
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e7039ea-517b-3cbb-b3c4-ec96fd4834a9.roa
File: 9e7039ea-517b-3cbb-b3c4-ec96fd4834a9.roa (raw, json)
Hash identifier: o3ijS97+RzgWPDPxTG1b6SuYFmDhKumKalps7wFbbjc=
Subject key identifier: D4:D2:92:3C:89:5A:C2:3A:82:97:E2:1E:2D:8D:B6:32:4C:0A:44:42
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD627A24267F6628130AB680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e7039ea-517b-3cbb-b3c4-ec96fd4834a9.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396608
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:7a:24:26:7f:66:28:13:0a:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=3fb0952e-5f88-4150-a680-55b61c8b3bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:61:4e:87:fb:f7:d8:02:69:4d:4f:f0:5c:
9b:de:bf:a1:5c:e6:94:1f:84:2b:7c:d0:75:c8:d1:
f0:31:a0:8f:3c:5b:43:74:c9:e3:7f:3d:6b:61:9d:
ea:78:8f:9c:7c:f4:58:08:e1:11:f6:95:53:b4:b7:
e8:12:16:d9:9d:cc:15:6a:f7:32:84:85:77:24:5d:
f1:e8:91:da:63:64:78:54:0f:5a:c5:7f:93:71:76:
d2:ec:27:30:bd:ff:4f:f0:1c:35:3a:1f:6c:16:cd:
a6:99:6c:4b:86:cf:d1:db:1a:84:9c:5e:eb:e4:bc:
86:3d:a5:b2:a2:72:40:9b:ff:43:b0:76:24:39:bc:
76:4d:fc:dc:8e:8b:b8:c5:a1:2e:5d:72:74:bf:05:
c4:03:47:10:a6:41:36:c7:37:27:21:aa:80:b4:1c:
5d:4f:94:5f:fd:1c:1f:89:66:16:17:24:26:8f:31:
42:9b:96:11:f5:cd:c5:c3:63:92:1a:98:e6:17:ef:
d4:0b:41:61:eb:73:f0:c3:7a:5f:62:ea:8e:ba:d5:
a7:78:92:e0:b8:af:1e:fa:3a:a3:06:cc:f8:b0:ce:
63:e2:97:41:19:60:02:af:98:2c:03:00:48:3a:24:
ed:97:4a:1f:f9:0b:68:11:51:f2:2f:71:2e:c4:c8:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:92:3C:89:5A:C2:3A:82:97:E2:1E:2D:8D:B6:32:4C:0A:44:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e7039ea-517b-3cbb-b3c4-ec96fd4834a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:8a:2c:32:c2:74:34:2e:94:2c:48:e6:ca:40:32:5c:5a:c0:
51:88:27:e8:45:1f:7c:3e:24:23:a2:a6:31:b3:15:4b:c7:db:
32:cf:3b:1d:e5:94:fa:c8:85:0d:57:c1:48:27:4c:16:f6:e6:
64:dc:24:f0:e9:ad:6d:32:2c:7e:61:d0:b5:2e:68:f2:41:9a:
77:88:c0:31:2c:8f:68:69:13:e2:e2:85:0f:bf:74:72:45:e5:
4d:e0:ef:9c:e2:ec:d9:52:8c:6a:a6:ad:c7:aa:88:9c:68:a3:
7a:2c:cf:15:16:1a:7f:b5:96:f5:89:33:7b:fb:58:bb:5b:ab:
b8:c3:a1:56:11:4c:5e:4b:e5:a2:aa:d5:6c:63:68:9c:85:a4:
b0:29:1d:30:a8:2d:99:4a:e2:56:b2:cf:95:bc:7b:3b:30:98:
44:d4:11:65:53:6c:5b:28:08:ff:ea:eb:d3:70:a6:6d:41:4e:
06:c2:7b:83:33:58:8e:fb:22:fb:9e:af:83:6c:cd:46:80:f6:
2f:a7:9f:35:28:58:17:94:b0:8c:17:e7:ac:fe:19:50:78:49:
c7:60:84:52:ea:b8:f1:45:bd:31:26:d3:b8:25:48:e9:c5:6d:
4b:0a:f1:d2:79:ee:08:b3:75:06:d9:93:af:76:7d:cd:94:2f:
87:a0:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:32:50 2025 by rpki-client