
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa
File: 5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa (raw, json)
Hash identifier: OnH0rDoLyffFiJRn02b9RtdkHmBbrIlScydITbRSsS0=
Subject key identifier: 0E:A9:69:B3:D0:89:80:DA:E1:9E:2B:24:ED:93:CC:6E:D6:32:5A:1B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD626DFBF6B417B30D7427C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 36627
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:6d:fb:f6:b4:17:b3:0d:74:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=c0a57662-5682-40c3-9ba4-c0f3427c9737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:56:99:2a:d5:6d:26:6e:26:aa:db:66:34:
65:3e:74:e9:56:a4:77:ba:ca:67:26:03:02:16:78:
4c:82:45:5e:4b:da:59:90:5a:53:32:3b:96:e3:8d:
30:81:d8:e9:ef:d3:e0:9e:95:b8:55:4d:96:89:3b:
fd:9d:67:dd:cc:cc:b9:b6:40:12:3a:a4:a8:6f:a9:
59:88:12:bf:51:54:1a:23:d3:4c:f2:9f:e7:8d:7e:
40:f3:a9:58:9f:29:ab:91:67:a1:99:b3:97:09:f2:
86:b8:9a:0e:b4:4f:90:03:a1:7a:37:fa:6f:68:d9:
8f:55:0b:48:b0:4a:d3:48:58:d9:07:79:f7:0f:84:
bd:69:52:e4:5e:0e:98:4b:1b:db:40:b6:1f:e9:df:
c3:42:ba:0e:02:02:94:a0:9e:c3:26:b2:c3:c3:01:
03:86:8d:41:17:84:40:4c:49:bd:f6:1d:cc:ca:df:
5d:c8:a8:9e:3f:28:07:7c:59:57:cf:bc:a3:6e:9d:
e6:d7:79:49:8c:47:6a:e7:a3:5d:ef:4d:75:a9:11:
23:3e:29:8e:b8:87:4c:63:54:61:97:aa:35:68:62:
a6:80:bd:3f:76:59:c6:c4:e5:72:2a:fd:39:74:a6:
8b:93:72:9e:77:5c:51:75:24:9d:fe:2c:52:fd:f3:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:69:B3:D0:89:80:DA:E1:9E:2B:24:ED:93:CC:6E:D6:32:5A:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ec:f5:a5:0e:d2:d5:31:ac:87:28:bb:64:bb:df:2c:c2:7c:
0b:21:cd:c0:7e:a2:53:d0:88:e8:f3:87:f3:c5:ce:c5:c1:64:
7e:4b:99:fd:f5:42:37:e5:55:5a:4f:7c:89:2a:1f:3c:03:da:
89:ab:70:ba:c2:db:e4:01:3d:67:2d:ca:7f:2b:70:46:39:18:
d8:62:c7:b4:82:67:da:20:49:eb:b7:3e:46:19:cc:a0:55:3d:
4b:ef:a7:49:ae:90:dc:26:15:7f:0c:82:be:83:84:57:2b:83:
5b:76:c5:6b:b7:85:b8:18:69:d4:82:f9:4f:27:da:6c:0e:54:
88:89:e7:cd:f5:11:72:10:57:27:88:86:c8:ca:fe:0f:fa:1a:
c8:bf:79:97:ab:e0:0f:21:62:c2:31:fb:09:1d:3e:96:3e:bb:
c6:93:b2:98:17:de:0e:2d:3b:b6:cf:52:77:c1:0d:59:ba:e8:
9a:7c:d1:f2:e0:60:32:41:34:87:d3:7d:f0:f2:b5:cf:cb:bd:
ac:7d:17:c4:97:d4:3a:76:22:93:9f:8f:3c:d4:b7:c5:63:37:
c5:61:e0:52:06:6f:2a:1d:f3:11:b0:da:73:73:05:87:ce:ba:
99:d8:2a:15:b4:91:8b:5b:e7:7c:f6:6e:62:13:ac:e9:c7:c0:
a2:80:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:05:28 2025 by rpki-client