
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa
File: ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa (raw, json)
Hash identifier: gOXwxpsCBBT1JJ4Ujtn9UYeUS0O2wE0QtJ4ZXq54eqY=
Subject key identifier: 37:4D:F3:06:C5:75:ED:37:B9:A5:A5:3E:54:FB:5B:A8:52:DA:DE:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD627CD0DBD329E869D6ED00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396614
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:7c:d0:db:d3:29:e8:69:d6:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=19f7bed9-06bf-4c2c-8508-bb7d26bdf918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:c7:9c:1d:5b:a4:f7:86:32:8b:78:84:10:
f2:00:cf:ad:36:2b:19:6a:47:18:75:49:e7:ca:0a:
83:27:fd:de:39:fd:b1:0b:6e:c0:bf:9e:e5:4c:fa:
29:ea:4f:fe:14:94:7e:eb:c6:5c:da:84:cd:ae:0d:
8a:8d:11:ba:e5:b3:0e:c6:86:f4:98:66:60:65:97:
92:29:a8:d2:50:5a:1b:3a:6b:1b:4c:e8:1b:db:3d:
1a:96:dc:1b:3a:12:3a:42:e8:ae:84:88:37:3d:b3:
90:31:f4:f1:e9:07:c6:fa:43:e0:ac:db:4c:82:06:
03:b9:41:2b:38:25:4c:e9:87:47:ad:49:b1:67:df:
f8:d9:a3:3d:18:1b:3e:5e:33:a4:ec:8f:f2:98:25:
a1:b5:f0:8f:ff:7c:d3:af:40:40:18:04:7b:a9:38:
e8:70:d0:fe:f9:6f:ff:b6:e8:5b:18:b8:b7:d5:5a:
e0:99:49:a1:0d:f5:bd:a2:dc:6d:db:74:24:88:c6:
9f:3e:f1:89:40:9b:d1:ec:77:70:09:f8:0b:6e:ac:
69:77:b9:78:8b:4a:c0:18:0c:e2:40:40:50:c3:95:
d9:1a:24:ea:03:52:a6:1e:84:25:6b:6c:ab:43:80:
85:f0:3e:36:75:f3:27:82:59:86:05:c0:24:0a:e8:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:F3:06:C5:75:ED:37:B9:A5:A5:3E:54:FB:5B:A8:52:DA:DE:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:4d:34:8a:14:ac:cf:3e:70:78:9c:34:d4:26:13:7b:82:3a:
a2:b9:15:8d:b5:d2:1f:71:22:93:5c:aa:aa:92:7c:b9:6a:9e:
6d:5f:05:4f:1b:9e:c4:99:96:e1:20:b2:f8:d7:d7:45:88:17:
95:85:77:25:c6:8a:ed:cb:da:b8:80:55:4e:f0:12:89:5d:23:
3b:d8:70:b2:06:53:1c:59:29:e3:df:24:f6:50:7c:de:d7:79:
8e:c0:38:7b:e7:40:87:1b:df:55:5a:ca:63:60:db:b6:80:68:
b0:c5:ce:b9:35:da:3e:83:f2:3c:bc:fc:1e:cc:a8:94:76:48:
5f:b7:89:4a:02:0c:f8:4b:d3:78:48:15:f9:3e:e9:83:1f:38:
3c:e0:9a:ca:96:44:c6:bd:c3:33:c1:99:62:9d:84:0d:cd:c3:
ec:ce:29:7f:73:8f:2e:9e:85:9c:ae:ff:65:24:b9:b8:10:62:
bb:ce:75:52:8a:27:83:56:29:15:bf:3e:ca:51:4e:71:a8:d7:
b7:77:b4:83:3e:35:30:f7:83:fd:40:04:26:a2:ae:68:79:b2:
f3:55:ae:d1:30:17:56:fb:41:7a:a1:b9:1c:d4:ee:c7:87:c4:
8c:47:9d:f7:d4:af:4a:7b:6d:c6:54:2c:67:6f:a9:1c:e0:41:
4b:ce:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:21:01 2025 by rpki-client