
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa
File: 6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa (raw, json)
Hash identifier: /6oUndTOaOmexTuiRczt/MnYZdFowi6/G9OWj5R4hRA=
Subject key identifier: C3:BC:D4:C2:C4:49:FD:FE:A2:06:1F:8B:76:53:6D:DE:90:C0:5C:BE
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584B540C717C4D5B73E1E80DBBC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa
Signing time: Sat 27 Sep 2025 01:00:33 +0000
ROA not before: Sat 27 Sep 2025 01:00:33 +0000
ROA not after: Fri 26 Dec 2025 02:00:33 +0000
asID: 15169
IP address blocks: 104.134.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:54:0c:71:7c:4d:5b:73:e1:e8:0d:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 27 01:00:33 2025 GMT
Not After : Dec 26 02:00:33 2025 GMT
Subject: CN=3665d2d5-08b4-4286-a3e0-ea7eb0b89c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:59:37:0a:fe:11:89:b8:e8:dd:29:51:7a:
da:34:bc:38:87:07:a2:63:40:8a:05:46:9a:21:0e:
9e:49:14:c8:ba:2a:83:52:74:11:a7:6e:eb:45:4c:
e7:45:bb:ef:6a:f0:68:93:64:ef:db:4b:12:9e:84:
02:34:ff:66:a7:e5:60:f9:ec:18:1b:f3:da:59:8b:
57:f1:17:a3:77:eb:13:a6:64:3a:a7:49:2a:0d:34:
17:58:85:3d:37:40:60:9e:8a:5e:d0:10:b6:a9:82:
43:b1:1e:dc:72:81:65:31:57:e4:b6:f5:99:67:fa:
db:cc:ec:78:44:75:de:1a:af:40:66:95:9f:39:8a:
05:fc:22:38:66:6f:fc:60:4e:ff:45:0b:79:1d:de:
b1:ee:cb:42:d5:84:b1:d5:ce:fe:77:87:43:a6:d6:
d9:cc:f1:75:f9:ec:34:c3:94:34:99:b1:4d:23:dc:
9a:2f:e0:66:5d:2b:20:04:a4:63:51:dc:be:9b:4c:
d4:47:1f:09:22:57:bb:72:0d:3a:c9:35:dc:70:79:
94:af:7d:9a:07:be:f7:a1:c2:69:71:05:fd:2d:0d:
31:34:0f:04:00:26:17:87:a5:a3:fa:fa:48:2d:34:
89:17:d7:97:6e:f1:3e:2d:5c:d1:97:7f:10:83:85:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:D4:C2:C4:49:FD:FE:A2:06:1F:8B:76:53:6D:DE:90:C0:5C:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:52:e3:94:c0:bc:04:d8:26:7b:93:6e:13:13:5d:fc:58:cc:
b4:14:2e:07:ac:01:e6:9d:2a:c9:f9:f4:0c:ae:9b:f8:a5:8a:
f0:41:25:ec:7b:4a:b7:62:cd:83:4b:be:eb:1c:97:be:07:74:
1e:32:7b:16:11:6b:28:3f:04:73:1c:b6:65:a6:34:a6:f4:71:
f2:5a:e2:3f:9e:32:bf:ed:3d:14:31:4a:ba:93:96:08:2f:e6:
fe:d8:98:a9:89:f0:bf:f9:a5:ff:79:19:c1:cf:f6:3f:22:0e:
77:33:08:73:c5:43:4e:53:b5:53:dd:a8:be:70:78:35:2b:43:
b3:d2:5e:78:67:4f:b5:de:2d:e2:e8:eb:9b:6d:75:08:33:b0:
8c:32:cd:80:4c:3f:08:f3:a8:dd:65:64:83:cb:11:7d:d4:2f:
95:52:6a:22:de:ad:3c:7b:b6:cc:26:0f:75:1c:72:82:c3:13:
1c:0f:77:ba:b1:f1:c7:fe:45:c6:e6:67:9a:7c:11:cf:9b:88:
d2:7e:15:96:dd:a4:f2:28:5f:66:86:29:57:d6:24:6f:ef:d5:
75:34:51:33:04:aa:3d:6e:f5:02:79:c7:34:97:eb:47:61:40:
a7:33:7e:76:07:bf:16:02:dc:6c:cc:8b:2d:76:ff:52:a0:d2:
ec:ef:b2:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHF8TVtz4egNu8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk
MzY2NWQyZDUtMDhiNC00Mjg2LWEzZTAtZWE3ZWIwYjg5Yzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhZNwr+EYm46N0pUXraNLw4hweiY0CKBUaa
IQ6eSRTIuiqDUnQRp27rRUznRbvvavBok2Tv20sSnoQCNP9mp+Vg+ewYG/PaWYtX
8Rejd+sTpmQ6p0kqDTQXWIU9N0Bgnope0BC2qYJDsR7ccoFlMVfktvWZZ/rbzOx4
RHXeGq9AZpWfOYoF/CI4Zm/8YE7/RQt5Hd6x7stC1YSx1c7+d4dDptbZzPF1+ew0
w5Q0mbFNI9yaL+BmXSsgBKRjUdy+m0zURx8JIle7cg06yTXccHmUr32aB773ocJp
cQX9LQ0xNA8EACYXh6Wj+vpILTSJF9eXbvE+LVzRl38Qg4VHSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMO81MLESf3+ogYfi3ZTbd6QwFy+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjA1OWNmZDMtMGYxNC0z
ZDMwLWI0YzgtMzgyM2YzYjRiOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJS45TAvATYJnuTbhMTXfxYzLQULgesAeadKsn59Ayum/ilivBBJex7
SrdizYNLvuscl74HdB4yexYRayg/BHMctmWmNKb0cfJa4j+eMr/tPRQxSrqTlggv
5v7YmKmJ8L/5pf95GcHP9j8iDnczCHPFQ05TtVPdqL5weDUrQ7PSXnhnT7XeLeLo
65ttdQgzsIwyzYBMPwjzqN1lZIPLEX3UL5VSaiLerTx7tswmD3UccoLDExwPd7qx
8cf+RcbmZ5p8Ec+biNJ+FZbdpPIoX2aGKVfWJG/v1XU0UTMEqj1u9QJ5xzSX60dh
QKczfnYHvxYC3GzMiy12/1Kg0uzvsvI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:46:29 2025 by rpki-client