
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa
File: 2370f688-962f-378f-b250-638c1daebac6.roa (raw, json)
Hash identifier: zPvbTnyJcLdrbsDXZL+ydnDZTohrSycxqhuH6x7QUlI=
Subject key identifier: E1:E7:2B:E5:8E:A8:11:97:9E:67:F9:8B:B1:48:D2:22:A2:29:6E:93
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BC10B5D4DD07E93B4395F52E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 396591
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:5d:4d:d0:7e:93:b4:39:5f:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=7b637dd8-88e6-4d5f-b300-00d6c1e91f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:9a:80:47:89:e1:0f:f0:38:a2:31:c7:8c:
f5:68:12:df:36:9b:c3:e8:b4:f5:d2:c9:98:8b:19:
fe:0c:ec:f1:47:79:e4:56:f2:d1:9a:ed:71:c7:99:
d7:a2:b1:46:b0:52:dd:cb:da:7f:6b:13:f1:e0:bd:
74:6e:20:56:ba:1d:8a:77:bd:03:7a:60:00:b3:09:
b2:ae:48:27:14:6c:b3:c4:53:37:f4:25:ae:ee:43:
20:79:dd:11:6f:91:82:49:9d:51:82:d2:53:d8:53:
f1:5b:9d:19:15:9d:44:a3:ba:39:f2:21:5f:81:b5:
07:82:cf:46:68:6c:85:f1:6c:25:66:f1:7a:03:fc:
e7:d8:b1:5b:53:21:5d:33:03:aa:b3:5f:b4:ed:db:
79:09:c2:f2:e0:01:f3:51:79:a5:2b:c3:4d:59:e1:
7e:0e:14:e2:8c:71:3e:04:55:e2:b8:ca:93:01:a3:
aa:56:68:3a:f8:b5:fa:61:93:16:cc:95:f9:81:59:
62:f4:15:24:2d:f6:01:6a:a5:43:3e:cc:79:23:75:
55:a6:43:b7:13:7f:be:9d:47:8d:87:cb:86:7e:51:
38:ae:2f:01:74:fa:3e:8e:87:f9:96:a7:44:35:dd:
a7:9e:2b:ef:17:6d:a3:e1:ec:df:91:02:f0:ad:d8:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E7:2B:E5:8E:A8:11:97:9E:67:F9:8B:B1:48:D2:22:A2:29:6E:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:74:ed:ba:51:f2:fe:07:8b:1b:3c:85:59:ef:0c:ab:21:dc:
f0:d6:d7:6e:fb:96:d9:0c:1a:71:f9:24:97:31:aa:20:63:d4:
0d:65:fe:38:65:30:bd:1d:ce:c8:45:a8:ae:2c:3c:3f:18:7a:
6d:a3:52:0e:c4:59:1f:21:6e:3d:12:45:f6:ba:59:91:4a:1b:
60:2c:6f:91:fd:99:c4:58:fc:8b:36:31:ab:08:a6:3b:5d:6f:
b2:63:a4:9a:10:a3:b1:8a:bf:d9:68:a0:99:c0:7c:38:91:c7:
ac:85:82:58:de:f5:d9:4b:7a:ed:d5:a9:03:58:1c:31:35:73:
a1:30:f6:6f:6a:69:16:f0:78:11:99:bf:76:52:42:ec:ab:aa:
70:74:3a:e7:ef:1c:92:bd:33:81:ab:fe:0b:82:ae:3a:ac:20:
b4:bb:0d:f4:0b:f9:e9:e9:4c:83:cc:97:5a:3b:f7:cf:86:f5:
e5:8d:0d:f7:4b:54:31:72:9c:dd:62:4d:f8:fc:5f:2a:03:b1:
77:f1:21:46:f7:31:08:7b:9b:b6:fa:17:8a:5f:9a:51:32:a5:
0b:64:6c:2c:15:64:c8:05:7c:0f:ab:6a:d6:bb:02:7b:b3:ee:
f8:a0:a7:39:7f:1d:70:6b:68:9c:2d:e2:ba:75:be:78:92:33:
9e:f3:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:05 2025 by rpki-client