
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
File: bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa (raw, json)
Hash identifier: svfibCdRuFuUt5FVKXdMTF8yS2pdneGqCq1XFJCeMS4=
Subject key identifier: 24:24:23:1B:8B:8A:D4:38:BB:A9:75:D2:36:ED:D5:AF:23:68:62:CF
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584F2ABD1B51F52CD4035C795380
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 3360
IP address blocks: 192.25.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:1b:51:f5:2c:d4:03:5c:79:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=dd172087-e505-4a0f-8d01-e300780d3c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:6a:ed:31:91:6a:8a:d5:cd:48:da:5e:2f:
5d:67:ef:48:23:f2:4a:02:ab:a3:9e:04:b8:f4:71:
33:15:77:db:9d:75:ce:85:ef:da:7e:c6:6f:d9:cb:
2a:b9:fc:4b:d9:c1:a4:e0:d6:e4:a4:29:93:af:4a:
0b:44:f0:d8:81:f4:7e:97:b2:7c:37:ae:0c:5c:7a:
01:4d:a3:f3:a2:b0:b4:f8:2d:0d:4f:6f:43:b2:00:
b8:a9:1f:d1:91:72:67:bf:58:b4:cc:cb:0e:10:8b:
30:87:b7:59:7b:1d:7d:75:0a:fa:a7:cc:4e:42:e9:
3c:f3:04:55:d3:97:15:82:cc:ec:eb:07:79:6d:9a:
20:14:ff:73:3c:6e:0e:8d:9a:71:d2:20:b6:e8:28:
a5:85:19:dc:cd:ea:be:84:ef:b7:c6:26:c4:ac:6d:
18:74:13:88:a2:82:03:27:fe:f4:2e:e8:e5:47:30:
b4:3f:90:db:33:dd:6f:a6:2b:0c:d4:52:cb:12:7e:
58:8d:96:f9:17:27:5a:56:78:c3:13:c1:41:aa:56:
3a:9f:6f:a2:a5:61:9c:11:66:1e:6c:e1:ed:5b:6f:
ae:90:dc:aa:6f:b5:3f:f8:bf:12:73:20:d3:e2:4a:
b0:d4:11:e1:3a:9d:5c:1e:0b:9f:a7:d3:bf:09:4a:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:23:1B:8B:8A:D4:38:BB:A9:75:D2:36:ED:D5:AF:23:68:62:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:2a:35:ca:c5:b7:9d:d0:8b:fd:7c:f5:87:36:30:b3:bf:6f:
2c:bf:c3:f9:b6:fd:3e:5d:a3:23:44:11:29:e0:07:a0:f3:26:
67:55:3c:a1:72:42:e3:53:83:28:31:88:c8:52:0e:81:35:94:
68:4e:91:4c:32:c1:8e:2b:d7:51:8e:dd:9a:31:7d:13:95:94:
a5:c2:e1:47:4a:c9:61:0c:15:17:ea:dc:b8:c8:3f:d3:b3:4a:
6a:de:1c:7b:fc:8b:1c:10:65:20:58:80:b3:c5:47:85:56:d1:
46:86:dc:1d:d5:36:dc:49:9a:18:5d:aa:91:02:79:5a:e9:36:
e2:2c:c6:19:00:2c:0d:15:64:3e:5d:c3:c1:b2:53:88:13:36:
04:36:a5:d0:1a:de:ec:aa:1e:67:39:f7:e6:05:27:ad:ad:ac:
db:d6:2f:1f:48:46:75:bc:db:91:26:3a:45:f1:c2:ba:fd:dc:
38:0d:37:1c:2b:57:50:91:ab:89:78:e4:0b:5b:c1:83:42:80:
4e:27:20:f7:9e:32:2f:d1:a8:07:89:17:12:9e:b7:70:46:09:
b6:ec:36:5c:00:d3:dc:8d:b8:4c:04:a0:96:1d:df:cf:f2:e2:
e8:ce:c2:9f:4e:8e:de:89:01:9b:12:5d:25:f4:6d:21:5d:09:
52:9b:fa:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRtR9SzUA1x5U4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZGQxNzIwODctZTUwNS00YTBmLThkMDEtZTMwMDc4MGQzYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKtq7TGRaorVzUjaXi9dZ+9II/JKAqujngS4
9HEzFXfbnXXOhe/afsZv2csqufxL2cGk4NbkpCmTr0oLRPDYgfR+l7J8N64MXHoB
TaPzorC0+C0NT29DsgC4qR/RkXJnv1i0zMsOEIswh7dZex19dQr6p8xOQuk88wRV
05cVgszs6wd5bZogFP9zPG4OjZpx0iC26CilhRnczeq+hO+3xibErG0YdBOIooID
J/70LujlRzC0P5DbM91vpisM1FLLEn5YjZb5FydaVnjDE8FBqlY6n2+ipWGcEWYe
bOHtW2+ukNyqb7U/+L8ScyDT4kqw1BHhOp1cHgufp9O/CUqsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQkIxuLitQ4u6l10jbt1a8jaGLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmRiMmNiN2QtMjAwZC0z
MDdjLWI2MTItOWZmOTRiNGM3MWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBk4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIqNcrFt53Qi/189Yc2MLO/byy/w/m2/T5doyNEESngB6DzJmdVPKFy
QuNTgygxiMhSDoE1lGhOkUwywY4r11GO3ZoxfROVlKXC4UdKyWEMFRfq3LjIP9Oz
SmreHHv8ixwQZSBYgLPFR4VW0UaG3B3VNtxJmhhdqpECeVrpNuIsxhkALA0VZD5d
w8GyU4gTNgQ2pdAa3uyqHmc59+YFJ62trNvWLx9IRnW825EmOkXxwrr93DgNNxwr
V1CRq4l45AtbwYNCgE4nIPeeMi/RqAeJFxKet3BGCbbsNlwA09yNuEwEoJYd38/y
4ujOwp9Ojt6JAZsSXSX0bSFdCVKb+sk=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:17:42 2026 by rpki-client