
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa
File: a38a8da5-2705-3176-9add-cee9d33d73a3.roa (raw, json)
Hash identifier: PmOLk7ifR5azpa1p3k+OaGV0mZkKU1zu5Q32v0zVWx8=
Subject key identifier: E3:00:D1:66:0B:9D:F9:4F:0F:B4:B4:D9:7F:06:1B:F7:23:F1:20:75
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D6EDA7C0A0287977262CAB180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 397200
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:7c:0a:02:87:97:72:62:ca:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=fe765385-80d4-42e2-8cce-f07b28bc2f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:99:55:a0:56:b8:f7:d2:46:a2:5e:67:aa:
f0:fb:e5:31:62:c9:5c:76:d3:ef:8b:2d:a3:ee:ca:
6e:6b:51:fa:d6:d5:b6:1f:39:42:be:ea:f2:49:c9:
50:0c:38:1a:33:34:46:87:0e:b0:f3:b6:af:bc:3d:
fd:a4:76:bf:19:ee:92:22:6e:52:28:ed:23:4e:fd:
e6:07:27:f3:85:1e:58:d1:be:4b:a7:e5:33:5b:f8:
49:4d:a1:88:45:ef:06:f6:76:58:43:3a:df:d3:63:
63:fe:f7:21:b1:ed:e3:02:9e:30:ca:a5:9b:3d:59:
df:60:50:21:12:74:14:25:bd:02:27:54:b1:d4:71:
7d:93:b5:e4:96:2d:1c:21:34:0b:15:db:47:44:2d:
88:5d:8d:51:ab:02:25:7c:fc:43:3c:92:53:aa:3f:
a1:15:e8:3f:98:06:14:1b:45:f9:63:f3:1c:cd:6c:
49:fb:9a:b5:b9:05:31:ce:9c:6c:ac:7d:8a:80:f5:
bc:c9:91:e1:15:68:f4:0b:42:e1:aa:bd:3e:5a:95:
6b:26:c3:20:07:82:52:57:a6:29:07:92:8e:f3:bf:
dc:64:e7:7d:e2:46:9b:a0:66:a1:bd:40:32:91:65:
31:43:c0:a4:2a:42:e9:e9:e1:6a:e0:2c:20:4a:80:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:D1:66:0B:9D:F9:4F:0F:B4:B4:D9:7F:06:1B:F7:23:F1:20:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:4d:8d:e7:95:c3:52:4e:91:39:41:9c:20:60:45:ac:24:3c:
d9:ed:b0:2b:05:06:e7:58:95:e2:bf:75:61:c3:8c:8d:9e:4e:
b6:b1:08:81:7e:7e:45:ca:93:dc:3b:5b:bf:b9:28:26:da:47:
16:f3:17:f2:38:48:6b:6b:a3:42:8f:f2:c5:65:6c:9c:a5:4e:
38:a7:e1:77:5f:b3:47:d4:09:47:95:ce:32:07:b8:2c:60:87:
6f:e2:9d:90:b5:91:52:4c:36:14:cf:1c:3d:c4:1b:58:62:9f:
62:c1:55:4c:8b:74:cf:c6:82:0e:f8:b3:6a:a5:fc:08:cb:c4:
31:c0:fd:59:e5:3a:bb:5a:d2:de:ad:cf:d3:03:42:fe:50:e6:
d9:8f:d7:9c:2e:5d:90:b0:76:d8:72:a3:44:90:a7:6c:24:53:
8c:b5:c6:72:ef:8b:6d:f5:3d:89:d2:00:39:c3:e0:6c:a5:bf:
aa:08:ce:e7:5e:45:bf:74:e5:f5:e9:08:15:57:d2:40:29:c4:
23:51:91:31:b6:ca:76:21:02:92:85:0a:46:4a:cc:fb:0f:58:
08:fc:b5:9e:d9:f0:e3:13:cd:1f:cb:5e:3f:50:f3:64:7c:fe:
b5:e2:19:23:68:9a:96:fb:00:1e:65:f7:bd:30:6f:75:48:11:
6b:e6:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:53 2026 by rpki-client