
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa
File: 371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa (raw, json)
Hash identifier: fB58l7TDXc/CKtTX+ytLhPcbNEwuLn6Mbs0fJ5CdtxQ=
Subject key identifier: C7:FA:A6:58:CD:E7:C3:C5:E1:CB:44:DC:7C:7A:C9:D0:3D:27:CA:28
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B8A7CCB405F02F8A1CC83D788
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa
Signing time: Thu 16 Oct 2025 13:00:38 +0000
ROA not before: Thu 16 Oct 2025 13:00:38 +0000
ROA not after: Wed 14 Jan 2026 14:00:38 +0000
asID: 396571
IP address blocks: 198.17.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8a:7c:cb:40:5f:02:f8:a1:cc:83:d7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 16 13:00:38 2025 GMT
Not After : Jan 14 14:00:38 2026 GMT
Subject: CN=bd44fd6f-9c17-44b1-b884-0796c944f133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:a9:c2:d9:da:71:07:00:34:48:59:04:99:
1d:95:ac:b7:32:7c:d8:25:7d:a1:40:d7:76:2a:7d:
c7:8b:cf:3c:88:56:59:de:d6:0d:d0:44:cc:0b:0d:
01:e4:dd:df:1d:5a:d8:39:2c:fb:47:85:de:9f:91:
86:60:4f:85:57:87:f4:ed:be:ce:74:ba:ee:67:98:
f6:b2:86:88:c0:96:17:2a:d0:0f:31:11:44:15:01:
55:44:f1:9b:23:6e:12:46:65:6a:cb:84:34:60:87:
b3:56:22:12:0c:f8:f7:6d:7c:db:0b:7f:0e:71:75:
fc:3a:57:bc:a5:f5:b0:4e:8a:cd:30:97:9a:f6:66:
26:59:df:d1:c5:e0:cc:7f:56:80:e1:2d:46:12:46:
a4:cc:1c:69:cf:87:37:50:ef:c1:07:09:d8:16:b2:
75:a3:0d:e5:e1:b3:0a:ca:26:ad:b4:08:3f:66:0d:
7d:03:91:bd:42:3f:53:7d:52:c1:30:dd:2e:d2:ce:
8e:83:0b:71:d3:ad:89:14:1e:db:23:25:e2:30:7e:
3d:97:1a:2b:a0:32:da:1f:1c:10:0a:75:63:c8:14:
52:f5:d9:ed:28:4d:49:cb:05:0e:35:6a:57:b3:ed:
ba:64:f2:05:4b:8e:f2:fd:cc:9b:bd:08:61:b3:55:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:A6:58:CD:E7:C3:C5:E1:CB:44:DC:7C:7A:C9:D0:3D:27:CA:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:75:be:95:2f:17:0e:ba:fd:1e:38:e8:68:79:0d:e4:45:2b:
7b:61:3b:d4:95:c8:d5:ed:60:ba:9f:83:f4:a1:25:02:4a:0e:
37:63:bc:1d:2b:a2:c1:a8:dc:3a:92:c0:d0:4c:6e:b7:0b:d2:
e5:a3:69:7e:5a:d2:c9:ec:cc:02:f4:30:5b:c0:02:2b:41:57:
87:50:25:ba:ff:0e:89:a3:40:35:2f:fe:a3:89:0a:c9:a6:a3:
e8:e9:2b:72:ad:9f:a3:ea:87:52:d4:f1:29:c8:3e:b1:61:51:
a9:83:ab:3f:f6:dd:3b:7d:57:4f:83:0f:50:fb:4f:5f:06:6c:
7f:6b:39:54:b5:80:8a:30:f6:74:24:64:aa:8c:1d:dc:f7:35:
0f:49:3b:f0:7d:84:69:52:65:b9:58:22:0d:a2:fd:28:35:61:
a9:08:60:53:17:61:02:37:51:41:65:5f:07:3b:88:4d:ac:2d:
2c:71:f8:af:0c:f6:8f:38:24:54:30:14:4d:78:bc:6e:5a:8e:
fc:51:49:43:5e:e9:df:6a:99:ac:b3:70:26:7c:ee:13:4b:e1:
a5:cd:30:1b:af:13:3c:a0:fd:80:d7:27:bb:42:06:d9:3f:40:
b1:54:54:b6:95:b1:0f:d1:63:ce:d3:74:60:40:16:ca:5a:de:
78:2c:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:22:44 2025 by rpki-client