
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c4f923-11f5-3079-98a7-da4329fec231.roa
File: 98c4f923-11f5-3079-98a7-da4329fec231.roa (raw, json)
Hash identifier: hY8GAy7W6i1uK8HO3jM6lPE0Rsn6Ah9q9/hUlcBXey8=
Subject key identifier: A8:74:46:B8:98:87:47:8F:85:13:97:B1:C0:A4:03:67:27:C7:2D:2C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D6EDA81C827029560E13C0260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c4f923-11f5-3079-98a7-da4329fec231.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 396578
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:81:c8:27:02:95:60:e1:3c:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=02544e1e-9da1-46df-b7c1-b05acfea6656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:01:f1:b8:59:d2:b4:fc:0a:e3:14:ae:15:
a5:19:49:72:ed:72:a1:ca:3e:ee:63:6e:a1:ea:fa:
e1:68:7c:31:07:67:39:c6:c7:d1:a4:28:ce:ee:39:
7e:5c:32:22:2e:26:90:c0:f3:2d:77:da:b3:ba:f5:
b4:ba:88:1d:99:ec:b9:ca:f9:e6:b5:82:bc:bb:71:
c0:39:b6:4c:89:36:c1:02:7b:25:ca:3a:f4:9a:a9:
f3:f6:20:b7:f3:47:d3:4c:2a:f5:10:7a:c7:35:09:
3f:ad:35:19:74:d4:2c:17:d3:08:45:83:a0:34:32:
52:c2:e9:50:69:f1:7c:bb:af:95:1f:b1:c6:b5:23:
24:94:40:32:d6:a0:65:d1:be:dd:99:4d:b4:14:0c:
cf:4e:a2:da:db:5c:c4:e3:46:48:56:13:65:4f:d7:
b2:11:d2:77:09:87:61:ef:17:6c:95:ac:c6:84:cc:
fb:f3:36:33:cc:5b:28:42:19:c9:39:10:76:6b:22:
6c:c7:2f:57:62:67:8b:26:76:96:f4:4b:4a:d3:74:
52:6b:bd:e6:a8:51:ef:c4:53:3d:ce:ce:82:8a:fa:
ce:24:11:1a:66:f0:83:d7:1c:99:74:ce:d6:c7:c1:
69:fc:b2:6f:0b:01:a8:34:20:23:78:f2:42:3c:c3:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:46:B8:98:87:47:8F:85:13:97:B1:C0:A4:03:67:27:C7:2D:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c4f923-11f5-3079-98a7-da4329fec231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:ab:8f:9a:b0:84:39:dc:16:f0:70:92:ba:17:cd:4b:c4:82:
37:d0:bc:09:d3:28:db:02:79:41:1d:56:d2:14:33:d4:1f:48:
ff:30:4b:71:05:56:fb:ea:86:47:70:a9:26:78:d2:78:be:67:
0e:de:7b:a0:3c:88:bd:34:0f:5a:90:6b:21:d3:6b:7a:7b:6a:
20:5a:02:de:a1:49:c0:21:3b:60:8c:3a:f6:e8:6e:63:e6:93:
5e:03:78:68:11:ff:73:18:91:20:9d:ae:e6:4b:01:5b:fd:3d:
83:db:43:e8:78:c4:46:65:9a:dc:29:21:51:ca:a2:e3:d2:4a:
bd:dd:76:c1:db:54:43:6d:7d:4c:85:68:44:62:45:20:27:a1:
40:f9:2d:c9:30:29:ad:db:fb:b1:c7:6f:92:1d:86:16:eb:d9:
8c:c3:5a:4c:54:62:d0:b9:66:bd:90:a2:50:2b:97:f4:63:c6:
1f:6b:72:8e:14:86:fc:64:2d:c6:c6:67:78:80:19:f0:7e:3a:
be:9f:6c:20:48:ca:ba:6e:44:60:69:22:9b:e4:ed:79:df:4b:
8a:40:58:9f:62:d4:09:73:1e:45:ec:48:62:bc:3e:30:5b:d7:
e3:49:f8:31:fb:9a:6d:1d:00:b5:e2:7e:38:78:9b:10:ec:c9:
05:2d:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:27 2026 by rpki-client