
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa
File: 366add4e-4606-37ef-ab68-41519dad2292.roa (raw, json)
Hash identifier: w3ASiiPwP11/91ICq5zb7nP3Yh5obziNnFkP5cpZoLs=
Subject key identifier: 9F:4D:29:52:30:48:C5:CF:D0:B7:F8:42:59:6F:DF:CF:14:39:0F:A2
Certificate issuer: /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial: 010D0C9F4328584B80B7679C9D2D03429EF5C490
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa
Signing time: Mon 13 Oct 2025 01:00:29 +0000
ROA not before: Mon 13 Oct 2025 01:00:29 +0000
ROA not after: Sun 11 Jan 2026 02:00:29 +0000
asID: 133530
IP address blocks: 104.192.136.0/21 maxlen: 24
2620:136:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:80:b7:67:9c:9d:2d:03:42:9e:f5:c4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Validity
Not Before: Oct 13 01:00:29 2025 GMT
Not After : Jan 11 02:00:29 2026 GMT
Subject: CN=4a778004-100a-4fb4-abab-2045723f6a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:a1:cc:6c:29:76:f2:0f:64:ab:c3:5f:71:
fc:24:ae:50:58:1a:c3:e3:15:34:f3:3e:ed:11:04:
93:f3:b9:89:0c:66:fd:70:b4:b9:57:a8:ab:18:7d:
16:27:73:19:b9:70:52:ca:94:93:bf:3f:8a:a9:90:
cb:37:65:9b:8e:7d:dd:ca:9b:6b:c5:91:4c:3f:a2:
84:c7:26:1c:8a:41:fe:24:e8:84:30:4e:e9:3f:02:
6b:94:1a:43:92:c1:ce:78:0e:a6:eb:c6:6e:d7:2a:
03:86:d4:eb:ed:82:35:20:b9:ca:f5:08:ae:3d:84:
65:c5:e9:8b:10:08:41:0d:6d:4a:c0:ac:a2:bc:d3:
e9:22:d0:57:d8:17:9f:8d:88:97:7a:c6:17:9c:d9:
70:82:6e:c5:07:c5:1e:6a:e5:8b:6c:75:6b:07:ff:
09:60:02:48:52:49:5d:24:15:b1:0a:3c:56:5a:f6:
ac:39:84:70:b6:f2:f4:75:af:b2:31:7a:14:06:00:
46:57:cc:83:6a:d4:89:9d:22:66:f8:30:1e:0c:df:
32:48:ba:c4:a5:40:e2:ab:ab:40:a5:a1:0a:b7:08:
92:11:cc:a5:58:7f:31:3a:a9:e2:cb:b6:c7:a7:a5:
61:08:64:40:a2:b4:6e:bc:fa:69:7e:b8:54:a4:f1:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:29:52:30:48:C5:CF:D0:B7:F8:42:59:6F:DF:CF:14:39:0F:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
X509v3 Authority Key Identifier:
keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
sbgp-ipAddrBlock: critical
IPv4:
104.192.136.0/21
IPv6:
2620:136:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:51:79:78:b2:7b:27:61:eb:f2:86:58:ad:cd:60:1e:2d:9d:
48:48:45:26:ae:b5:35:33:c8:46:2c:d6:5c:77:19:78:fe:a5:
7f:3b:b0:02:55:4e:41:fa:64:e1:4a:db:0b:49:d3:e1:82:8b:
90:6a:20:32:b7:41:07:dc:61:2f:9f:3a:d9:71:6e:48:2f:2f:
3a:b0:7f:ed:35:be:24:e7:8c:f5:ed:02:d5:f1:03:a1:fa:5c:
f7:2e:15:4c:16:b9:22:d8:ed:35:4e:8b:4f:44:e4:a0:7d:0d:
de:36:9f:97:ed:3a:8f:d9:c2:17:b1:9b:47:f0:e8:9e:65:aa:
ea:b6:6f:a3:de:41:f9:72:e0:2c:10:06:4f:a0:7f:25:1c:f4:
7f:65:f3:2f:35:8c:f8:6a:2e:63:08:45:92:15:d3:72:c0:03:
44:c2:b0:15:04:65:65:73:4e:6c:4a:7f:5e:16:d0:d8:0b:89:
29:24:a9:81:42:a0:36:82:45:65:c8:35:dc:5e:1c:65:a9:22:
aa:1a:70:c4:d0:86:92:a4:89:a8:d2:7b:09:4b:41:61:49:2a:
23:d4:0c:55:0a:92:0a:61:52:aa:84:3a:4a:f8:f9:de:27:7e:
86:1b:48:42:77:0f:e2:bf:85:74:6d:6e:e4:52:4e:63:e0:1d:
95:18:43:02
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuAt2ecnS0DQp71xJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTljMGFlMzEtMjA1Mi00ZDEwLTg5MDQtNWQwOGIwOWFh
Njg4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
NGE3NzgwMDQtMTAwYS00ZmI0LWFiYWItMjA0NTcyM2Y2YThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil+hzGwpdvIPZKvDX3H8JK5QWBrD4xU08z7t
EQST87mJDGb9cLS5V6irGH0WJ3MZuXBSypSTvz+KqZDLN2Wbjn3dyptrxZFMP6KE
xyYcikH+JOiEME7pPwJrlBpDksHOeA6m68Zu1yoDhtTr7YI1ILnK9QiuPYRlxemL
EAhBDW1KwKyivNPpItBX2BefjYiXesYXnNlwgm7FB8UeauWLbHVrB/8JYAJIUkld
JBWxCjxWWvasOYRwtvL0da+yMXoUBgBGV8yDatSJnSJm+DAeDN8ySLrEpUDiq6tA
paEKtwiSEcylWH8xOqniy7bHp6VhCGRAorRuvPppfrhUpPHvQQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJ9NKVIwSMXP0Lf4Qllv388UOQ+iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMw
YWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4YjA5YWE2ODgvMzY2YWRkNGUtNDYwNi0z
N2VmLWFiNjgtNDE1MTlkYWQyMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTljMGFlMzEtMjA1Mi00ZDEwLTg5
MDQtNWQwOGIwOWFhNjg4L2U5YzBhZTMxLTIwNTItNGQxMC04OTA0LTVkMDhiMDlh
YTY4OC5jcmwwHwYDVR0jBBgwFoAUEE/5PFM5NWknNBy24fS5isdQF2EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMwYWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4
YjA5YWE2ODguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDaMCIMA8E
AgACMAkDBwQmIAE2YAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqVF5eLJ7J2Hr8oZYrc1gHi2dSEhFJq61
NTPIRizWXHcZeP6lfzuwAlVOQfpk4UrbC0nT4YKLkGogMrdBB9xhL5862XFuSC8v
OrB/7TW+JOeM9e0C1fEDofpc9y4VTBa5ItjtNU6LT0TkoH0N3jafl+06j9nCF7Gb
R/DonmWq6rZvo95B+XLgLBAGT6B/JRz0f2XzLzWM+GouYwhFkhXTcsADRMKwFQRl
ZXNObEp/XhbQ2AuJKSSpgUKgNoJFZcg13F4cZakiqhpwxNCGkqSJqNJ7CUtBYUkq
I9QMVQqSCmFSqoQ6Svj53id+hhtIQncP4r+FdG1u5FJOY+AdlRhDAg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:59 2025 by rpki-client