
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
File: 25289940-5314-3e04-a710-ae91cf64f9b9.roa (raw, json)
Hash identifier: BdJ6/8BuycuBXUBKxgGAaVZKbkJYl8Uwc1mjztUN+w8=
Subject key identifier: 97:C3:90:83:0C:05:F5:26:A2:69:66:36:63:E0:5E:23:29:F5:38:0D
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F4328584BAD62484CC08527D3C2CEC700
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 13649
IP address blocks: 72.250.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:48:4c:c0:85:27:d3:c2:ce:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=51ff60b5-a598-4ba7-a619-e6b689a1c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:35:8d:13:44:aa:27:13:40:0e:df:3e:34:
df:2e:6d:b5:00:bc:a3:5a:c3:21:8a:33:37:c0:23:
4a:2a:5a:ae:fb:1a:22:36:e8:e7:d4:ac:99:29:ea:
5f:7e:a4:3d:9a:c2:c1:37:e7:7b:01:40:61:01:f9:
ae:dc:12:16:00:ed:1f:77:62:94:c0:42:07:3b:14:
92:96:d4:23:0e:49:7f:ad:3f:97:f9:4b:ac:c1:48:
51:2c:fa:5c:e8:ab:5f:db:8f:97:ec:e6:6c:f6:9c:
72:fd:d2:de:7a:5f:f5:c7:02:a2:31:e1:c4:39:14:
35:aa:cd:dd:87:ea:19:11:59:04:5c:2f:33:7a:31:
32:fb:8c:89:71:a1:47:14:0f:27:ce:ae:ca:50:02:
2d:86:55:b9:8a:08:92:92:3d:a0:87:50:a8:6c:f9:
b6:6d:e3:d6:25:ce:a0:e6:2b:80:22:ce:ac:d1:45:
ea:b6:fa:fa:98:59:cb:53:92:91:e9:b1:50:bb:ef:
50:4c:6d:58:1f:5c:16:86:72:f5:32:9d:e4:48:60:
6d:dc:48:fa:aa:78:78:fb:96:0c:5f:cd:52:ef:d1:
83:58:95:fa:5c:07:a5:1e:b1:f5:00:24:16:f8:aa:
1a:10:02:f4:09:8d:a2:ff:32:79:48:a6:6e:a2:e1:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:90:83:0C:05:F5:26:A2:69:66:36:63:E0:5E:23:29:F5:38:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e7:36:8d:48:9e:9e:55:21:ea:17:72:a6:e0:48:9e:4a:12:
ab:ad:08:86:b7:0f:bf:f9:1d:0d:47:44:99:4e:53:e8:8e:1f:
90:33:25:a0:77:de:4d:66:aa:58:92:c0:ab:e1:ec:eb:c8:40:
b6:b8:5e:9c:da:77:17:f7:8a:cc:a9:e2:ba:6b:00:81:5f:82:
c1:41:0b:ab:d2:b0:a6:99:41:92:42:df:03:81:3a:aa:ac:a4:
3e:b0:56:12:14:b3:d6:08:65:f7:23:bd:48:06:e5:f8:b8:27:
64:a9:4d:e2:0e:41:cc:e9:70:bb:50:d8:b9:24:38:55:54:7e:
7f:eb:72:ce:7c:51:60:ac:cc:3c:29:a7:bf:ae:e1:73:02:a1:
c2:89:50:e5:aa:b6:8f:9b:c4:6e:fe:48:88:0c:af:7d:6e:36:
9b:96:67:dd:3e:47:f9:c4:76:94:a0:64:f6:7e:68:80:26:f6:
3b:77:40:e9:0d:ca:1c:be:8f:66:06:70:24:e9:70:30:29:e1:
f3:51:a6:34:d5:5b:a6:e2:ea:19:1e:87:c8:6c:0b:22:cb:ae:
7c:3c:9c:a2:d1:11:11:c9:61:97:e4:57:89:cb:fa:65:35:d1:
52:83:47:2d:e4:db:79:a7:1d:b0:7d:82:4c:13:4c:2f:62:58:
d8:ad:f3:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkhMwIUn08LOxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
NTFmZjYwYjUtYTU5OC00YmE3LWE2MTktZTZiNjg5YTFjNmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+o1jRNEqicTQA7fPjTfLm21ALyjWsMhijM3
wCNKKlqu+xoiNujn1KyZKepffqQ9msLBN+d7AUBhAfmu3BIWAO0fd2KUwEIHOxSS
ltQjDkl/rT+X+UuswUhRLPpc6Ktf24+X7OZs9pxy/dLeel/1xwKiMeHEORQ1qs3d
h+oZEVkEXC8zejEy+4yJcaFHFA8nzq7KUAIthlW5igiSkj2gh1CobPm2bePWJc6g
5iuAIs6s0UXqtvr6mFnLU5KR6bFQu+9QTG1YH1wWhnL1Mp3kSGBt3Ej6qnh4+5YM
X81S79GDWJX6XAelHrH1ACQW+KoaEAL0CY2i/zJ5SKZuouHdPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJfDkIMMBfUmomlmNmPgXiMp9TgNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMjUyODk5NDAtNTMxNC0z
ZTA0LWE3MTAtYWU5MWNmNjRmOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSPoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABznNo1Inp5VIeoXcqbgSJ5KEqutCIa3D7/5HQ1HRJlOU+iOH5AzJaB3
3k1mqliSwKvh7OvIQLa4Xpzadxf3isyp4rprAIFfgsFBC6vSsKaZQZJC3wOBOqqs
pD6wVhIUs9YIZfcjvUgG5fi4J2SpTeIOQczpcLtQ2LkkOFVUfn/rcs58UWCszDwp
p7+u4XMCocKJUOWqto+bxG7+SIgMr31uNpuWZ90+R/nEdpSgZPZ+aIAm9jt3QOkN
yhy+j2YGcCTpcDAp4fNRpjTVW6bi6hkeh8hsCyLLrnw8nKLRERHJYZfkV4nL+mU1
0VKDRy3k23mnHbB9gkwTTC9iWNit87k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:19:30 2025 by rpki-client