
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
File: 458aa676-e15f-387e-993d-16f00f08f98c.roa (raw, json)
Hash identifier: BzuA4oPDp33i61Sqk0ckTWFO6Fb5VCQ/XPyP3SxeqLw=
Subject key identifier: 44:15:75:66:E7:46:9D:2D:A4:3F:1B:32:34:DD:B7:65:02:DA:96:CA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584AE1971218DE4849825CB14B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
Signing time: Sun 17 Aug 2025 01:00:32 +0000
ROA not before: Sun 17 Aug 2025 01:00:32 +0000
ROA not after: Sat 15 Nov 2025 02:00:32 +0000
asID: 15321
IP address blocks: 216.209.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e1:97:12:18:de:48:49:82:5c:b1:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Aug 17 01:00:32 2025 GMT
Not After : Nov 15 02:00:32 2025 GMT
Subject: CN=dff7b03b-146e-44ea-9a30-c37cd8d19678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:39:ea:5c:57:9a:78:ef:a6:c8:fb:64:f7:
be:cc:ac:91:49:6d:05:22:fc:d2:b1:1d:cf:2b:28:
a9:58:45:74:da:ae:5f:56:64:63:2f:f8:1f:88:84:
cd:1d:61:df:91:4e:f1:70:5b:18:ab:f6:c8:dc:3d:
dd:cf:aa:af:d3:d5:36:74:70:fa:ea:ae:e7:49:86:
84:8a:d0:b2:98:b5:66:b3:cb:36:be:dc:a3:d1:5a:
20:d2:c0:91:7e:ea:a2:b7:00:b1:9c:97:c5:b9:0a:
2d:bc:1d:1e:3a:f4:0f:d5:ff:0a:24:44:0e:00:82:
6a:58:1a:c0:11:d3:ba:95:61:a7:1a:38:6b:c9:83:
db:13:f8:c8:e3:de:d1:d4:f0:15:6c:44:5d:a3:09:
e7:78:53:6c:20:52:5e:bf:f9:45:74:57:22:ab:a3:
9f:ab:91:eb:b8:bc:a3:4c:b8:ba:fb:ee:37:66:da:
6b:48:dc:fa:b7:4a:05:7d:41:ca:aa:24:9f:58:ec:
d1:5a:61:65:31:37:a7:9e:8e:ca:83:93:8f:2e:e5:
3a:24:28:85:1c:00:31:4c:ba:1c:ed:ff:f4:09:0b:
59:6c:1d:16:a9:02:a2:45:23:ee:05:03:35:39:f9:
e3:bd:c3:f0:d1:12:91:4d:73:19:37:f1:d3:16:0d:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:15:75:66:E7:46:9D:2D:A4:3F:1B:32:34:DD:B7:65:02:DA:96:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:f8:cf:78:a6:39:c3:62:d6:46:3c:70:19:1c:80:22:45:79:
5a:9f:ce:41:69:84:94:ae:b3:44:9b:4b:f1:1f:de:6d:db:b3:
f4:a2:bd:63:07:6b:cb:fa:5a:52:84:d2:27:f5:03:f5:8c:73:
4f:99:e6:0e:e5:a1:2e:b1:76:eb:ab:73:f1:a5:44:af:46:10:
4b:e0:ba:c5:93:fb:d1:c9:1a:d2:33:bc:56:03:f5:7c:f5:a5:
67:ad:d8:0d:8a:95:3d:87:e4:15:74:c2:58:31:ae:b6:1d:58:
f2:18:74:83:92:77:99:89:ce:77:93:c8:75:04:22:f1:f2:d7:
7f:b3:2b:ce:43:4b:4d:7c:25:ef:8e:c9:b0:0c:a5:9e:29:d2:
8d:a6:84:f2:c5:2f:bd:9b:9e:2a:a5:c2:36:56:3d:4c:07:32:
37:2f:ae:ac:25:67:3a:0d:e4:cd:cd:78:96:f3:9c:21:cd:37:
b3:e1:e8:6a:8b:4c:e7:f5:c5:07:d2:4d:17:ec:bb:1d:9a:16:
9f:af:a6:bc:52:de:e5:4e:b2:72:a9:44:de:a7:4f:f5:7d:da:
6d:85:db:e0:57:bf:14:5b:32:10:fa:94:d1:b9:53:8b:e9:d8:
6a:6f:7d:ae:db:f2:bd:e6:33:5a:13:e4:06:7c:94:d1:d9:14:
d4:92:5f:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlxIY3khJglyxS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZGZmN2IwM2ItMTQ2ZS00NGVhLTlhMzAtYzM3Y2Q4ZDE5Njc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJw56lxXmnjvpsj7ZPe+zKyRSW0FIvzSsR3P
KyipWEV02q5fVmRjL/gfiITNHWHfkU7xcFsYq/bI3D3dz6qv09U2dHD66q7nSYaE
itCymLVms8s2vtyj0Vog0sCRfuqitwCxnJfFuQotvB0eOvQP1f8KJEQOAIJqWBrA
EdO6lWGnGjhryYPbE/jI497R1PAVbERdownneFNsIFJev/lFdFciq6Ofq5HruLyj
TLi6++43ZtprSNz6t0oFfUHKqiSfWOzRWmFlMTenno7Kg5OPLuU6JCiFHAAxTLoc
7f/0CQtZbB0WqQKiRSPuBQM1OfnjvcPw0RKRTXMZN/HTFg1p2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQVdWbnRp0tpD8bMjTdt2UC2pbKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDU4YWE2NzYtZTE1Zi0z
ODdlLTk5M2QtMTZmMDBmMDhmOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NHpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABD4z3imOcNi1kY8cBkcgCJFeVqfzkFphJSus0SbS/Ef3m3bs/SivWMH
a8v6WlKE0if1A/WMc0+Z5g7loS6xduurc/GlRK9GEEvgusWT+9HJGtIzvFYD9Xz1
pWet2A2KlT2H5BV0wlgxrrYdWPIYdIOSd5mJzneTyHUEIvHy13+zK85DS018Je+O
ybAMpZ4p0o2mhPLFL72bniqlwjZWPUwHMjcvrqwlZzoN5M3NeJbznCHNN7Ph6GqL
TOf1xQfSTRfsux2aFp+vprxS3uVOsnKpRN6nT/V92m2F2+BXvxRbMhD6lNG5U4vp
2Gpvfa7b8r3mM1oT5AZ8lNHZFNSSX40=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:07 2025 by rpki-client