
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa
File: 3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa (raw, json)
Hash identifier: ZZJePz3sN//QTcQU3ggA4WRVdGDZwKiGuTNky12x/2U=
Subject key identifier: D4:43:4F:2B:2C:98:6B:A6:17:F6:23:59:34:18:9A:42:F0:FF:5F:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD626381A1AB02D74F120540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 397201
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:63:81:a1:ab:02:d7:4f:12:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=588cff1a-c75a-464f-a663-d6d86390fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:f4:6f:43:40:1f:96:0b:9e:04:af:54:33:
a0:a6:2f:e8:6b:62:f9:de:8d:ec:07:74:e3:57:0f:
57:ae:77:04:67:f2:ba:18:c3:e9:c3:ae:21:b4:6d:
13:7a:fd:b0:87:78:3f:68:ee:f1:ad:f5:3c:c3:da:
cc:9d:c5:b9:8e:55:ea:01:8d:95:f8:ae:82:09:61:
fa:5d:cd:54:28:a9:08:48:f7:b9:fc:6b:27:d9:cf:
a1:f2:55:e9:49:c5:14:0f:57:fb:43:ab:c9:34:ca:
39:72:fd:a6:91:43:46:57:d4:ca:e7:f3:48:01:c0:
60:df:3c:27:90:3d:b6:8e:99:c6:3e:6d:e1:15:eb:
c0:4d:42:2d:61:46:d4:b5:c0:9e:63:a5:69:6f:9b:
5d:f2:01:94:d3:ca:e1:12:3d:b9:76:49:54:6e:85:
ae:59:72:1a:fe:d8:52:06:d2:0a:94:53:66:da:8d:
d2:5d:7a:8b:df:d6:1c:59:dd:a4:5a:69:a8:5d:00:
1c:de:7d:7c:63:b9:a0:a5:b5:2c:73:e3:58:3f:5a:
51:a6:a0:e3:79:75:63:0a:db:f0:5f:b5:34:d3:69:
49:b1:6f:1f:8f:d5:01:12:a8:6e:7a:4a:ef:b6:57:
e4:9c:a1:2e:fd:63:5d:97:52:5d:51:37:57:8b:f5:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:4F:2B:2C:98:6B:A6:17:F6:23:59:34:18:9A:42:F0:FF:5F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:85:a9:2d:0b:f5:61:2a:28:58:b7:d7:b8:76:c0:a8:bb:43:
7f:e0:0d:71:72:8f:ba:35:14:88:4f:32:ad:8e:51:70:fa:7b:
cc:d0:87:09:e4:9e:12:b6:aa:08:a8:56:de:78:96:f5:2f:4c:
53:98:b3:74:c5:c5:ec:ce:34:a3:a9:2d:b1:f5:fc:5a:42:f2:
ce:65:82:82:38:68:4b:35:aa:94:35:58:e8:3a:79:d6:6d:91:
ce:45:39:eb:aa:7e:1d:13:d2:49:a7:c7:6f:48:9d:e0:b6:e8:
83:9b:96:ca:f6:90:57:24:00:19:22:75:30:8c:df:a3:61:cc:
82:c8:b7:8b:dd:bd:7d:ae:22:69:e7:ec:54:39:30:c3:42:ef:
63:60:28:78:cd:1d:d4:39:77:22:40:5f:a0:33:ee:42:66:41:
1d:38:cd:6f:38:84:31:29:fa:8c:d8:cc:1e:28:91:e5:ea:3c:
9e:b0:fe:56:cc:cc:d4:84:28:db:d3:04:8d:24:37:0e:40:81:
86:ab:9f:bd:06:21:66:a6:51:1b:79:a0:db:21:89:f7:aa:d6:
bc:22:ca:de:3d:44:3d:39:19:3e:aa:25:a6:87:0c:4a:47:eb:
d6:17:b6:f6:6a:d3:52:d0:30:72:11:9a:2f:6b:e6:11:33:65:
74:38:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:21:47 2025 by rpki-client