
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1389f524-729f-360b-94e5-e3e07f22c332.roa
File: 1389f524-729f-360b-94e5-e3e07f22c332.roa (raw, json)
Hash identifier: Lc0fBUypg7oWe0a8VOLVSR4ajMoIT3SQqEhh/zK/kPo=
Subject key identifier: 4B:ED:F9:9A:4A:B5:B7:90:54:E7:77:E2:24:B3:2C:F9:66:F8:32:69
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD6270B14B013D69D282AE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1389f524-729f-360b-94e5-e3e07f22c332.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 36624
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:70:b1:4b:01:3d:69:d2:82:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=2dfd8699-41e3-4fba-ae4f-ad62b237a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:ce:2c:ec:33:75:3b:cd:37:37:4f:a6:cd:
cc:0a:12:d4:00:aa:b9:2b:d9:06:56:23:86:1e:17:
3e:07:bd:39:ed:14:86:e2:95:37:19:8c:2d:a9:d4:
03:ed:33:61:50:b0:7a:8f:7b:dc:a3:3f:54:ca:f7:
ac:ae:70:59:d5:82:bb:ab:fc:16:27:59:87:18:44:
8a:34:68:e2:64:c6:45:db:90:7c:76:4c:72:ef:d6:
19:f4:20:09:6e:f0:79:90:4b:61:04:ae:b2:47:38:
40:da:9b:f3:75:6e:93:ec:e8:9b:d2:e9:c5:85:8b:
51:52:7b:f7:5d:c6:e8:95:bb:ce:3b:43:83:a8:83:
fc:32:5b:67:5a:68:bd:63:ec:9e:a2:bb:4f:a4:83:
68:71:17:31:c6:8a:a9:8f:88:87:0c:ba:bd:cb:52:
29:52:29:4d:b8:10:4f:63:33:8c:24:91:71:5b:b8:
14:47:7b:a1:89:3a:cd:e9:c3:d6:e8:70:b7:01:3f:
01:ec:79:2b:31:c1:cc:4e:58:02:a9:18:2a:bb:40:
b0:3a:b6:1a:f4:1b:e2:c2:1b:51:99:2d:e9:90:89:
7f:1b:11:a0:5d:1f:09:43:8b:0a:bb:aa:47:54:1f:
87:bc:7b:a0:39:60:c4:53:fd:c0:a8:24:10:f6:95:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:F9:9A:4A:B5:B7:90:54:E7:77:E2:24:B3:2C:F9:66:F8:32:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1389f524-729f-360b-94e5-e3e07f22c332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:af:78:df:e4:e3:f6:16:1d:1c:02:c6:7c:df:62:3a:f9:e3:
ba:27:02:3a:44:14:31:51:e4:51:00:76:ef:55:bb:8d:12:27:
4a:23:d0:93:be:2f:30:7d:3f:3d:a6:b8:7f:e9:5b:b9:5d:43:
48:1d:a6:79:40:c9:0c:6f:66:7e:bd:17:b6:a8:9d:e3:11:26:
a3:cc:6d:df:2b:ee:13:3c:89:3f:49:30:d3:7d:fa:6b:85:1d:
91:e7:af:39:9f:47:75:8e:dd:81:c1:a8:69:8e:72:ba:76:34:
4e:52:a7:dd:ca:71:48:32:56:ff:08:85:b1:16:48:8a:57:f3:
ec:80:37:c2:02:1a:c8:13:93:4e:6e:b1:1e:48:49:61:8d:9d:
19:cd:3d:a6:f4:b7:e6:17:e3:cb:01:9d:9e:67:f8:dc:53:e3:
af:1d:68:01:db:30:7b:22:d2:a1:e3:bc:37:22:5b:13:14:d6:
c3:00:22:30:04:8a:17:85:f3:8d:21:e1:fd:bb:97:3a:db:02:
f9:17:e6:26:6e:23:79:dd:2f:26:1a:e3:4f:3d:5c:b5:2c:85:
77:2e:d1:0e:e7:d4:ca:64:ab:1d:7b:57:ae:ca:af:db:4a:9e:
56:93:f3:18:9c:ae:de:a6:8d:e2:ae:74:a1:6d:62:a0:44:58:
32:29:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:12:47 2025 by rpki-client