
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa
File: c5240384-7952-33e0-8cbc-af1e1a640993.roa (raw, json)
Hash identifier: 8MahWoGz/WpcpKMEHZsDuNA9hN3WeTq96abRozNZWwk=
Subject key identifier: 94:47:2D:BE:51:DE:1E:17:8E:D7:3C:61:55:71:4C:77:FC:AD:8C:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD627A782FE1D252466FE600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396564
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:7a:78:2f:e1:d2:52:46:6f:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=0d8314d0-2e6d-46b5-825a-e0ebdb54dea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4f:95:96:54:d1:dd:f3:87:4a:52:2a:f1:6b:
30:41:1d:59:af:a5:60:4f:3c:30:39:a2:02:95:7b:
9b:8c:35:86:73:1a:6f:ea:bc:2d:be:26:46:9d:f8:
a1:14:c5:5c:58:d1:ba:4f:cb:d0:b1:25:7a:2f:af:
5f:8c:48:5c:ae:e4:8c:12:8c:37:46:42:90:48:17:
fe:e2:8a:f5:4e:a1:25:77:d2:bc:af:37:70:4a:c4:
27:79:21:bf:37:dc:53:0a:d6:42:66:62:3f:70:76:
33:e0:13:7c:0c:be:a7:cd:ca:4b:a9:6f:b6:3c:98:
11:90:cf:dc:93:c2:e9:e4:76:86:e5:af:db:5b:8e:
e2:43:f5:9d:26:76:e9:ca:83:d7:63:d0:93:f5:09:
ba:87:50:c1:40:39:fa:3c:46:ef:71:dc:1a:ce:ff:
ed:f9:c8:3a:8e:32:21:41:8b:6f:2c:a7:cf:dd:78:
ec:8a:f4:5b:2f:80:b2:d6:a8:92:75:ce:f5:98:3a:
f2:b8:8f:0f:9e:96:61:68:86:bd:30:fc:df:b0:94:
77:7b:46:0c:c2:78:6e:ff:8e:8e:71:a7:69:3c:86:
9d:02:7d:9d:57:4a:5e:42:e7:38:b5:81:db:e0:0a:
cb:49:a0:d6:c3:39:4b:b0:cd:82:17:12:05:24:0c:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:2D:BE:51:DE:1E:17:8E:D7:3C:61:55:71:4C:77:FC:AD:8C:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:94:52:f4:d9:24:1b:6c:a4:15:29:8e:e2:6c:20:29:57:f4:
37:e3:79:1b:67:4d:33:7a:dd:69:99:62:f9:9d:6b:f0:97:c3:
18:5c:cd:17:e7:0b:e6:05:47:f9:d7:fc:1a:c9:62:7e:3f:19:
f6:c0:bc:c8:bb:d1:d5:f8:8c:de:34:32:32:07:9a:49:df:44:
4c:b4:3f:55:25:ad:96:76:07:19:d0:75:ce:c8:66:10:da:9e:
f7:6f:27:a9:ed:f7:59:8f:76:9e:75:b3:bc:2e:c4:96:5f:80:
0f:a4:db:e6:90:b5:3a:ff:23:f3:fb:f3:2c:13:b2:28:77:02:
56:a5:0c:17:d6:b9:15:eb:de:54:a6:9d:e1:48:3a:bc:40:cc:
39:30:2d:52:89:c8:2f:2a:c6:14:f0:c3:74:4a:13:50:35:4d:
9e:03:1b:fa:3d:cd:e1:f5:57:70:e7:67:8d:8e:5f:ac:29:8b:
f8:b7:88:9a:dc:c4:84:8d:7a:5e:7c:c1:f0:bf:96:c1:84:37:
fc:49:eb:66:83:3e:84:59:a6:ab:9d:43:e1:0b:09:ba:de:6d:
69:84:28:db:8a:3c:c6:9c:23:6e:c0:d9:3c:c9:c8:f5:1a:e7:
c7:8a:4e:b3:2a:a4:3f:40:90:b4:7a:4c:22:ab:70:cb:cb:5c:
db:eb:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:06:31 2025 by rpki-client