
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa
File: 7effcafc-decd-3160-8a47-fac0462e8a13.roa (raw, json)
Hash identifier: WCZixXXyqz8IDO5tx+R0jUL16P0b/gl1nA8kAe/DNdY=
Subject key identifier: B0:95:E0:98:55:E4:DC:F3:42:51:A7:AF:86:0F:AB:AB:5F:C0:6D:C5
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584AFC1C032B1689FB1279CAC800
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa
Signing time: Tue 26 Aug 2025 13:00:41 +0000
ROA not before: Tue 26 Aug 2025 13:00:41 +0000
ROA not after: Mon 24 Nov 2025 14:00:41 +0000
asID: 21949
IP address blocks: 66.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fc:1c:03:2b:16:89:fb:12:79:ca:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Aug 26 13:00:41 2025 GMT
Not After : Nov 24 14:00:41 2025 GMT
Subject: CN=c9a98819-602d-461c-b307-dc39ea76ddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:54:3a:2c:3f:d7:7a:4f:fa:17:c3:ff:32:
bd:64:50:4c:b7:1b:4c:ad:55:74:1d:20:12:28:68:
b9:aa:38:a7:5e:31:17:da:3d:23:07:8d:6b:05:dc:
50:94:8d:52:87:f8:4b:d9:70:a0:78:1a:e0:db:49:
ea:46:20:26:32:e7:11:77:5d:ff:e8:6f:16:52:4d:
b2:28:95:fb:75:60:6f:15:36:02:52:d8:9f:68:f5:
fd:7d:8b:fb:16:ea:32:51:50:07:90:7e:27:24:cc:
41:1e:e4:e9:cb:39:36:10:9e:02:ea:1a:96:53:7c:
5e:ae:02:e3:62:f5:ab:05:a1:fb:b2:3f:e9:86:97:
81:08:73:5d:54:88:4c:8a:ed:92:a9:f3:d5:c3:b2:
4b:2f:6a:f4:67:d9:de:78:f7:0d:8f:bb:3b:76:d9:
03:ad:01:6e:81:7c:d2:38:cf:79:98:43:00:bb:d8:
5f:54:76:47:08:2a:8f:9d:71:61:7c:e1:86:7a:59:
d3:15:e4:fb:0a:8a:1e:8d:83:92:d7:3e:80:25:b6:
15:b7:5a:52:b3:9f:20:91:f7:a2:a6:af:af:e4:00:
41:96:1c:76:68:8d:09:62:28:24:ab:fb:b0:ca:ec:
3c:1c:19:65:5a:2e:14:82:1b:b4:26:50:a6:d4:d0:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:E0:98:55:E4:DC:F3:42:51:A7:AF:86:0F:AB:AB:5F:C0:6D:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.207.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:3f:31:03:1c:50:97:df:1d:cb:66:8e:01:34:68:53:85:ff:
9b:07:c4:f4:3a:6d:8b:65:78:77:07:f9:4c:a0:75:48:2c:6b:
fb:b7:ce:e9:6a:e9:c9:93:ea:2a:2e:1b:24:50:72:8c:eb:a5:
6a:38:21:49:ae:f7:52:46:e7:2a:0d:10:91:5f:91:98:9d:8f:
9d:20:24:e4:6d:be:8e:6b:7b:62:9a:be:c2:a4:fb:97:28:a9:
09:62:2d:c8:33:32:f1:09:95:25:16:9c:42:d4:4f:80:0e:83:
bc:72:88:2f:00:8e:82:55:5b:68:10:91:2d:f0:d1:43:25:a0:
33:d1:52:ad:6e:b1:b5:8b:3f:7c:a0:90:8c:31:c5:2a:ea:ec:
91:65:d1:20:11:37:c1:56:d4:e5:92:28:b3:aa:1e:ef:0b:69:
3a:c7:4f:be:52:9b:9c:da:0b:7f:2e:30:e0:cd:d3:b9:3a:61:
ca:7e:5d:8e:21:68:4b:1b:6c:f7:07:f1:6b:7c:38:a2:2f:e5:
94:7f:e7:7d:5b:8d:ae:fc:65:fd:64:76:f0:e1:a0:44:1c:df:
bd:b4:83:b2:a8:f3:71:9f:95:6c:50:c5:54:20:84:0f:8f:0a:
34:44:6b:0a:b3:7e:3c:91:7b:0d:8f:7c:66:6b:cf:75:d9:2f:
ae:9e:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 02:29:54 2025 by rpki-client