
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac84703-1f37-30ce-9310-bf48d38c9814.roa
File: cac84703-1f37-30ce-9310-bf48d38c9814.roa (raw, json)
Hash identifier: iaOCh3/IOhR05KEP5gtPhP64XwL+mO0bVn0M4tTDHiA=
Subject key identifier: 8B:BF:1F:19:8E:1A:CC:4F:EF:4F:7C:79:9D:BF:C4:A1:D4:31:60:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD627DF3F90A267E9E552800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac84703-1f37-30ce-9310-bf48d38c9814.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396544
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:7d:f3:f9:0a:26:7e:9e:55:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=42fc5842-21ce-4347-9f97-f46af769686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:a3:ff:f3:72:94:ed:e7:14:a1:f5:17:46:
88:e2:42:4a:7a:ef:d3:5e:9f:a5:92:f6:7a:21:f0:
d4:a2:48:c5:7f:92:f8:2c:fc:2f:57:4b:3e:e7:a3:
54:72:70:52:00:70:58:60:28:5a:13:40:59:26:a3:
4a:d2:7c:67:76:8a:8c:98:9f:22:8c:ec:9b:cc:24:
b3:2a:af:b4:d5:5f:b8:fd:06:cb:ac:ff:6b:81:97:
76:80:aa:76:90:dc:93:ce:d9:08:6a:68:a9:81:e0:
bd:9e:9b:e1:e0:2e:1d:59:d1:1e:47:a6:9f:dc:25:
7a:f8:62:02:a4:da:32:67:58:8c:d2:9a:93:15:3d:
de:5a:f4:27:7f:69:fc:6e:f6:6a:81:81:bc:1a:0f:
2e:cb:7c:d2:48:ed:b8:c4:21:be:5a:96:a8:08:5d:
42:54:37:a5:f8:c4:45:59:d5:dc:bb:ea:49:33:dd:
fc:e6:c9:42:48:8c:bb:9e:5e:55:1b:55:02:5c:1d:
ca:b8:c9:f4:09:fd:27:bc:da:20:b2:d8:4a:be:6b:
7e:6e:84:43:52:b3:7c:aa:f1:90:9e:20:21:8b:92:
16:e1:4e:1e:4f:d7:13:7c:72:30:f2:e7:1f:27:21:
c7:5a:fe:39:b7:24:c9:49:b6:31:cb:1c:de:b2:83:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BF:1F:19:8E:1A:CC:4F:EF:4F:7C:79:9D:BF:C4:A1:D4:31:60:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac84703-1f37-30ce-9310-bf48d38c9814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:7f:be:ba:ff:20:0a:97:d1:82:80:7b:eb:3d:62:12:61:00:
8b:7d:d1:c7:91:91:d4:19:0f:c4:4d:69:c8:62:48:61:22:a1:
c9:f9:69:20:81:00:1e:06:cb:4f:7b:f5:db:0c:45:82:7e:95:
3e:23:d6:9b:81:00:8c:30:a9:54:87:6c:40:e0:4e:85:cf:6d:
17:25:75:f8:90:a4:f7:86:cb:25:48:43:c3:de:b7:f4:f8:15:
c6:f4:98:08:13:ab:0f:f0:f0:45:49:35:84:ce:33:24:55:69:
65:72:6f:6f:4c:e0:f6:e1:0c:10:c4:52:62:fa:63:b9:51:bc:
93:c0:6e:95:fd:12:36:9b:e3:e6:73:61:55:4e:82:2e:f3:fb:
49:57:1d:d5:f7:a2:c6:20:84:b9:19:47:19:01:1f:89:d9:3e:
7d:ca:39:a6:15:af:76:01:5b:ca:22:2f:8c:95:4a:e8:a4:94:
79:0f:93:93:d5:02:14:44:2a:c2:d1:ae:26:78:17:ea:29:27:
f6:1e:aa:08:18:1f:aa:f6:3c:38:de:e9:96:cb:ca:0f:e4:e8:
20:e5:3b:65:d1:d3:54:f5:a5:2e:f0:ae:4b:29:20:bc:5c:58:
93:9f:1b:b9:5d:4c:52:d8:ac:76:a1:9b:9f:44:8c:a0:cd:e5:
ee:e5:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:12:42 2025 by rpki-client