
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa
File: 2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa (raw, json)
Hash identifier: yHUv5Bz50Ei6y/Oyqz0n6MZJaoQFmx4K7AhwLf5gnQk=
Subject key identifier: 44:7D:DE:AB:A2:96:9B:C2:5A:4F:59:75:71:C2:E0:78:A2:0C:C6:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BC10B62E12BB64A38F7E61500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 36616
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:62:e1:2b:b6:4a:38:f7:e6:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=ed0b22b0-7cf7-4a07-93ab-e08d1c4863fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:93:d9:95:bf:8d:ed:aa:3e:29:5e:4d:10:
68:fa:93:2a:4a:e8:ba:64:bd:e3:72:eb:70:78:05:
c4:f7:6f:87:de:de:d1:b4:39:b3:42:57:8c:ab:3d:
62:7f:09:66:ce:3a:90:89:f3:eb:72:2b:c3:37:b1:
99:65:8e:a7:2f:98:7c:fb:18:73:c2:00:f2:5f:74:
13:ac:ce:bd:2b:b1:35:d1:0b:52:89:f5:ff:02:bd:
b5:3f:87:bb:1b:f3:d1:e8:d2:ec:e2:f5:2c:6f:5b:
03:e0:8e:3b:c1:8f:ab:2a:71:db:f8:d9:33:e1:93:
53:7d:6a:d0:6a:bb:fb:a7:c3:a3:c2:e8:35:ed:98:
ba:d2:c4:15:5d:51:a0:ea:e9:50:c7:2e:b5:83:67:
fa:26:56:2a:50:91:98:5b:84:25:f8:e8:a0:bf:ff:
cc:ec:94:03:58:b9:c5:9f:d9:bf:b0:a5:0a:8f:33:
42:18:99:9a:a5:60:c1:d7:25:cd:c9:e2:f0:d5:61:
ce:0e:c7:85:68:45:06:86:0b:90:62:be:39:ea:77:
e3:ff:2d:7d:60:fd:13:fa:5b:b2:49:6a:02:9e:c5:
e3:2d:d1:2a:89:c7:0e:14:a2:52:d3:9a:7b:7f:65:
6a:23:3d:9a:dc:26:59:99:19:b5:a9:33:47:5a:a1:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:DE:AB:A2:96:9B:C2:5A:4F:59:75:71:C2:E0:78:A2:0C:C6:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:b2:f7:37:5a:e1:84:9a:86:a3:74:00:b9:69:20:3b:80:dd:
62:6a:21:cb:a5:f7:3d:01:6c:e5:2b:fa:c1:8b:a7:18:20:00:
b4:4b:f5:5f:94:71:e7:d8:51:c7:24:5b:38:ae:6a:6d:ca:50:
95:5e:be:6c:5f:a4:db:eb:db:7b:d6:6c:c4:22:c8:c7:0c:4a:
b7:bd:37:b9:3b:6d:67:a4:09:9f:fa:3b:2c:d6:42:fe:f4:22:
24:52:a2:5b:c4:ac:1c:b5:92:44:c8:9a:47:db:ec:87:26:7f:
92:a6:17:da:6e:43:7c:aa:7d:6d:c6:c5:8d:7c:e7:05:92:c6:
86:64:71:6f:b0:cb:21:0c:56:fd:82:5b:f9:f7:52:08:3d:46:
06:35:43:8f:d4:c1:fe:c2:53:ce:bc:b3:42:3f:06:2f:ec:6e:
12:61:d6:a2:11:34:9f:34:03:23:98:0d:47:67:59:9f:df:e9:
f5:c3:d4:a0:01:55:90:9d:08:b7:19:85:ab:ae:11:27:60:99:
d0:1b:7f:83:7a:e1:d0:c6:c6:5a:cf:0a:1d:11:59:ac:46:fc:
b4:74:2a:cb:b4:f6:98:2f:a0:8a:52:90:07:8f:55:ca:4a:ac:
a7:09:c6:53:2c:c8:5a:26:f7:62:eb:93:65:55:83:26:34:11:
78:15:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:23:22 2025 by rpki-client