
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01cd6697-8d03-39f5-bb3a-174307c4db1e.roa
File: 01cd6697-8d03-39f5-bb3a-174307c4db1e.roa (raw, json)
Hash identifier: S+MyZg5MN1XFVSzNBah2COfl9UAA+04HUewj4x9tFXA=
Subject key identifier: 99:15:DD:8F:D3:57:C3:F7:3E:99:5E:4A:57:35:2E:1C:33:6E:AA:F4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD626F624885D1F5B10B2EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01cd6697-8d03-39f5-bb3a-174307c4db1e.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396572
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:6f:62:48:85:d1:f5:b1:0b:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=fbaabad3-7ec9-47f3-bd41-36985a5232ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:93:9b:1c:bf:05:49:f6:95:a0:32:dc:89:
d1:89:0a:38:fc:51:79:15:57:fe:52:4e:38:f8:7e:
68:da:e3:5b:9f:c3:86:6c:2b:19:c0:ab:98:7c:a3:
97:29:a8:30:0b:f3:2c:09:3d:0a:e9:6c:b0:5e:2d:
12:c5:42:09:b5:b3:57:7d:32:1b:92:73:ad:ee:df:
eb:de:aa:b8:6d:15:ed:ed:43:ae:99:9c:f3:21:ea:
9d:e9:72:85:85:c5:43:8a:8d:98:79:f2:c1:eb:30:
86:bc:40:92:b8:ff:bf:5d:4a:c9:64:86:df:a1:81:
0b:26:ee:1b:32:d8:17:a1:83:67:16:02:e9:d3:17:
52:e9:c3:01:a1:88:9d:cf:1f:c2:45:e3:89:f5:31:
7b:d3:ee:38:42:6e:1e:c0:90:2f:d2:bd:40:47:2c:
bd:14:36:f9:50:86:2b:e7:b1:54:80:a8:b2:25:91:
27:3c:83:ed:7d:d8:bd:d4:f2:90:6e:98:86:96:6a:
c0:e7:6a:e1:6d:1c:80:aa:e8:a3:3e:b0:c0:a0:09:
30:f2:42:17:17:74:08:f6:6c:7a:07:94:7d:d9:54:
78:ac:8f:e8:b9:78:e4:6a:28:4f:a7:b9:f3:33:90:
b8:ec:8b:3b:dd:7b:bb:26:69:4e:55:45:bf:8c:95:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:DD:8F:D3:57:C3:F7:3E:99:5E:4A:57:35:2E:1C:33:6E:AA:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01cd6697-8d03-39f5-bb3a-174307c4db1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:dd:e5:b7:59:98:38:b8:4d:87:ed:9f:88:b4:4a:80:ea:86:
1c:ab:ec:d3:4c:d7:d8:d4:5b:6f:eb:a6:e7:f7:a8:8c:bc:64:
95:52:67:74:65:21:f7:64:ba:15:42:e8:e1:63:d4:4e:c4:c6:
f0:3e:31:3a:d4:22:88:e5:25:ea:ab:6f:b7:f9:37:ad:8d:b4:
08:40:2c:a7:88:b2:99:e7:1f:56:70:9f:25:db:b8:04:fa:d6:
8d:fc:3b:13:0b:2a:e6:ea:9c:e8:dd:62:d6:a4:12:8d:5f:a5:
97:36:1e:5d:9d:03:ac:21:75:42:69:0b:50:94:d5:83:de:45:
26:80:71:cc:be:a3:cf:9e:c8:17:79:24:0f:ce:30:13:e6:de:
b4:33:bb:f3:2a:0e:d5:74:9a:a3:6f:54:39:71:14:3d:cc:15:
2d:3b:b9:d1:e6:77:c5:44:61:8f:8f:25:7e:ac:0c:ca:87:7c:
93:d3:fa:52:ef:0a:70:bc:fd:df:4b:71:73:bd:4d:65:07:e5:
3b:dc:30:5d:67:f4:d1:b8:41:9a:dc:36:aa:25:b9:52:06:10:
84:60:41:9b:22:20:af:30:8c:f2:0c:15:6c:e1:66:72:c1:36:
82:3e:c0:97:99:b3:77:3a:da:89:27:d6:d0:ad:94:78:71:ca:
c6:03:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:19:26 2025 by rpki-client