
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23f21f0-c7eb-3c3d-9368-92da472b239d.roa
File: e23f21f0-c7eb-3c3d-9368-92da472b239d.roa (raw, json)
Hash identifier: mDeTF6R/Qk6VpotJzVWHjh2pf+uS3uYE3tg4ibG3EsI=
Subject key identifier: DB:A9:7B:5B:8D:2C:8A:F4:C3:08:2B:72:FF:31:58:A0:3F:EC:4B:5E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD6274CCF9F3471768CCCE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23f21f0-c7eb-3c3d-9368-92da472b239d.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396587
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:74:cc:f9:f3:47:17:68:cc:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=85cdd39f-8418-444c-a601-d3cb84b4ebde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:2b:21:fa:1c:3a:69:76:d6:74:d3:72:b1:
f6:bb:c5:f0:08:86:9e:74:d5:2d:d0:01:99:a5:c5:
ee:89:2e:cc:80:53:f8:0f:64:7a:9b:2e:76:69:c3:
6d:8c:66:88:f9:b2:ab:ef:b2:a1:5e:10:73:a3:9f:
f6:ee:44:d0:29:88:c2:5c:02:17:de:e3:d4:9c:04:
1f:ff:86:fe:3d:4c:55:ef:83:f9:ac:c2:00:e8:78:
c4:41:86:ad:7b:bb:51:e2:81:86:1a:a2:79:44:70:
ef:f6:ad:4c:ba:ab:c7:c2:2d:47:83:c0:8b:7d:4d:
aa:c8:92:76:77:cd:93:7c:a0:db:aa:72:4b:ae:f9:
8d:33:3b:b1:1e:79:1a:8b:be:c6:84:fe:2a:9c:d4:
cd:d3:17:b9:e8:2f:38:24:f2:bc:4e:3e:63:4b:b3:
db:c5:3a:8f:cd:7b:0c:1d:7b:30:5b:51:8e:62:72:
40:69:c2:8e:d2:93:92:15:bd:9c:f7:f8:eb:9f:9c:
6a:6e:f6:5b:d6:99:2b:88:f2:b0:ed:c4:8c:07:4e:
2d:e9:0c:d1:5e:27:f4:30:2d:a6:03:a2:e6:43:d0:
1e:e6:e2:7e:e8:06:77:c2:69:74:07:34:f2:22:98:
39:93:21:a2:6e:4f:ab:ad:16:53:fd:37:5d:73:b6:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:7B:5B:8D:2C:8A:F4:C3:08:2B:72:FF:31:58:A0:3F:EC:4B:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23f21f0-c7eb-3c3d-9368-92da472b239d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:58:fc:f2:9c:e0:e3:dc:4b:84:f1:ff:fb:c0:2e:86:23:8a:
0d:c2:e5:02:03:15:c9:70:93:fe:a7:86:3f:b7:66:35:9d:49:
8a:c0:6b:4e:06:0f:6c:d2:5e:db:54:7a:2e:ca:02:d2:89:ba:
8d:cc:c5:f6:4c:6d:42:6e:23:2f:bf:91:12:45:29:f9:48:f9:
be:39:6d:a5:b6:7b:6b:2e:91:f7:32:48:b0:64:54:84:07:f5:
c1:7b:db:40:75:44:40:56:77:ed:7e:87:92:1c:88:99:20:54:
70:80:2b:ee:3b:6b:b2:85:ab:8e:09:45:b5:fa:62:18:60:5d:
4d:cb:11:c3:bb:f9:cb:02:ff:80:6d:48:52:e8:8a:7e:d1:02:
32:ca:67:9f:8e:63:0f:91:b3:c9:ba:1d:9a:16:37:49:6c:1c:
aa:ce:ec:3c:84:d8:6e:9f:16:89:4c:6d:79:9e:04:f7:6e:91:
7e:99:b9:5d:61:27:bf:b0:76:9a:ea:9d:3d:2d:38:ad:5d:ac:
85:cc:2d:90:f2:e9:9d:d4:0a:7f:16:47:83:32:eb:de:5b:a6:
a9:73:3b:9d:cd:ff:2e:c1:c3:ba:e3:47:1e:a5:58:4b:be:04:
2f:7c:ff:c8:3a:eb:98:1f:c0:a4:cb:17:bc:f4:af:40:84:1b:
b6:34:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:01:58 2025 by rpki-client