
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
File: ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa (raw, json)
Hash identifier: QGR10eWmwZ5S08wLm7Z0y+88jo45LSTgyaMuPW5LkXQ=
Subject key identifier: 24:8E:DF:67:71:1C:23:BD:92:6A:6B:99:2A:AA:17:5F:9B:0C:A8:C2
Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial: 010D0C9F4328584B99D7A78866767CB001B30640
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 400919
IP address blocks: 23.169.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:a7:88:66:76:7c:b0:01:b3:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=a6295397-473e-4b5a-804b-45699bae335a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:8b:35:4f:ed:08:94:73:5f:fe:66:2e:ff:
c0:c5:37:18:df:32:08:d8:6e:ab:48:c0:f5:b1:98:
2c:c5:5f:eb:9d:14:7f:81:b3:26:bc:74:2a:ac:b3:
56:36:9f:2a:3c:b7:c5:3b:61:29:87:3b:06:62:0d:
57:fd:02:f1:c9:01:a2:95:f6:34:94:4f:e8:69:33:
fe:a5:dd:10:f0:d8:40:f1:db:37:5d:83:ff:fd:3f:
de:7b:46:38:d5:a3:cc:34:ec:0f:fe:51:62:28:e5:
3b:b8:7b:e9:98:db:4e:df:11:5e:6d:bd:20:66:57:
c9:e9:58:2a:93:06:80:33:d2:6b:a5:03:62:58:70:
d9:56:5f:37:e1:26:b9:51:b9:ac:0d:62:bb:81:e3:
66:32:17:13:e0:ed:cd:fe:b1:32:8c:99:3c:4a:49:
06:1a:94:61:1c:1a:09:e9:84:81:82:a8:06:4c:af:
d7:a9:8c:a6:24:70:17:1b:0b:d1:01:06:52:2f:31:
2b:ee:c5:99:83:10:95:bc:84:1d:f2:80:aa:55:d9:
5b:76:c8:86:af:fd:18:6c:f8:f5:29:62:20:8b:9a:
f6:fc:39:72:5e:a1:b7:13:aa:e5:2d:bc:0c:8d:f5:
9d:3f:7c:8b:4b:3c:ab:8b:e4:d8:98:7f:41:7a:7a:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8E:DF:67:71:1C:23:BD:92:6A:6B:99:2A:AA:17:5F:9B:0C:A8:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
X509v3 Authority Key Identifier:
keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:71:94:80:ae:46:ef:da:da:2a:2d:1e:87:4a:65:20:38:45:
c8:09:d9:2c:6b:99:d5:4d:3d:45:1e:6a:11:37:8f:53:8d:0b:
77:27:74:8d:55:5b:2c:61:ca:1b:22:ec:5b:22:9d:e6:53:0a:
fb:50:f9:0a:7f:0d:a7:8a:7c:fe:6d:2c:5b:d5:0e:ee:5a:b3:
e3:f0:19:c7:51:17:51:78:b4:b9:c7:84:3e:51:9d:3d:2f:b3:
08:82:01:7c:7b:d2:86:ce:ed:58:6a:e1:83:4c:4e:09:75:ae:
91:2a:bc:fb:0a:66:11:d4:4b:64:7d:ec:5f:0c:74:0a:b7:a0:
54:81:71:a3:ce:51:82:0e:6d:e7:99:e5:7b:ba:0e:5c:9c:da:
d6:67:b2:cf:7b:9a:66:4f:f5:ea:4e:d5:14:90:76:d4:ef:78:
ba:af:b4:61:ea:9f:41:c5:d0:13:3a:36:48:e3:b5:3b:e0:fa:
b4:b9:a7:d7:c0:01:d4:b6:13:0d:73:64:5f:9b:1c:bf:b9:51:
f5:55:87:f1:a2:4d:8a:ee:eb:c2:ea:f4:4e:c1:38:b4:57:81:
a9:d3:a2:7f:3a:3d:40:30:00:94:e8:75:57:b0:c6:67:f8:e9:
2c:8f:8d:5c:f3:0d:d3:05:e6:2f:70:7a:e2:70:3e:a5:ad:ae:
1d:d5:0e:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16eIZnZ8sAGzBkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy
MTU3MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
YTYyOTUzOTctNDczZS00YjVhLTgwNGItNDU2OTliYWUzMzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdCLNU/tCJRzX/5mLv/AxTcY3zII2G6rSMD1
sZgsxV/rnRR/gbMmvHQqrLNWNp8qPLfFO2EphzsGYg1X/QLxyQGilfY0lE/oaTP+
pd0Q8NhA8ds3XYP//T/ee0Y41aPMNOwP/lFiKOU7uHvpmNtO3xFebb0gZlfJ6Vgq
kwaAM9JrpQNiWHDZVl834Sa5UbmsDWK7geNmMhcT4O3N/rEyjJk8SkkGGpRhHBoJ
6YSBgqgGTK/XqYymJHAXGwvRAQZSLzEr7sWZgxCVvIQd8oCqVdlbdsiGr/0YbPj1
KWIgi5r2/DlyXqG3E6rlLbwMjfWdP3yLSzyri+TYmH9BenrA0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSO32dxHCO9kmprmSqqF1+bDKjCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2
N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvZWM2MGMyNzYtZmIzZS0z
MGVlLTg0YTYtYWNmZWI2YTE2YmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz
YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy
MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli
ODI2MjIxNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6nIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZxlICuRu/a2iotHodKZSA4RcgJ2SxrmdVNPUUeahE3j1ONC3cndI1V
Wyxhyhsi7FsineZTCvtQ+Qp/DaeKfP5tLFvVDu5as+PwGcdRF1F4tLnHhD5RnT0v
swiCAXx70obO7Vhq4YNMTgl1rpEqvPsKZhHUS2R97F8MdAq3oFSBcaPOUYIObeeZ
5Xu6Dlyc2tZnss97mmZP9epO1RSQdtTveLqvtGHqn0HF0BM6NkjjtTvg+rS5p9fA
AdS2Ew1zZF+bHL+5UfVVh/GiTYru68Lq9E7BOLRXganTon86PUAwAJTodVewxmf4
6SyPjVzzDdMF5i9weuJwPqWtrh3VDhA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:07 2025 by rpki-client