
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
File: 5d90001b-d20e-331c-8bd3-6c3305994bbd.roa (raw, json)
Hash identifier: sJit+QfXFq74hywrUsWQvVtjjhSKL+eZjGTKraqt3Jc=
Subject key identifier: FC:13:CD:B5:11:3A:5C:17:D2:6E:E1:9B:3A:66:CA:2F:22:19:F6:AF
Certificate issuer: /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial: 010D0C9F4328584BA39D25AD16089E78017BA300
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 53488
IP address blocks: 2607:ce00::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:25:ad:16:08:9e:78:01:7b:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=0f11cd4a-0fe3-4077-a409-3bb74bb5f1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:ea:0e:76:29:53:53:2a:73:dd:bf:3d:b9:
f7:ba:83:5c:43:0d:63:2e:08:4f:ac:3f:13:e3:81:
e9:81:15:fc:9e:65:da:58:ef:9d:4a:d0:d1:3d:fd:
56:48:4a:fa:c9:fb:42:d5:76:00:b1:6b:b2:b8:d6:
98:ef:1f:fe:db:48:79:c2:2a:93:37:7a:3e:93:92:
55:f7:2e:59:9a:c7:3a:c5:7e:9a:49:e5:24:3e:75:
30:8f:5a:01:ea:51:e1:ab:51:91:91:0a:81:38:2c:
1f:4c:6a:76:d8:d9:fa:c2:d6:dd:56:a5:3e:32:fd:
1e:06:d3:8e:05:b1:06:18:0f:fa:82:b3:ed:bc:85:
4c:f0:37:79:4a:6b:3d:54:e7:73:e9:1a:36:09:15:
4e:82:ea:b0:81:c3:c4:5e:c0:4f:09:34:6f:83:67:
22:a7:42:61:71:af:c0:aa:8b:d6:0a:50:38:13:78:
28:c8:68:5d:3c:db:4c:50:18:76:69:3c:c0:35:07:
4d:b3:15:12:09:da:09:f7:31:6f:11:5c:c9:e0:8f:
c1:84:eb:e2:3a:ab:10:a8:1c:69:10:7c:a1:01:fb:
c2:76:75:12:13:1d:7f:f3:93:c9:82:53:c2:e3:6c:
be:95:b1:f1:36:d0:49:3c:c7:26:01:fb:07:d2:b9:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:CD:B5:11:3A:5C:17:D2:6E:E1:9B:3A:66:CA:2F:22:19:F6:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
X509v3 Authority Key Identifier:
keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ce00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:18:29:4b:c5:83:9c:a8:81:89:51:e1:a1:4f:a7:7a:16:57:
41:ca:08:b0:8f:cc:09:11:fe:a1:ed:d0:09:f6:55:90:e6:ed:
39:30:3a:48:2d:9f:a6:6e:5e:2b:b8:0a:a9:2f:34:d2:a9:ef:
b6:be:b6:7c:e6:d2:c9:dc:c5:1f:f8:4d:a6:29:4b:36:04:00:
55:85:c6:7d:9c:0b:40:3b:3e:cd:21:4b:b6:d4:ad:ac:ee:86:
2b:b5:b7:16:79:7c:4d:00:f8:18:49:f4:c1:01:a0:e3:9d:3c:
d6:93:12:31:a0:d1:f6:9b:d6:a5:f9:b9:94:1e:18:8c:f7:66:
fe:bb:47:f0:32:ea:9b:26:c0:61:37:af:2f:dc:7c:31:51:d4:
2f:f5:c0:6e:20:cc:bc:9a:b3:7a:fb:8c:1b:bd:7c:1a:9d:a5:
44:61:ef:d6:40:ad:b6:9b:94:4f:b4:10:4a:42:f1:d5:fa:9a:
4e:8e:47:80:b4:04:72:a1:89:41:ad:ae:cc:ff:54:77:a6:34:
72:72:c3:00:ea:7d:2e:61:9e:17:97:b5:a7:70:50:07:77:43:
ce:6c:ef:44:6a:2e:5c:e3:1e:24:82:9b:47:1a:21:e7:77:f9:
99:7a:26:71:f1:09:76:e1:35:7e:cc:07:28:7f:24:83:90:57:
bd:d1:36:a4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEujnSWtFgieeAF7owAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi
MGRlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MGYxMWNkNGEtMGZlMy00MDc3LWE0MDktM2JiNzRiYjVmMWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/XqDnYpU1Mqc92/Pbn3uoNcQw1jLghPrD8T
44HpgRX8nmXaWO+dStDRPf1WSEr6yftC1XYAsWuyuNaY7x/+20h5wiqTN3o+k5JV
9y5Zmsc6xX6aSeUkPnUwj1oB6lHhq1GRkQqBOCwfTGp22Nn6wtbdVqU+Mv0eBtOO
BbEGGA/6grPtvIVM8Dd5Sms9VOdz6Ro2CRVOguqwgcPEXsBPCTRvg2cip0Jhca/A
qovWClA4E3goyGhdPNtMUBh2aTzANQdNsxUSCdoJ9zFvEVzJ4I/BhOviOqsQqBxp
EHyhAfvCdnUSEx1/85PJglPC42y+lbHxNtBJPMcmAfsH0rl3HQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPwTzbUROlwX0m7hmzpmyi8iGfavMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1
OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvNWQ5MDAwMWItZDIwZS0z
MzFjLThiZDMtNmMzMzA1OTk0YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj
NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx
YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy
MzhmMWIwZGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfOADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAiGClLxYOcqIGJUeGhT6d6FldBygiwj8wJEf6h7dAJ9lWQ5u05MDpI
LZ+mbl4ruAqpLzTSqe+2vrZ85tLJ3MUf+E2mKUs2BABVhcZ9nAtAOz7NIUu21K2s
7oYrtbcWeXxNAPgYSfTBAaDjnTzWkxIxoNH2m9al+bmUHhiM92b+u0fwMuqbJsBh
N68v3HwxUdQv9cBuIMy8mrN6+4wbvXwanaVEYe/WQK22m5RPtBBKQvHV+ppOjkeA
tARyoYlBra7M/1R3pjRycsMA6n0uYZ4Xl7WncFAHd0PObO9Eai5c4x4kgptHGiHn
d/mZeiZx8Ql24TV+zAcofySDkFe90Tak
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:50:03 2025 by rpki-client