
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa
File: 665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa (raw, json)
Hash identifier: 8GiM8hxqwGX5csba7Y9yZt9ljZgud2SEAHsMqwJ0u5Y=
Subject key identifier: 00:A2:63:61:64:D0:04:FB:50:8C:B1:B9:FC:78:89:87:E3:ED:25:07
Certificate issuer: /CN=e87e7197-115d-4b17-bafc-0f9752e38b31
Certificate serial: 010D0C9F4328584B21CC1E6EC3920D6C429A5180
Authority key identifier: E9:0F:2B:5C:D4:BD:D1:46:B0:8F:DB:7A:D9:B0:64:7C:9F:AE:FF:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa
Signing time: Tue 09 Sep 2025 01:00:33 +0000
ROA not before: Tue 09 Sep 2025 01:00:33 +0000
ROA not after: Mon 08 Dec 2025 02:00:33 +0000
asID: 13742
IP address blocks: 70.37.192.0/20 maxlen: 20
70.37.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/e87e7197-115d-4b17-bafc-0f9752e38b31.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/e87e7197-115d-4b17-bafc-0f9752e38b31.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:21:cc:1e:6e:c3:92:0d:6c:42:9a:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87e7197-115d-4b17-bafc-0f9752e38b31
Validity
Not Before: Sep 9 01:00:33 2025 GMT
Not After : Dec 8 02:00:33 2025 GMT
Subject: CN=c5a67bfa-75b3-49ca-afc2-13ba74b84516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:1b:f6:03:38:3b:3c:3c:74:f1:bd:63:96:
5a:48:e5:af:6b:9b:09:77:f8:f3:5d:31:6d:5e:74:
d1:ac:d7:fc:bb:07:e5:f4:00:22:93:90:c7:01:77:
5a:c0:9f:a7:b2:b1:a6:45:98:82:ac:c3:12:66:26:
5f:64:90:a5:c3:3b:55:b8:c1:b3:91:ef:f0:31:45:
8c:9e:84:07:5b:77:55:87:20:46:df:3c:4c:3c:62:
b0:01:7c:5b:18:10:ce:46:8e:9b:c0:fc:dd:a4:d4:
34:b5:81:e1:f6:30:ca:85:db:47:a8:03:7b:2b:96:
9b:f0:a7:60:c7:38:a1:b6:81:c4:34:a6:27:56:8d:
cc:d3:50:a7:b2:d3:9d:68:44:55:10:33:e6:77:87:
a8:62:69:84:6f:a3:fe:f7:b9:4c:40:df:e7:52:7f:
ef:58:65:93:1b:3f:33:56:9b:e6:04:04:5b:7c:f6:
8f:77:04:ac:4d:67:09:20:da:66:b3:76:72:9f:63:
ec:85:37:2a:d5:6f:ef:59:80:45:e8:4d:41:86:17:
52:ba:ea:4f:c6:ec:15:91:87:34:4f:63:08:39:fa:
3b:51:db:6c:ae:54:4a:ec:3a:ba:2a:a1:3c:35:bb:
a5:e4:b5:88:f4:2a:cb:5b:cc:f9:41:33:85:c6:e0:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A2:63:61:64:D0:04:FB:50:8C:B1:B9:FC:78:89:87:E3:ED:25:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/e87e7197-115d-4b17-bafc-0f9752e38b31.crl
X509v3 Authority Key Identifier:
keyid:E9:0F:2B:5C:D4:BD:D1:46:B0:8F:DB:7A:D9:B0:64:7C:9F:AE:FF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer
sbgp-ipAddrBlock: critical
IPv4:
70.37.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:f3:4c:73:77:07:34:97:b0:50:0f:d8:3c:a2:11:a9:b0:b9:
e5:30:3f:33:32:5e:7d:c4:02:9d:a0:3a:ed:a8:df:07:d9:c7:
bf:de:72:19:e2:24:6c:66:4c:cf:86:cf:1b:dc:14:5d:32:e8:
7c:10:89:75:c3:e1:c8:6b:08:2d:f9:03:f1:2d:cc:6f:01:d7:
36:b7:87:53:62:42:21:10:2f:2d:1c:1b:d2:07:da:05:f9:48:
85:3a:b2:cd:d6:a0:8b:f7:ec:58:c5:36:ee:9c:40:54:96:6e:
e9:f2:a5:d5:c2:fd:e5:19:3e:62:98:26:14:32:72:64:e0:1d:
bb:d1:fb:25:13:0d:06:87:94:c4:96:10:f9:73:99:14:be:76:
9f:4e:45:a7:36:28:50:cb:ee:b2:f3:28:cf:d4:cd:ac:84:2c:
17:cb:ee:8b:13:62:de:b2:ae:16:9c:57:cd:62:b0:5c:20:4e:
b3:6f:47:7b:fa:cd:ba:f1:e0:e2:30:aa:d9:81:62:fa:e9:d5:
6a:8a:bf:6f:62:b9:30:3a:29:52:19:aa:81:d5:59:dd:df:16:
73:c2:dc:a3:44:de:55:91:74:7b:d8:88:45:f7:5d:89:82:c1:
4d:45:96:49:7e:97:7f:4c:c3:45:b5:5e:a0:3a:92:a2:d4:9f:
ba:3a:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:51:51 2025 by rpki-client