
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa
File: e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa (raw, json)
Hash identifier: yol75RujaBzJOTo6vMiqs/R8GJStm5dDHzJIfog0ug4=
Subject key identifier: 89:5A:06:B6:2A:C9:8E:20:91:3E:B1:9B:47:96:A2:E2:3D:54:4F:33
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B9CA22E012EE7FF0A9CC08D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa
Signing time: Thu 23 Oct 2025 01:00:31 +0000
ROA not before: Thu 23 Oct 2025 01:00:31 +0000
ROA not after: Wed 21 Jan 2026 02:00:31 +0000
asID: 396608
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:a2:2e:01:2e:e7:ff:0a:9c:c0:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 23 01:00:31 2025 GMT
Not After : Jan 21 02:00:31 2026 GMT
Subject: CN=1e113d1f-5235-41a0-8ea8-b7c3ff317497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:66:5f:5c:d6:9e:24:01:72:fa:83:74:47:
1a:9d:92:7b:5f:3b:f9:63:15:db:13:cf:ac:e6:3d:
d3:8a:32:13:2d:4c:d9:8d:b1:99:aa:9d:fa:ee:cc:
26:d5:e8:1a:35:4a:a5:91:03:21:05:b5:64:ff:62:
2e:c0:b5:fe:32:a5:72:09:59:ed:de:8f:d7:da:7b:
3c:6a:e3:85:8d:b8:1c:bc:3a:6e:c0:70:7f:65:b3:
5b:97:d7:37:44:c8:cf:f8:b8:ac:92:9d:96:8f:d9:
bf:da:f8:ca:eb:97:c5:7d:88:fa:16:ba:e0:ea:59:
cd:17:bb:9a:d5:0d:15:0e:ca:e2:2a:f3:a2:66:f5:
a7:28:21:19:31:6a:38:2d:08:7d:65:6d:29:3a:8a:
f7:75:f6:d4:13:84:94:d1:5e:05:03:43:6b:aa:bd:
ac:2b:ae:78:63:75:bd:1d:66:46:c5:96:1a:f6:62:
3c:88:ac:35:13:ee:f2:51:71:fa:fb:76:b4:24:e0:
65:a9:8f:e6:00:0b:06:98:18:9e:77:12:d1:ca:8b:
82:20:84:0a:6c:4b:7e:53:38:4e:24:0f:8e:9f:7d:
13:df:25:26:db:64:55:e8:91:3b:ed:f5:58:81:96:
aa:6f:6b:61:05:f7:0e:af:a4:82:ef:da:b1:b8:26:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:06:B6:2A:C9:8E:20:91:3E:B1:9B:47:96:A2:E2:3D:54:4F:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e088ffec-ebc8-3c81-9c46-15b30d8e8ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:e9:8c:f8:86:76:74:25:86:04:62:1e:27:db:b6:59:2c:1f:
b6:71:76:b1:04:f6:70:d4:9b:d1:0f:d6:f9:0b:4e:49:fd:54:
db:74:f5:67:2d:30:71:91:d7:fe:6f:13:0e:bf:96:c5:5a:c0:
d2:43:8d:cb:c2:f8:6e:20:ea:01:4a:22:62:2d:2d:81:3a:73:
f4:2a:8f:ff:0a:11:31:1b:fa:c5:bd:28:87:e2:ab:b9:eb:69:
7b:62:0b:a5:02:51:df:1a:47:4a:0e:1a:eb:e5:26:f1:06:ce:
87:0f:8d:4e:b3:00:b7:a8:96:66:b1:16:a5:4c:9c:52:34:64:
24:17:5d:ff:d7:fa:42:fc:fe:88:9e:2d:ea:5e:74:58:e5:fe:
81:88:13:25:fd:24:ad:e1:c7:75:01:33:7a:e3:90:23:ef:98:
01:35:6d:82:7f:62:2e:f2:75:93:af:c0:ee:24:98:6f:41:0a:
dd:7b:7c:d3:02:0f:96:0c:2e:96:ff:aa:ec:f5:d5:7d:8f:7f:
cb:f9:32:6f:08:a9:5f:22:10:16:ee:e1:6c:d5:d0:b0:b5:0b:
43:18:07:30:60:48:8f:a1:de:e1:f2:05:7a:75:28:dd:ea:b4:
0c:e3:c6:56:62:9f:e2:f5:55:3b:31:c2:9b:28:04:cb:df:24:
d1:9f:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:08:30 2025 by rpki-client