
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cba9db6c-5aa6-371c-8f6b-0d903b8ac43c.roa
File: cba9db6c-5aa6-371c-8f6b-0d903b8ac43c.roa (raw, json)
Hash identifier: EnrFqLAmr7pWaD9Vlg5JWpHUtNItlcDcpPLNOW+oGw8=
Subject key identifier: 75:78:A6:51:44:0B:8B:84:89:8E:40:A8:31:25:16:BC:CF:DE:E6:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BC10B8D7BB34B8984715A6100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cba9db6c-5aa6-371c-8f6b-0d903b8ac43c.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 7725
IP address blocks: 73.137.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:8d:7b:b3:4b:89:84:71:5a:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=027e90f6-fb07-414f-9531-f7d946b12fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:ea:3d:49:3e:b5:4b:c7:c3:52:47:d5:ec:
9d:85:a0:b1:1e:72:61:bf:b0:06:57:5b:15:d0:b7:
1e:66:2c:38:02:10:0f:db:a7:4d:78:f3:bd:73:b8:
cc:5a:e5:6f:e4:90:34:aa:44:6c:65:67:d6:33:2f:
86:c4:20:c7:f9:a1:26:40:42:c3:cb:b1:6a:f4:ce:
d0:d6:38:6f:ab:d0:16:15:98:79:23:96:a5:df:d0:
b5:e7:e9:37:1d:88:56:07:35:d6:ba:3a:83:28:11:
f2:1e:08:33:aa:50:9d:2c:c7:74:38:5a:d6:a3:73:
4d:44:1f:ed:1d:8c:ab:f6:7b:62:d9:6f:ba:ef:65:
ce:64:37:88:9e:1a:3c:e2:77:6a:f4:87:eb:4a:5c:
bc:b4:4f:90:08:95:ae:3e:72:48:16:f2:11:74:7b:
6f:f6:b5:bb:0b:01:2b:57:97:d0:6d:40:e7:be:ca:
f8:ac:8e:35:cf:a7:4b:0c:21:f3:7e:c3:ed:64:e8:
75:4e:df:4c:ad:b4:65:d1:84:23:91:e3:80:7b:f1:
b2:6c:76:81:cc:5b:47:2a:d1:67:e4:79:4b:fd:41:
de:28:0b:ee:87:9b:83:81:6a:c9:95:2c:69:77:70:
8f:9b:09:75:1b:f7:aa:5a:bb:a5:3c:73:55:f0:87:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:A6:51:44:0B:8B:84:89:8E:40:A8:31:25:16:BC:CF:DE:E6:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cba9db6c-5aa6-371c-8f6b-0d903b8ac43c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.137.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f9:40:44:9d:e0:9f:55:df:79:10:49:c2:11:a0:c8:c9:07:
e7:91:9a:e5:f8:27:5c:d5:34:dc:d9:e5:c8:9f:53:c6:e6:c1:
04:b6:61:c9:88:bd:3e:96:bb:fa:3a:ca:a8:a9:4e:c5:df:d5:
6d:5b:dd:65:24:58:86:18:15:18:52:dd:bf:21:e3:83:17:a5:
bb:c9:f2:4c:98:31:c5:ef:11:e0:68:21:cc:1a:e1:66:e8:3f:
2c:f3:94:40:c8:bd:12:74:54:16:b4:02:63:09:23:b8:df:df:
c4:f4:51:ae:e1:a8:31:ef:79:4b:27:2d:e1:63:bd:90:ab:3f:
11:4b:3c:2f:0d:7a:aa:8f:35:d4:a2:d4:96:5a:b4:06:65:81:
26:1c:27:10:82:c9:da:de:20:47:6f:28:cf:06:19:35:ff:6e:
69:d1:4a:ec:b8:e9:4f:03:7a:60:ea:ff:7c:58:fe:dc:63:f8:
ac:3f:f9:7b:37:2d:d3:eb:ae:53:33:f1:23:77:e0:01:89:39:
70:52:fd:8a:71:bc:2b:a5:77:86:42:cd:e9:c9:cf:b3:81:f3:
a6:fa:b0:23:c3:e4:27:32:77:60:e9:fc:f3:12:58:fe:7b:ec:
fb:55:fa:f7:cd:7f:d3:84:b1:61:f5:81:c4:86:8b:1d:ac:81:
15:68:bf:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC417s0uJhHFaYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
MDI3ZTkwZjYtZmIwNy00MTRmLTk1MzEtZjdkOTQ2YjEyZmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHTqPUk+tUvHw1JH1eydhaCxHnJhv7AGV1sV
0LceZiw4AhAP26dNePO9c7jMWuVv5JA0qkRsZWfWMy+GxCDH+aEmQELDy7Fq9M7Q
1jhvq9AWFZh5I5al39C15+k3HYhWBzXWujqDKBHyHggzqlCdLMd0OFrWo3NNRB/t
HYyr9nti2W+672XOZDeInho84ndq9IfrSly8tE+QCJWuPnJIFvIRdHtv9rW7CwEr
V5fQbUDnvsr4rI41z6dLDCHzfsPtZOh1Tt9MrbRl0YQjkeOAe/GybHaBzFtHKtFn
5HlL/UHeKAvuh5uDgWrJlSxpd3CPmwl1G/eqWrulPHNV8IfPDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHV4plFEC4uEiY5AqDElFrzP3uZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2JhOWRiNmMtNWFhNi0z
NzFjLThmNmItMGQ5MDNiOGFjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSYmMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJz5QESd4J9V33kQScIRoMjJB+eRmuX4J1zVNNzZ5cifU8bmwQS2YcmI
vT6Wu/o6yqipTsXf1W1b3WUkWIYYFRhS3b8h44MXpbvJ8kyYMcXvEeBoIcwa4Wbo
PyzzlEDIvRJ0VBa0AmMJI7jf38T0Ua7hqDHveUsnLeFjvZCrPxFLPC8NeqqPNdSi
1JZatAZlgSYcJxCCydreIEdvKM8GGTX/bmnRSuy46U8DemDq/3xY/txj+Kw/+Xs3
LdPrrlMz8SN34AGJOXBS/YpxvCuld4ZCzenJz7OB86b6sCPD5Ccyd2Dp/PMSWP57
7PtV+vfNf9OEsWH1gcSGix2sgRVov1Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:13:50 2025 by rpki-client