
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa
File: c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa (raw, json)
Hash identifier: oNkPp8eoHHmUuzKqJSHV6EpV5M0POvVbrJ8/X5bN2MQ=
Subject key identifier: F1:B5:39:DD:98:44:17:29:32:3D:6B:62:53:D9:EB:92:48:94:DD:09
Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial: 010D0C9F4328584B9F6CDA655A5A3347E9390800
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa
Signing time: Fri 24 Oct 2025 01:00:30 +0000
ROA not before: Fri 24 Oct 2025 01:00:30 +0000
ROA not after: Thu 22 Jan 2026 02:00:30 +0000
asID: 63023
IP address blocks: 167.17.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9f:6c:da:65:5a:5a:33:47:e9:39:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
Validity
Not Before: Oct 24 01:00:30 2025 GMT
Not After : Jan 22 02:00:30 2026 GMT
Subject: CN=494c1c49-3ff4-4fa4-a375-2a1ac160b92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:83:54:75:c6:bb:41:1d:0f:3e:fd:db:e9:
30:79:34:24:0f:76:dc:db:88:26:07:24:36:01:ba:
32:e9:8e:f7:12:78:00:9f:98:26:73:c9:bc:75:a1:
c9:26:6e:96:ee:6c:e9:4b:95:38:07:bb:b7:0f:66:
23:a7:85:bf:9a:dc:a2:42:ef:f0:e8:2c:41:8d:33:
e7:9a:ff:f4:37:00:fe:30:6f:31:d9:ba:9f:34:7b:
53:ff:8c:a6:60:58:10:a9:83:35:38:7d:9d:e3:41:
d7:95:70:8f:65:b5:c1:d5:30:25:a5:78:a7:0a:df:
92:3c:13:ef:4a:f6:8f:f0:b0:cc:3c:d8:17:1b:96:
eb:e9:f6:cf:bd:9b:97:33:2e:a9:d7:11:6a:9f:65:
9c:2d:d9:ce:38:39:06:dc:12:78:49:f4:c5:10:e4:
6b:de:72:30:b1:8c:f9:f4:2a:3e:23:7d:89:91:e9:
57:e8:be:cf:c8:b1:d1:c1:52:67:39:d0:b8:bd:f5:
7f:61:bd:71:a5:37:de:25:bb:d5:e0:4f:2e:13:14:
da:91:71:17:ea:fe:28:c9:7a:82:31:c5:22:59:3e:
18:59:6d:6b:c8:47:38:67:93:d8:be:58:d5:bd:a1:
b7:a7:ba:c9:8d:5f:fc:ad:8d:e7:3c:56:f5:0b:53:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:39:DD:98:44:17:29:32:3D:6B:62:53:D9:EB:92:48:94:DD:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
X509v3 Authority Key Identifier:
keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
sbgp-ipAddrBlock: critical
IPv4:
167.17.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:38:2a:58:bb:63:3e:e4:6f:bf:de:44:c7:0b:0e:04:2a:1b:
4b:a4:b4:1f:c8:1e:2a:32:20:f1:5a:ab:8f:47:63:4b:2d:c1:
1f:f9:03:60:d2:8d:63:de:b8:cb:03:8e:cd:44:a7:10:c9:aa:
a8:1b:ae:6f:7b:6b:74:a9:c2:b8:ae:c0:28:a4:a5:76:08:6d:
4f:d6:31:bc:dc:ae:88:3c:64:27:cb:b4:16:ad:3c:57:c6:9a:
26:b7:41:d7:29:af:49:c3:c5:a9:04:a8:43:ac:c3:4c:d0:40:
3f:0b:1d:cc:d1:d8:14:b9:a8:71:89:6a:11:a4:02:06:ec:5d:
a6:f3:86:0b:64:6d:98:d4:ef:2e:bd:2e:64:47:e6:ce:12:f9:
06:49:5f:c2:cb:8c:12:b9:45:2c:2f:8a:3c:fb:98:56:c3:2d:
dd:9a:64:8e:72:c7:13:1e:c1:28:ac:54:0d:61:59:29:32:e6:
7d:db:c3:4b:26:c7:7a:e5:4d:f9:ba:a7:5e:88:e1:9c:9f:1d:
ab:b2:4e:00:77:5b:98:f5:38:d2:01:7a:cd:15:9b:5e:98:f7:
c4:bb:e5:0a:71:e7:97:96:46:6e:8b:20:db:de:2e:7e:70:43:
10:af:d9:ec:e8:e9:3e:b5:76:b7:cc:1e:bb:13:5a:01:7c:1c:
be:dc:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 14:51:23 2025 by rpki-client