
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c85817f9-e982-3953-8682-a0e9c6c2066c.roa
File: c85817f9-e982-3953-8682-a0e9c6c2066c.roa (raw, json)
Hash identifier: WEVOoauwQvNz2QggJNvI7VA5Fhocimd8LkTHzcFNW+Q=
Subject key identifier: B1:4F:99:35:B0:E7:2E:3F:C6:1F:1B:01:BD:1C:EF:A9:BB:46:CD:BF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BC10BBD2A34425A4B20DE7B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c85817f9-e982-3953-8682-a0e9c6c2066c.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 33490
IP address blocks: 24.21.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:bd:2a:34:42:5a:4b:20:de:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=903acc35-b692-4792-80e6-591ccc57276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:f8:7c:3e:4d:df:e8:f3:33:8b:c8:f3:27:
ea:c5:1a:82:fc:b9:19:e5:35:86:d1:03:09:1f:80:
22:3d:02:75:30:28:dd:83:27:79:cb:84:bf:42:ae:
02:55:eb:b6:78:34:85:41:13:3a:35:81:40:35:eb:
ec:36:f7:a8:9a:08:cd:5e:a9:ff:86:bf:8e:75:7d:
67:70:30:25:86:6b:23:68:67:6b:e1:8a:b0:e8:81:
56:1d:bd:3e:5d:d1:7d:a6:38:98:e0:ad:ec:a7:e6:
b8:b9:0b:9a:59:69:01:4e:c9:53:cf:bd:e2:68:d9:
bf:8d:ba:92:91:aa:76:cc:8f:01:fa:bd:be:49:40:
dc:c7:1f:09:81:81:5d:a4:bc:f4:bd:d1:9d:82:74:
db:96:ec:7b:ca:64:5c:96:38:95:df:5f:8d:13:7b:
28:7b:a0:d5:53:f7:1d:b5:33:7d:d6:73:91:df:5d:
03:5e:7c:07:5a:5c:9a:7d:e4:eb:65:34:e7:c3:7a:
bb:c6:6c:75:3f:be:ca:00:bc:d4:7f:71:d8:cf:f6:
b1:c2:61:46:1c:d9:3a:31:2e:c4:59:39:d4:31:8e:
47:f0:1c:24:49:95:83:bb:9e:73:3d:8d:fe:32:08:
e8:db:a6:c2:8a:e2:f1:84:0f:16:06:68:75:e6:fd:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:99:35:B0:E7:2E:3F:C6:1F:1B:01:BD:1C:EF:A9:BB:46:CD:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c85817f9-e982-3953-8682-a0e9c6c2066c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:45:19:6d:2b:d5:05:f3:37:eb:3f:72:45:79:f1:e5:3e:96:
1a:05:4c:fa:6a:74:3a:2a:12:fa:71:e4:79:31:b2:fb:fa:6f:
09:50:f4:59:19:45:91:92:f1:a1:55:5d:6e:f8:61:f2:fa:e8:
84:aa:71:86:af:6f:d0:ce:93:a5:4b:16:d5:7d:95:63:4d:20:
40:00:43:dc:97:9a:7b:c7:a4:8f:5e:98:e8:79:18:2d:87:d6:
ad:49:65:8d:d8:68:15:53:d9:75:dd:ca:39:a7:d2:ca:26:ac:
17:61:6b:a6:07:0a:9a:d6:a0:58:cb:73:bb:37:0d:f6:83:60:
72:4a:bf:0b:fa:06:1f:21:c6:91:c9:79:b1:bb:a9:8b:d0:04:
f8:ba:c6:61:ea:bc:79:f9:e6:34:ed:db:67:3b:c1:45:ba:4f:
ea:9b:42:fe:56:8e:5b:fe:9a:46:28:b5:a8:6a:ce:7d:85:8f:
f9:1b:a0:df:8a:b7:ef:71:e5:af:96:a2:8c:2f:26:6d:af:80:
e8:97:fb:8b:da:3b:5f:15:28:bd:41:89:10:64:40:f2:8d:1e:
fc:05:86:39:1f:a0:92:b1:b6:aa:34:b1:94:7f:89:5b:63:ec:
57:51:9a:c7:f4:97:53:8b:90:fd:20:1c:78:27:ce:64:fd:c2:
17:be:08:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC70qNEJaSyDee4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
OTAzYWNjMzUtYjY5Mi00NzkyLTgwZTYtNTkxY2NjNTcyNzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/74fD5N3+jzM4vI8yfqxRqC/LkZ5TWG0QMJ
H4AiPQJ1MCjdgyd5y4S/Qq4CVeu2eDSFQRM6NYFANevsNveomgjNXqn/hr+OdX1n
cDAlhmsjaGdr4Yqw6IFWHb0+XdF9pjiY4K3sp+a4uQuaWWkBTslTz73iaNm/jbqS
kap2zI8B+r2+SUDcxx8JgYFdpLz0vdGdgnTblux7ymRcljiV31+NE3soe6DVU/cd
tTN91nOR310DXnwHWlyafeTrZTTnw3q7xmx1P77KALzUf3HYz/axwmFGHNk6MS7E
WTnUMY5H8BwkSZWDu55zPY3+Mgjo26bCiuLxhA8WBmh15v3NKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFPmTWw5y4/xh8bAb0c76m7Rs2/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzg1ODE3ZjktZTk4Mi0z
OTUzLTg2ODItYTBlOWM2YzIwNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBV4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClFGW0r1QXzN+s/ckV58eU+lhoFTPpqdDoqEvpx5Hkxsvv6bwlQ9FkZ
RZGS8aFVXW74YfL66ISqcYavb9DOk6VLFtV9lWNNIEAAQ9yXmnvHpI9emOh5GC2H
1q1JZY3YaBVT2XXdyjmn0somrBdha6YHCprWoFjLc7s3DfaDYHJKvwv6Bh8hxpHJ
ebG7qYvQBPi6xmHqvHn55jTt22c7wUW6T+qbQv5Wjlv+mkYotahqzn2Fj/kboN+K
t+9x5a+WoowvJm2vgOiX+4vaO18VKL1BiRBkQPKNHvwFhjkfoJKxtqo0sZR/iVtj
7FdRmsf0l1OLkP0gHHgnzmT9whe+CCw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:42 2025 by rpki-client