
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa
File: eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa (raw, json)
Hash identifier: 6kLbohnMZRZy+qO2TRRZGKEqhNDK62040/MjknhV2J0=
Subject key identifier: 00:1B:C8:77:09:47:83:82:AE:65:A3:5C:18:C2:3A:5F:B6:E8:72:A7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BAD6279629DB81AB12B8F76E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 396595
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:79:62:9d:b8:1a:b1:2b:8f:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=93afda97-854f-409e-9cd9-f31a8c720b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:6c:64:41:91:e6:ca:dc:77:99:75:73:ad:
88:a8:66:95:88:2b:f7:c2:e6:5f:8d:fd:67:31:cb:
dd:33:e1:dd:a1:bd:71:aa:03:65:69:0c:e7:e3:4b:
78:3b:a3:50:55:db:0c:22:57:63:8d:7a:05:fc:c7:
0e:5f:40:1e:a7:2d:16:32:a5:1d:79:53:95:d5:49:
71:b7:a0:3b:60:51:41:49:64:7e:d7:e5:07:87:b5:
73:b3:76:37:87:f5:84:69:55:89:89:59:8a:bc:21:
57:d0:6f:48:5e:a4:22:66:c1:24:6c:b2:a1:6f:48:
e4:b5:b3:c8:03:9d:64:1f:cf:fc:1e:59:6d:c0:0c:
b8:45:d3:6e:f3:1a:a9:ea:28:a3:df:c2:cb:ad:6e:
7c:3c:94:c1:fa:45:c7:c0:f7:b2:2f:2e:2b:eb:02:
83:dd:fb:76:19:e9:da:68:52:8c:d5:f3:18:f7:16:
49:33:63:a9:ee:31:27:b9:7b:ea:8f:16:98:a9:66:
40:cc:88:ff:ca:34:66:da:ad:49:80:d7:75:99:a4:
7a:1c:2e:ee:8f:fe:9e:13:88:29:67:38:b5:65:6b:
ff:2d:3d:99:f8:f7:d7:94:8c:20:ad:69:a3:93:33:
31:21:9b:91:12:04:68:90:80:e0:ba:46:d3:13:6c:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:C8:77:09:47:83:82:AE:65:A3:5C:18:C2:3A:5F:B6:E8:72:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:55:54:5c:b2:17:bb:ca:25:84:62:ac:7c:f1:ac:fe:c1:27:
4d:19:be:5e:53:89:6a:e7:73:ea:ff:66:0a:2f:47:3f:46:9d:
83:08:fb:53:bf:b3:d3:0f:b6:31:aa:be:ac:bc:35:95:5e:e7:
eb:5d:be:55:13:cb:31:62:de:7d:6b:45:ff:04:2e:0f:32:51:
a2:d2:d2:50:f8:56:2c:5f:fa:6b:31:24:58:cf:9f:ff:83:de:
49:a2:88:d6:f0:3c:d0:c1:31:b3:24:ee:a2:ce:db:e8:62:1c:
59:48:1f:37:84:33:5f:c5:dc:40:1d:08:14:e1:4e:43:fb:90:
e1:f5:b1:c0:f9:b4:88:07:16:2a:cc:71:17:96:6e:84:9f:f0:
8c:ad:a2:08:5b:f6:ec:3d:76:49:a1:5e:cd:9b:fa:a4:cb:ac:
14:5c:98:d7:2d:c9:4d:44:8e:57:b6:2b:43:4e:76:51:51:c0:
41:c8:2e:72:40:2e:47:41:d1:e8:0a:81:8f:08:7e:c8:b2:9a:
ef:48:01:4a:78:42:13:00:68:a9:21:d9:7c:71:2b:31:9a:b2:
ee:c8:cd:75:92:b5:bd:d5:cf:33:b6:02:2e:06:c4:73:d2:8b:
40:d3:d6:a0:c4:16:4a:bf:03:4c:44:10:45:ae:48:a9:ac:80:
db:b7:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:03:02 2025 by rpki-client