
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa
File: f95efeb0-478b-3005-ad06-ce323f2af52b.roa (raw, json)
Hash identifier: ZS8d9XJYpwXTdpKePwCTzcClP6VTVxbY4yO53i1eR8k=
Subject key identifier: 95:BA:4C:7B:C3:15:77:E8:32:02:EE:99:1D:95:C3:B1:63:0F:37:70
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B5F3752173A08287D10F00C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa
Signing time: Wed 01 Oct 2025 01:00:32 +0000
ROA not before: Wed 01 Oct 2025 01:00:32 +0000
ROA not after: Tue 30 Dec 2025 02:00:32 +0000
asID: 32651
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:5f:37:52:17:3a:08:28:7d:10:f0:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 1 01:00:32 2025 GMT
Not After : Dec 30 02:00:32 2025 GMT
Subject: CN=e76f2636-dca5-438d-8eb6-830214c5bcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:86:d2:56:0a:22:75:a2:a6:bc:0d:14:8d:
87:90:b1:e0:fc:c5:e0:29:26:62:7a:2d:9d:b3:25:
f3:7c:20:91:88:c6:68:f3:47:35:22:3c:51:15:e4:
37:b2:0c:5d:ad:cb:2c:a7:c8:3a:3d:9f:63:76:03:
3a:59:6f:cd:0d:23:cc:6c:2c:dc:6e:65:8c:54:d7:
d3:19:3e:6d:42:cd:b2:3b:ab:14:50:2d:49:c7:29:
6b:ec:61:4a:fd:6d:d9:fa:cb:ae:20:a8:1d:50:ba:
8b:c2:51:a7:6c:7d:f8:89:2b:5c:6a:1b:bd:8e:cb:
60:43:08:0c:43:52:bf:a3:e4:c2:07:40:ca:10:a5:
51:b8:97:c4:94:e3:ec:b5:98:cd:61:23:41:c7:0a:
b9:ce:01:73:6a:b9:a8:29:5e:2c:ed:81:42:36:5e:
e1:90:bb:0a:38:90:34:4a:f6:e0:3e:6e:24:f4:f4:
f3:92:a6:97:b8:4d:f9:dd:10:9c:b7:14:ba:f0:2b:
fb:3d:c2:8d:d6:c6:63:58:1e:ad:ca:af:5e:cc:d3:
6a:56:41:8a:65:5d:c4:35:8f:3b:29:12:53:86:c8:
fe:b3:02:17:dd:0c:c6:d8:c9:e5:d9:5c:59:88:0e:
5e:b0:d1:29:41:1d:be:e7:84:06:3e:99:dd:a8:cd:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BA:4C:7B:C3:15:77:E8:32:02:EE:99:1D:95:C3:B1:63:0F:37:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:36:f9:29:e4:d5:ce:33:5c:be:6e:b2:12:2a:a3:3f:13:1c:
62:45:07:c2:ac:85:5e:79:30:10:a1:16:78:71:a5:fc:01:f7:
83:3a:fe:03:5c:8d:2d:19:1f:43:bd:c1:a6:cb:23:31:3b:84:
ad:a4:74:fb:fa:79:0f:fa:5e:5d:2f:92:85:1c:15:63:6f:71:
85:31:2e:3b:76:92:1b:30:24:e1:aa:9c:55:2e:01:14:a5:9c:
bb:07:09:78:f6:b7:00:e5:c1:55:73:94:e7:c6:b9:14:4f:77:
30:77:6e:86:6a:ad:d6:1b:52:de:56:f9:a8:36:b2:ec:77:1e:
88:e4:14:5a:ca:44:bf:6d:a1:7f:3d:b2:7d:dc:6f:61:74:e3:
15:cb:ce:a3:11:5a:bf:35:22:86:15:99:21:ac:ee:7f:bd:54:
e0:64:d8:6a:2a:db:56:4e:75:62:b2:f0:51:0d:c0:5b:49:60:
7e:8e:8e:aa:0d:8f:58:76:32:1c:8e:55:fd:b7:cf:4e:e2:9a:
b8:bb:7e:68:df:c1:90:ef:5c:86:47:54:0c:c7:29:2c:bb:e5:
b4:d6:76:71:0c:8a:84:d5:74:31:1d:64:94:43:a2:ee:b4:7a:
8b:d1:d1:bf:4b:1c:92:6e:7d:11:e9:6b:2d:76:d1:5d:96:6c:
85:f1:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:17:32 2025 by rpki-client