
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa
File: bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa (raw, json)
Hash identifier: QO6p+O9NAdJZrAUQiq5oi9Z3EalysMdf175ba+OJLnc=
Subject key identifier: DB:47:88:69:59:43:F0:CE:17:08:EC:49:7F:60:85:93:72:F2:E3:6A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584AE196DB688ADDC6088DB410C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa
Signing time: Sun 17 Aug 2025 01:00:32 +0000
ROA not before: Sun 17 Aug 2025 01:00:32 +0000
ROA not after: Sat 15 Nov 2025 02:00:32 +0000
asID: 40717
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e1:96:db:68:8a:dd:c6:08:8d:b4:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 17 01:00:32 2025 GMT
Not After : Nov 15 02:00:32 2025 GMT
Subject: CN=8d434481-05c8-416e-9a14-c911ed1ee115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:e0:ac:f9:cf:05:23:bd:7b:9f:7c:60:bd:
c3:1a:c2:cb:ce:33:f9:fb:82:9a:05:1a:54:08:aa:
58:6e:bd:0b:86:ec:fb:54:b7:41:8b:9c:85:46:db:
aa:73:d9:29:a3:70:85:61:fc:83:70:05:68:49:d4:
ed:da:19:3e:19:f3:9b:ef:0a:68:d4:f7:12:ef:77:
6b:fd:ea:9e:7a:35:4c:f3:99:7b:d5:f0:e2:e9:42:
a0:ec:62:a5:ff:ea:f7:53:1d:e1:5a:cd:14:0a:6c:
64:21:01:80:9c:4b:00:a8:11:53:8a:6e:cc:d4:00:
44:d4:4b:aa:53:2f:10:3b:a6:b9:b2:38:85:c3:0b:
df:9a:24:13:84:69:74:75:d5:ae:1b:79:91:89:3f:
25:73:c1:64:ee:a1:55:80:0c:29:c6:0d:e7:13:01:
ac:42:2b:bc:10:a5:90:a4:12:38:d6:7c:68:8f:94:
f7:ba:09:65:8a:9f:cc:8c:0d:3a:51:4b:c0:43:a4:
35:12:6e:47:aa:70:be:36:64:d5:7e:14:24:26:b9:
a4:64:6e:84:9d:ca:e5:9b:48:d3:a2:be:82:27:59:
2d:27:d2:f6:fb:e2:cf:28:81:50:94:62:b8:ab:a8:
14:74:6d:76:9a:6e:33:9a:f7:f3:29:5e:2c:7d:60:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:47:88:69:59:43:F0:CE:17:08:EC:49:7F:60:85:93:72:F2:E3:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ea:18:77:2c:b5:99:54:b4:90:af:22:0e:5f:bd:44:a1:74:
c9:a1:01:5a:06:96:d3:8e:1d:23:e0:72:58:9a:2d:e8:0b:b5:
2c:d6:56:ca:cf:15:40:f8:65:bf:89:58:46:be:b4:4c:6c:09:
28:42:e7:18:e8:51:5c:38:9f:7e:48:f9:9c:26:90:bd:f6:f5:
aa:d4:37:69:f9:0f:1a:1a:ea:55:c4:f1:09:ad:7a:5a:04:4b:
c0:b9:d6:6c:db:f4:da:30:ee:a5:42:83:41:bd:36:e6:44:94:
02:3c:c2:0b:ac:e1:4d:6d:e2:16:7f:3f:f4:6d:04:29:0b:c9:
36:e7:a0:20:82:ef:d6:5b:7e:d9:8f:f3:73:b6:cb:e4:26:f6:
82:75:68:85:cc:b3:38:cb:11:f7:8c:05:3e:fe:a0:7a:ab:46:
53:f4:fd:2f:34:5b:6d:4e:95:30:7c:a6:a7:f8:78:4b:c1:63:
a0:48:77:d5:2b:fb:14:0e:5d:35:69:a1:d0:b3:17:8d:50:00:
d2:56:01:2d:62:b7:19:b8:13:a3:29:bd:18:24:89:e1:9f:f2:
76:b8:77:d3:bf:52:87:b9:65:b9:13:61:78:e4:8e:77:68:cd:
01:d0:e8:2a:00:04:71:6a:09:32:91:90:be:1e:4c:8e:9a:23:
d9:aa:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:00:06 2025 by rpki-client