
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa
File: 7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa (raw, json)
Hash identifier: 27C584YAKbhcwoe+nl0BPIu/jclNVBub9CYEeWiTGgw=
Subject key identifier: A5:17:C4:08:50:2D:05:D6:2B:AF:2C:6A:D0:BE:30:EC:59:FA:C6:56
Certificate issuer: /CN=712951d4-501e-451c-a20a-59b6aff3e2d4
Certificate serial: 010D0C9F4328584B79BCBAD27C8B8AB7606A0D80
Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa
Signing time: Fri 10 Oct 2025 13:00:37 +0000
ROA not before: Fri 10 Oct 2025 13:00:37 +0000
ROA not after: Thu 08 Jan 2026 14:00:37 +0000
asID: 38177
IP address blocks: 198.140.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:79:bc:ba:d2:7c:8b:8a:b7:60:6a:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4
Validity
Not Before: Oct 10 13:00:37 2025 GMT
Not After : Jan 8 14:00:37 2026 GMT
Subject: CN=182b0193-0bad-46b3-bba9-59824e208093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:6e:b5:ce:46:6f:e0:46:a6:b5:71:d5:2a:
3f:01:59:38:b8:de:36:31:80:d4:1f:58:13:1d:46:
13:4e:f1:89:06:18:65:90:95:55:69:c0:62:50:be:
29:e2:5a:ec:ee:1e:83:e6:64:e1:2c:44:c9:ef:40:
cb:97:6a:1d:f2:c2:9c:c7:a2:5b:06:eb:b3:14:f3:
18:de:28:20:03:28:6b:73:52:c6:b2:ee:d0:30:90:
81:c7:91:6f:4d:15:70:2b:9a:ab:8f:47:52:3a:fa:
8c:51:b1:ee:6e:a9:0c:bd:b7:be:27:77:7c:3c:3e:
a0:a2:29:a2:9a:0c:e0:7b:91:9d:0f:d9:38:7d:81:
82:c5:40:6f:0d:db:d5:02:5d:fd:8a:36:ed:61:8f:
72:a6:60:19:4e:bf:e2:4a:df:99:a9:db:29:be:87:
41:e9:6c:7b:5c:e4:d7:15:8d:5d:fe:12:24:cc:23:
5b:6a:66:b9:a3:58:dd:09:6b:d8:45:7f:43:62:76:
87:bf:13:e2:f5:4f:d6:09:c7:2b:53:0c:f7:52:bd:
a4:88:41:a1:ca:a8:7e:8c:b2:db:d9:b3:10:40:6c:
3b:f3:73:27:06:48:b3:4f:17:4d:00:0d:20:6b:53:
b2:dd:6d:ed:15:47:85:04:5c:e6:ff:a9:33:66:5e:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:C4:08:50:2D:05:D6:2B:AF:2C:6A:D0:BE:30:EC:59:FA:C6:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl
X509v3 Authority Key Identifier:
keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.140.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:84:6d:89:7f:d3:6f:28:28:55:aa:fa:4e:08:ec:b5:42:3a:
61:1c:92:1d:42:c3:7e:48:32:54:f1:2a:ef:bf:1b:a5:7f:9a:
e0:6c:7c:8e:4d:65:0c:c6:64:63:03:9b:e6:a8:6e:5b:33:49:
6f:90:6d:9d:bc:97:53:e5:5f:99:82:08:e5:b1:7b:80:a4:40:
10:5d:f5:57:3a:88:ce:86:f1:2e:ae:f6:de:0a:d3:18:9e:9b:
5b:0d:6f:57:96:5e:d9:54:36:23:bd:58:06:05:94:71:75:9d:
99:c1:1a:2f:c9:98:7e:5e:fb:7b:2b:63:d3:3e:4b:30:c6:dc:
b7:d6:64:86:a4:96:d8:e8:d3:9c:f2:fc:87:bd:d5:6c:e8:b7:
87:35:94:39:36:56:37:09:f5:5f:f4:a2:c9:e3:b9:fd:6c:a3:
fb:3c:cb:d4:86:cc:5b:e6:08:70:48:43:4f:f1:63:aa:36:47:
b4:bd:93:4c:00:19:82:08:33:8b:6b:f4:ef:0d:74:0c:0d:a1:
a0:ba:6e:01:35:ac:cc:73:04:0e:89:15:ad:5c:d5:3d:d7:35:
54:15:bb:8a:85:0e:28:2c:5a:dd:fe:1b:00:03:8f:70:16:06:
84:d4:05:61:bd:7d:8a:04:f8:d1:f2:8b:66:f2:c5:09:08:59:
74:ca:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:09 2025 by rpki-client