:7b:cd:2a:67:07:0d:2d:dd:54:8a:78:82:f1:97:2a:0c:76:
3d:52:e9:0d:ea:4e:ea:cc:99:4c:c8:af:18:c5:85:15:94:78:
5e:4f:74:95:7f:dd:41:36:f4:d8:ef:82:c0:15:34:41:87:ee:
28:fd:0f:9f:1b:8e:b0:66:51:a7:60:09:20:9d:2a:77:59:07:
a3:e7:92:40:f4:fc:3d:c1:63:ed:11:71:3c:93:cf:ab:47:1e:
8c:af:70:88:33:e8:4a:70:ff:1a:f0:c3:b2:c4:b7:67:31:46:
2f:d3:a0:44:d3:fd:6d:71:f1:e7:73:d4:fc:5f:52:99:71:27:
ad:53:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:48 2025 by rpki-client