
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8667555a-42f6-3bb9-ad75-7246e6446391.roa
File: 8667555a-42f6-3bb9-ad75-7246e6446391.roa (raw, json)
Hash identifier: i/Xaxr8pn0P596W2kHDDED6bKSJZukIcaKfmjZzRjF8=
Subject key identifier: CE:30:5E:59:08:96:F0:FC:FD:11:F6:95:2A:7D:B3:EC:C1:0E:43:BA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F03A76E44A47352E99ED090C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8667555a-42f6-3bb9-ad75-7246e6446391.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 396602
IP address blocks: 199.7.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:6e:44:a4:73:52:e9:9e:d0:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=b76929bb-6dc7-4c14-8304-68eb96c4821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:29:47:b8:93:06:51:93:97:3a:28:c0:07:
c2:45:6a:3d:8a:03:72:77:88:31:56:7a:a5:ef:3e:
4c:a3:75:40:49:9d:04:ec:46:d8:2e:d6:31:83:42:
67:a4:a5:f2:b2:00:8c:b9:5d:b8:86:10:0e:4f:42:
17:cb:48:b2:3e:97:7e:78:62:1c:9e:e3:da:c0:ec:
4b:d4:7d:b6:6e:1d:7f:b2:53:5f:31:cc:eb:dd:5a:
6d:b2:b7:a5:4a:a9:29:5c:3b:6f:ea:3f:60:f2:fa:
4c:88:c4:fa:ee:f9:81:ce:a3:44:03:cc:ea:5d:63:
1a:9e:dd:cf:3a:5f:29:5a:9b:92:85:9b:89:1c:c5:
fe:0c:ee:ef:8b:2f:a3:87:a7:d8:a0:97:4d:c7:37:
a2:40:4a:03:11:07:4f:76:f6:1c:39:e8:ce:8e:28:
51:3d:ae:98:93:fc:b6:ba:37:62:c0:40:af:d2:46:
40:5c:8e:5b:76:fa:84:bb:22:cd:dc:68:b9:2f:f1:
2d:41:c0:fe:d7:e4:00:9a:c2:59:49:d1:3d:4b:5e:
7d:83:3c:df:b3:a9:47:6c:39:01:b0:b8:4c:30:12:
fc:a4:53:6e:97:c7:ec:db:1a:8e:15:53:d6:55:c0:
14:6d:fa:b8:01:4a:ca:fe:db:70:fe:e4:1f:ca:aa:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:30:5E:59:08:96:F0:FC:FD:11:F6:95:2A:7D:B3:EC:C1:0E:43:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8667555a-42f6-3bb9-ad75-7246e6446391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:e7:9a:99:bb:89:7a:3e:1a:e3:fa:89:ba:65:9a:61:f6:6e:
bb:4f:24:e9:fc:11:5a:ca:ad:05:0f:03:ca:64:61:d0:22:c6:
25:af:46:a2:d0:4a:68:fa:fc:34:19:5b:f7:20:44:ed:94:97:
ac:71:8f:66:e0:7b:a2:a8:31:0b:44:a4:7f:7f:23:28:5c:a7:
d0:ac:76:9d:cb:36:2b:74:a7:df:69:b3:11:6d:44:41:0d:36:
19:80:ca:3e:34:19:ab:d7:0a:14:5b:78:11:0c:ae:02:eb:cd:
f4:20:90:9c:66:3a:3a:7b:a8:9f:8f:84:d3:d8:ff:25:ed:d7:
1e:1e:5a:00:94:73:be:98:ec:7c:e6:2f:46:2c:86:63:0c:c9:
18:70:1b:f5:e6:e4:78:d7:e9:a2:11:54:b7:4a:9d:76:85:26:
8e:21:37:b8:87:0d:63:98:fc:fb:65:24:f2:93:9d:23:2b:a7:
f4:ed:dd:55:7e:62:1e:b4:85:6d:a8:3f:f2:87:a3:89:09:e8:
16:fd:f9:c4:20:2c:4a:80:45:1f:79:52:0c:4b:07:8b:15:22:
97:2a:b1:28:1d:2e:9e:ee:ce:31:2e:03:ad:ff:59:c5:56:ad:
7d:22:c4:54:be:c0:7f:be:6e:48:a6:51:c8:d6:6b:32:c2:95:
a1:84:c2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:33:07 2026 by rpki-client