
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36709ce0-272c-3e0c-8a08-9543cb88f4c3.roa
File: 36709ce0-272c-3e0c-8a08-9543cb88f4c3.roa (raw, json)
Hash identifier: TkRTPgiUMy1Rh1ENOOzR1kYjs+mXcIDuE3Biyz5Ry4E=
Subject key identifier: 35:6B:DC:EF:8E:71:3A:3A:A5:5F:F3:4D:5E:D3:E0:52:DF:12:BA:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BC10AEB367F8C4CFB3C3E9100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36709ce0-272c-3e0c-8a08-9543cb88f4c3.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 7725
IP address blocks: 24.125.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0a:eb:36:7f:8c:4c:fb:3c:3e:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=bf7971fe-04eb-46b7-8d70-68dcf93ae623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:23:f1:c1:a4:be:d6:0b:85:88:7a:12:1f:
04:1c:ad:0a:9b:ce:c1:84:55:91:d3:aa:e6:08:cc:
f5:db:2e:1d:d2:f2:7a:eb:a7:8d:c0:3b:3d:3f:5f:
88:05:4a:bb:98:e9:17:4d:64:f6:d5:12:1c:f9:21:
f6:f9:92:3e:55:41:c1:c6:a8:43:a6:e5:8e:cf:8f:
22:6a:d5:be:94:44:c5:b7:00:16:d8:26:f2:b0:b0:
e0:27:2a:3b:ed:1c:f4:da:a9:27:af:86:ca:5b:49:
49:72:5b:e0:64:31:28:6a:d6:fd:38:5e:05:2a:02:
11:eb:32:c1:9e:c5:8d:69:14:7c:35:f7:1f:3d:ba:
45:5a:0d:aa:c0:7e:61:d6:4c:98:01:06:c3:c9:12:
1e:fc:ca:f2:6d:4d:84:d9:31:be:11:a8:2c:d0:4e:
6b:33:72:06:70:85:bf:9f:35:94:72:af:57:b3:67:
e6:ce:0d:83:76:33:0b:60:b2:70:21:63:1b:cc:05:
1a:9b:70:4b:19:b9:eb:14:55:a7:b3:fc:ad:89:49:
2f:b0:6d:1a:2a:a5:b8:83:b5:e9:6a:3c:b8:77:46:
50:e6:02:94:10:4a:35:de:c3:c2:1e:5e:07:d9:d6:
61:e1:1f:e2:ab:86:5b:04:a0:d2:5e:1e:9a:5a:dd:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:DC:EF:8E:71:3A:3A:A5:5F:F3:4D:5E:D3:E0:52:DF:12:BA:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36709ce0-272c-3e0c-8a08-9543cb88f4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.125.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:67:59:af:5d:bc:e1:bc:b9:83:37:3f:2f:58:e5:d5:56:62:
62:6f:b1:1a:4c:1f:81:d6:46:4d:57:4f:9e:bf:d2:47:1b:57:
0a:67:d3:e8:60:95:34:cc:12:2a:b9:84:b5:40:5e:23:b3:8c:
77:62:ce:69:38:54:75:78:13:11:29:60:75:e4:7e:d4:84:fd:
d5:80:a0:ea:6b:ec:43:6e:4a:9d:16:89:c6:97:99:b4:d5:99:
ef:60:97:1f:fe:d3:57:a2:e1:58:a0:37:d3:6a:77:35:0f:5e:
c9:c9:7a:d6:48:ce:d6:bd:53:41:f1:1f:ef:f0:53:a4:40:46:
e3:3f:46:08:e7:e9:1d:26:ac:d6:39:d6:a7:32:64:9a:d4:b0:
e0:90:3b:2a:b9:48:f2:88:77:73:88:24:dd:e7:b2:23:dd:57:
6a:93:56:42:59:12:e1:62:e9:c7:f4:d4:21:52:50:96:bc:0d:
49:c5:25:cb:3a:3f:a9:99:73:23:03:51:5d:d0:ef:34:15:3e:
1e:27:bb:a9:e0:94:18:be:10:95:d4:71:df:6d:68:92:52:5a:
51:c8:85:91:b3:53:b1:e0:52:42:2c:73:09:75:b9:14:1d:87:
83:f2:6f:95:3e:c3:ec:f9:ce:39:31:10:87:45:c0:dd:31:58:
82:42:e8:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCus2f4xM+zw+kQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
YmY3OTcxZmUtMDRlYi00NmI3LThkNzAtNjhkY2Y5M2FlNjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje0j8cGkvtYLhYh6Eh8EHK0Km87BhFWR06rm
CMz12y4d0vJ666eNwDs9P1+IBUq7mOkXTWT21RIc+SH2+ZI+VUHBxqhDpuWOz48i
atW+lETFtwAW2CbysLDgJyo77Rz02qknr4bKW0lJclvgZDEoatb9OF4FKgIR6zLB
nsWNaRR8NfcfPbpFWg2qwH5h1kyYAQbDyRIe/MrybU2E2TG+Eags0E5rM3IGcIW/
nzWUcq9Xs2fmzg2DdjMLYLJwIWMbzAUam3BLGbnrFFWns/ytiUkvsG0aKqW4g7Xp
ajy4d0ZQ5gKUEEo13sPCHl4H2dZh4R/iq4ZbBKDSXh6aWt0cAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVr3O+OcTo6pV/zTV7T4FLfEroUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY3MDljZTAtMjcyYy0z
ZTBjLThhMDgtOTU0M2NiODhmNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH3yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxnWa9dvOG8uYM3Py9Y5dVWYmJvsRpMH4HWRk1XT56/0kcbVwpn0+hg
lTTMEiq5hLVAXiOzjHdizmk4VHV4ExEpYHXkftSE/dWAoOpr7ENuSp0WicaXmbTV
me9glx/+01ei4VigN9NqdzUPXsnJetZIzta9U0HxH+/wU6RARuM/Rgjn6R0mrNY5
1qcyZJrUsOCQOyq5SPKId3OIJN3nsiPdV2qTVkJZEuFi6cf01CFSUJa8DUnFJcs6
P6mZcyMDUV3Q7zQVPh4nu6nglBi+EJXUcd9taJJSWlHIhZGzU7HgUkIscwl1uRQd
h4Pyb5U+w+z5zjkxEIdFwN0xWIJC6Es=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:38:08 2025 by rpki-client