
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
File: 7e41608c-f4a3-38f3-a7b4-736ec6086365.roa (raw, json)
Hash identifier: IRaJ4BKM81zg4wuewEL/oEO2wRZqGxdnHHRklv6c3kk=
Subject key identifier: 68:AE:E2:96:4A:CA:32:12:0C:C1:8F:30:08:6D:8C:23:73:BD:E8:BA
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F4328584BAA97A0080534362B77F8B700
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 396982
IP address blocks: 199.64.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:a0:08:05:34:36:2b:77:f8:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=fc97c8d9-98e6-4abf-9865-a89d708a6b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:7a:3c:6c:60:11:fc:7d:92:1d:cf:5e:10:
58:0f:af:d6:61:0e:b2:2e:60:c0:66:33:eb:4d:77:
b2:b5:88:73:4f:c3:a4:a4:34:96:0b:b4:84:e1:55:
7a:29:ef:8c:e7:ee:0d:16:a6:5f:17:48:c1:58:db:
8b:85:8a:32:28:c2:e7:6e:41:e2:a6:cb:6d:7b:97:
cf:58:8c:3c:21:33:67:71:02:0c:43:8a:02:7e:c7:
63:ef:cb:6f:b0:ac:96:b8:2f:54:7d:f6:ea:f0:62:
eb:d2:4d:60:6c:2c:ec:24:cb:8f:54:2a:69:8b:ad:
22:60:b5:e0:a6:f9:57:b5:ed:d8:06:10:fd:19:e4:
93:51:96:f2:18:9a:d8:64:29:0b:ee:fe:c8:fe:fd:
a1:2d:a6:a5:cf:f3:67:c2:64:8c:31:56:51:9c:e1:
e1:88:40:af:55:3f:4d:03:26:80:6e:01:25:4e:5b:
d7:97:46:54:dc:d1:fe:09:9b:88:8b:00:21:61:bb:
04:54:b9:93:3c:5b:e1:59:f8:c4:54:d7:ab:d4:a9:
17:64:b1:42:fe:e4:f9:93:90:9d:be:ad:f6:89:9e:
50:4e:bf:36:d1:0d:c1:70:2a:38:5f:d3:51:d0:d4:
e6:52:2a:d5:89:bf:35:09:4e:eb:ae:a5:22:82:05:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:E2:96:4A:CA:32:12:0C:C1:8F:30:08:6D:8C:23:73:BD:E8:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:27:4c:45:05:6e:ee:17:bd:79:f5:70:37:35:4a:50:07:ba:
b5:59:20:0c:70:07:ef:3b:69:6c:00:0a:85:3b:46:22:47:c7:
27:9a:22:83:2a:db:bf:5f:e2:41:8a:11:cf:71:f7:65:c5:5d:
33:ff:d1:2e:70:42:ff:d6:24:ad:a2:26:41:8c:f7:b5:d9:26:
4f:39:48:c8:22:7e:96:08:c5:30:1e:7b:22:3f:0a:ae:62:a4:
9a:cc:61:b5:ab:b2:0c:5a:2c:40:d9:31:e7:1d:20:13:2e:da:
98:7b:a1:23:a5:9a:73:c7:da:aa:82:12:d5:c2:23:cd:ba:82:
bb:58:de:87:0d:77:4e:a4:1c:5f:db:fa:6e:e7:6a:cb:41:e8:
10:f8:ee:5f:89:15:52:8f:66:ca:f9:37:b2:65:ea:3c:ab:b3:
8b:50:29:90:ed:7b:ec:e5:b4:fd:39:58:26:72:9b:ca:40:38:
28:91:ed:90:3b:9b:76:65:50:cf:36:d1:34:dc:6c:02:7d:85:
35:30:10:fb:95:67:59:d1:9f:44:70:3a:60:80:21:67:07:07:
68:40:0b:7d:10:42:c4:cb:77:1a:e0:45:56:82:f9:dd:0d:6e:
e3:cb:ca:c7:09:89:cf:9f:40:02:46:c9:5a:11:6e:88:00:85:
5e:0c:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:46:54 2025 by rpki-client