
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6a3ee3d-1c05-3711-a1fc-6a1bac836f70.roa
File: a6a3ee3d-1c05-3711-a1fc-6a1bac836f70.roa (raw, json)
Hash identifier: 1Nmn0vc9AZysEcH1x4zdB8WWBW5BX4rXblJA5/uEewk=
Subject key identifier: A3:7C:1D:1E:AF:AC:81:07:CF:84:FE:F5:F1:7E:9A:D1:58:B3:91:AE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD6278D524FA26474AFF8640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6a3ee3d-1c05-3711-a1fc-6a1bac836f70.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 397196
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:78:d5:24:fa:26:47:4a:ff:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=18e92a60-5e67-440e-b220-7bbdb572dbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:53:80:57:97:f4:92:d3:61:88:61:50:d9:
7b:7e:3a:ea:a2:79:62:bd:f7:61:be:11:b6:15:cc:
9d:af:5a:bf:16:4e:83:e9:0c:b5:58:bd:5d:d7:6e:
d8:0e:13:bf:d5:7e:46:b2:d9:58:bf:d8:3d:82:a4:
3b:83:6e:4c:3c:c3:a7:e2:31:ab:aa:cd:65:f3:9b:
18:74:75:9d:66:81:57:f2:d1:b5:1e:65:ef:4e:6f:
29:a6:df:c1:c3:4c:b1:89:c2:14:d0:3c:de:d1:c0:
4e:fe:ca:03:e4:61:6f:87:22:b0:f8:44:32:37:87:
8a:29:c0:e5:c6:44:7e:a4:b4:88:ac:7d:1d:32:b7:
aa:87:cf:15:b7:7e:24:4d:9b:42:11:c8:dd:64:ce:
06:54:08:42:de:2d:8e:a3:d3:14:26:95:0e:dc:b2:
35:66:15:b5:b6:68:cd:3e:a7:3f:ab:42:2e:c5:bf:
72:cc:93:32:2c:eb:31:70:fa:86:ea:60:39:ee:dc:
07:ce:74:8a:68:13:17:f4:8b:b4:77:88:b4:81:87:
2e:04:1b:59:ea:bb:16:07:a3:38:9c:25:18:c3:10:
b2:04:ed:f9:52:f8:4c:cb:09:71:dd:2e:e0:b5:f9:
ab:af:01:93:5e:03:32:89:c3:48:b1:1a:ca:c4:7f:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:1D:1E:AF:AC:81:07:CF:84:FE:F5:F1:7E:9A:D1:58:B3:91:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6a3ee3d-1c05-3711-a1fc-6a1bac836f70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e0:11:99:da:b8:b4:61:87:54:8d:78:66:14:4b:78:a6:46:
5c:36:e7:ab:75:56:7a:05:b4:24:4d:5b:3b:84:df:fa:0b:37:
ad:c0:e7:7d:66:41:c0:d4:e6:05:1a:e3:8f:6e:51:0d:91:06:
4a:96:10:89:46:0f:2f:61:01:6c:96:1a:1f:9f:a7:1b:8b:07:
81:8b:ba:da:30:63:5c:6f:9b:14:39:80:c3:1b:f6:8b:2e:25:
1f:60:14:e0:23:20:e6:90:3c:0a:d4:9e:84:f3:07:3a:f2:28:
71:f3:f4:81:2a:57:78:30:6b:e9:e0:a8:40:ae:a6:13:19:4d:
6c:7e:ab:52:e6:c7:3a:dd:80:3f:2f:af:54:5a:e1:ea:86:d3:
cc:85:3c:6c:e3:a7:91:5b:ec:5a:b0:2e:dd:2a:34:c2:57:db:
43:68:3f:43:29:b5:11:c4:29:75:bc:0d:60:d2:61:1a:ad:6a:
d5:72:87:93:96:9d:6b:8a:bc:d0:b3:af:69:0e:62:f9:f2:d7:
01:f6:e4:b4:56:9e:fb:8a:8f:5d:5b:12:b0:10:8f:fc:64:63:
8e:59:0e:b2:f8:c6:61:1c:5b:17:30:f1:b9:b9:34:7a:d2:20:
35:ef:75:97:10:e4:81:4c:b8:33:b6:c7:dc:36:fa:69:1c:01:
bf:d8:c6:0b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYnjVJPomR0r/hkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MThlOTJhNjAtNWU2Ny00NDBlLWIyMjAtN2JiZGI1NzJkYmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UxTgFeX9JLTYYhhUNl7fjrqonlivfdhvhG2
Fcydr1q/Fk6D6Qy1WL1d127YDhO/1X5GstlYv9g9gqQ7g25MPMOn4jGrqs1l85sY
dHWdZoFX8tG1HmXvTm8ppt/Bw0yxicIU0Dze0cBO/soD5GFvhyKw+EQyN4eKKcDl
xkR+pLSIrH0dMreqh88Vt34kTZtCEcjdZM4GVAhC3i2Oo9MUJpUO3LI1ZhW1tmjN
Pqc/q0Iuxb9yzJMyLOsxcPqG6mA57twHznSKaBMX9Iu0d4i0gYcuBBtZ6rsWB6M4
nCUYwxCyBO35UvhMywlx3S7gtfmrrwGTXgMyicNIsRrKxH8ISwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKN8HR6vrIEHz4T+9fF+mtFYs5GuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTZhM2VlM2QtMWMwNS0z
NzExLWExZmMtNmExYmFjODM2ZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBa4BGZ2ri0YYdUjXhmFEt4pkZcNuerdVZ6BbQkTVs7hN/6CzetwOd9
ZkHA1OYFGuOPblENkQZKlhCJRg8vYQFslhofn6cbiweBi7raMGNcb5sUOYDDG/aL
LiUfYBTgIyDmkDwK1J6E8wc68ihx8/SBKld4MGvp4KhArqYTGU1sfqtS5sc63YA/
L69UWuHqhtPMhTxs46eRW+xasC7dKjTCV9tDaD9DKbURxCl1vA1g0mEarWrVcoeT
lp1rirzQs69pDmL58tcB9uS0Vp77io9dWxKwEI/8ZGOOWQ6y+MZhHFsXMPG5uTR6
0iA173WXEOSBTLgztsfcNvppHAG/2MYL
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:49 2025 by rpki-client