
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df5519e-c704-371c-8849-a1be5bf7ffb8.roa
File: 2df5519e-c704-371c-8849-a1be5bf7ffb8.roa (raw, json)
Hash identifier: CGoxKU0PCkFz7BdVdyZ1EUw7Z+Sj0i2FEjVB40/NY0g=
Subject key identifier: F0:6A:59:2D:81:03:CE:91:9B:82:C6:3F:25:E8:6D:8F:14:93:58:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B3DB90FFDE6628E196E6D3150
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df5519e-c704-371c-8849-a1be5bf7ffb8.roa
Signing time: Fri 19 Sep 2025 01:00:33 +0000
ROA not before: Fri 19 Sep 2025 01:00:33 +0000
ROA not after: Thu 18 Dec 2025 02:00:33 +0000
asID: 21508
IP address blocks: 68.86.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3d:b9:0f:fd:e6:62:8e:19:6e:6d:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 19 01:00:33 2025 GMT
Not After : Dec 18 02:00:33 2025 GMT
Subject: CN=58e76ec7-76e4-48d9-9f6b-a27a3ee48966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:6b:52:eb:8c:ce:3a:f7:5f:56:30:5f:77:
6f:38:dd:74:3a:ae:b1:f5:c9:8e:35:f2:3e:2c:7e:
9a:c3:f9:e8:a7:45:62:ad:50:51:2c:68:07:3f:b4:
54:2f:9e:ef:a4:fb:8c:2e:2f:31:7a:fb:d1:df:de:
0c:db:0b:b5:2c:ee:71:63:86:5d:85:e5:57:06:c8:
f7:a6:77:11:aa:b9:91:a2:18:84:0b:4c:c2:af:fa:
45:6c:1f:55:15:14:53:59:41:ea:a9:74:e9:9a:ec:
64:15:db:11:6e:7f:be:1c:f9:d0:c5:f9:a7:02:1d:
ef:a8:21:54:7a:1e:11:b7:b4:c2:b3:e7:a4:c3:7e:
26:7b:95:d8:67:50:6e:cd:e2:67:87:89:c5:2b:61:
d7:24:d0:1e:4a:f7:c9:95:18:29:09:44:c6:20:ec:
99:84:2f:3f:4b:4d:26:8f:0a:5a:aa:37:06:ed:6a:
18:e7:76:c8:3d:b6:cd:c1:17:ae:e5:b7:b8:e5:e0:
91:69:3a:67:0a:d2:93:df:48:28:85:3e:57:a7:84:
37:28:a7:5c:15:49:1a:1f:e1:89:94:fc:6d:d1:d8:
bb:aa:92:44:03:55:69:bb:fc:2d:00:b1:22:c2:17:
e1:a0:fd:88:7e:d6:18:30:fc:52:7d:42:ec:95:ad:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:59:2D:81:03:CE:91:9B:82:C6:3F:25:E8:6D:8F:14:93:58:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df5519e-c704-371c-8849-a1be5bf7ffb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:91:23:66:5e:14:03:d1:13:05:c9:8e:6f:19:20:cc:a1:1d:
63:3c:8c:a1:00:26:b5:19:be:11:2b:b9:a1:11:a6:f3:2b:6f:
81:c4:ab:3d:86:f0:4e:11:98:a0:e7:36:ed:4e:1c:a2:11:70:
a4:17:e0:27:17:8e:18:23:34:13:33:e5:2a:32:8e:5d:7a:3c:
13:99:d9:3e:c5:4a:4e:76:34:47:15:52:c3:12:a0:1b:fe:95:
eb:9c:10:3a:20:d0:80:11:db:ec:22:57:67:1b:8f:c1:23:50:
a7:be:47:f6:71:4f:fa:3d:f0:d0:09:85:f9:7c:98:fe:b3:2a:
ba:6c:ed:58:f1:f6:27:46:c8:ef:99:04:c1:1b:c2:e2:a6:cd:
e8:d3:50:e9:15:ec:bc:94:7e:8b:76:5f:f7:05:97:60:c7:de:
d4:f4:81:01:e2:37:d6:c6:c2:09:1c:28:8f:b0:c7:09:95:3e:
b4:35:0f:d5:bd:97:a2:ed:b1:86:6b:95:fb:a0:80:ab:78:85:
36:98:9f:d9:44:10:18:09:f2:a7:8a:49:e2:e6:d6:a3:c8:75:
13:8d:93:5f:25:4a:fd:e7:65:19:7d:48:de:e3:6a:32:85:42:
b9:f5:dc:3a:9c:94:6e:8e:4b:05:20:48:22:31:b0:3b:3c:4d:
ac:b1:14:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uQ/95mKOGW5tMVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NThlNzZlYzctNzZlNC00OGQ5LTlmNmItYTI3YTNlZTQ4OTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzFrUuuMzjr3X1YwX3dvON10Oq6x9cmONfI+
LH6aw/nop0VirVBRLGgHP7RUL57vpPuMLi8xevvR394M2wu1LO5xY4ZdheVXBsj3
pncRqrmRohiEC0zCr/pFbB9VFRRTWUHqqXTpmuxkFdsRbn++HPnQxfmnAh3vqCFU
eh4Rt7TCs+ekw34me5XYZ1BuzeJnh4nFK2HXJNAeSvfJlRgpCUTGIOyZhC8/S00m
jwpaqjcG7WoY53bIPbbNwReu5be45eCRaTpnCtKT30gohT5Xp4Q3KKdcFUkaH+GJ
lPxt0di7qpJEA1Vpu/wtALEiwhfhoP2IftYYMPxSfULsla0WsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBqWS2BA86Rm4LGPyXobY8Uk1h7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRmNTUxOWUtYzcwNC0z
NzFjLTg4NDktYTFiZTViZjdmZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGORI2ZeFAPREwXJjm8ZIMyhHWM8jKEAJrUZvhEruaERpvMrb4HEqz2G
8E4RmKDnNu1OHKIRcKQX4CcXjhgjNBMz5Soyjl16PBOZ2T7FSk52NEcVUsMSoBv+
leucEDog0IAR2+wiV2cbj8EjUKe+R/ZxT/o98NAJhfl8mP6zKrps7Vjx9idGyO+Z
BMEbwuKmzejTUOkV7LyUfot2X/cFl2DH3tT0gQHiN9bGwgkcKI+wxwmVPrQ1D9W9
l6LtsYZrlfuggKt4hTaYn9lEEBgJ8qeKSeLm1qPIdRONk18lSv3nZRl9SN7jajKF
Qrn13DqclG6OSwUgSCIxsDs8TayxFBQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:10:11 2025 by rpki-client