
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa
File: ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa (raw, json)
Hash identifier: TNpqQ/DQBnTP3VMf+qT4wsvEMvfFx4NxcvKCMVy0/OI=
Subject key identifier: B3:11:BC:F5:19:1D:BC:98:0E:34:A2:10:B5:36:F2:81:13:C3:47:6C
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584BB5C261EB3D7113CCA884F680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa
Signing time: Sat 01 Nov 2025 01:00:30 +0000
ROA not before: Sat 01 Nov 2025 01:00:30 +0000
ROA not after: Fri 30 Jan 2026 02:00:30 +0000
asID: 13335
IP address blocks: 204.195.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b5:c2:61:eb:3d:71:13:cc:a8:84:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Nov 1 01:00:30 2025 GMT
Not After : Jan 30 02:00:30 2026 GMT
Subject: CN=78d6ffe1-ccd4-4220-b708-a294b69ae1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:51:87:34:bd:8b:8e:26:10:36:07:42:2e:c4:
71:13:4e:9f:92:bc:5b:a4:02:e4:85:68:39:d9:9b:
58:87:af:26:a2:13:9f:84:70:e1:07:51:5a:ea:67:
77:d2:2f:e9:61:48:fb:b4:39:14:05:40:7d:16:11:
09:7e:5b:62:ee:31:e6:cb:f9:3e:c4:76:b4:ba:23:
4c:1b:3b:aa:c8:da:c6:94:1e:69:ed:2a:ca:0b:1c:
f0:37:a3:14:f9:d2:9f:fd:d9:b5:ce:12:f9:7c:2a:
ee:82:80:71:1a:43:9b:b1:43:c6:d9:9f:25:2f:ff:
89:20:1e:5b:a3:58:5d:78:1c:9f:8f:61:24:68:08:
1d:23:fc:fb:f1:cf:46:25:0f:07:91:9a:e0:ce:b1:
e3:4d:3d:ac:8a:b8:be:c5:78:4d:1a:0f:86:dd:1c:
53:7a:86:5e:64:9b:59:d3:41:1b:09:f8:db:33:99:
54:d1:90:e7:08:ae:50:67:c0:31:1b:b9:16:03:1a:
bf:77:8f:a5:d2:85:20:c3:5e:a2:94:a6:3b:8a:3b:
23:6d:ed:98:ff:21:7e:e9:38:8f:77:2c:63:71:c5:
e3:ec:47:d1:1c:b0:60:48:58:52:b7:d3:c7:80:5a:
2f:fc:6d:81:b0:e2:67:e8:67:aa:ec:8b:30:b9:be:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:BC:F5:19:1D:BC:98:0E:34:A2:10:B5:36:F2:81:13:C3:47:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:56:4e:ef:aa:59:5c:c2:8b:1f:9b:f6:3b:4d:59:be:cd:03:
5c:b3:f8:33:8b:60:14:8c:88:0c:2f:de:6f:88:15:d4:37:52:
9b:09:2b:6f:b8:d9:0f:20:9a:34:22:ed:dc:1d:7e:74:5d:99:
e4:40:3b:55:2c:5b:86:dc:9a:05:16:93:3f:a8:b3:2c:1a:68:
7f:95:f0:b9:8d:24:c9:e6:3f:f6:20:6b:25:db:94:9e:2c:1d:
56:2f:eb:eb:f7:5e:6b:40:93:64:22:e4:81:7f:1d:b2:53:15:
80:2f:95:22:13:ac:05:f6:25:0f:52:ee:d8:9a:19:ee:6b:42:
db:2a:d8:61:7d:30:2f:21:0f:85:cc:e6:4c:fa:06:fa:ec:16:
54:c8:37:d1:f2:bf:1d:b6:f2:34:5d:5e:2e:e6:5b:a2:10:f5:
8f:f4:25:51:6e:9e:b1:18:a5:52:e1:10:85:73:1d:fa:8d:37:
40:96:d9:26:2d:da:b3:7d:e0:b9:a8:e4:a8:18:ad:ea:3a:92:
49:a1:e9:a8:66:e9:32:a3:3f:aa:46:2d:69:86:99:6a:1b:89:
7d:ce:95:a6:4b:c7:43:e2:c3:76:f9:05:2d:0c:5f:0c:b5:15:
e0:fe:34:74:15:7b:48:6e:9a:13:c6:04:b3:af:73:68:9a:b8:
f8:d2:cc:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmHrPXETzKiE9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
NzhkNmZmZTEtY2NkNC00MjIwLWI3MDgtYTI5NGI2OWFlMWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFGHNL2LjiYQNgdCLsRxE06fkrxbpALkhWg5
2ZtYh68mohOfhHDhB1Fa6md30i/pYUj7tDkUBUB9FhEJflti7jHmy/k+xHa0uiNM
GzuqyNrGlB5p7SrKCxzwN6MU+dKf/dm1zhL5fCrugoBxGkObsUPG2Z8lL/+JIB5b
o1hdeByfj2EkaAgdI/z78c9GJQ8HkZrgzrHjTT2siri+xXhNGg+G3RxTeoZeZJtZ
00EbCfjbM5lU0ZDnCK5QZ8AxG7kWAxq/d4+l0oUgw16ilKY7ijsjbe2Y/yF+6TiP
dyxjccXj7EfRHLBgSFhSt9PHgFov/G2BsOJn6Geq7Iswub6SMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMRvPUZHbyYDjSiELU28oETw0dsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2E2ZDNjOWYtOWI0Ny0z
YWY4LTg2NDQtY2EyNTY4MGI4OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlWTu+qWVzCix+b9jtNWb7NA1yz+DOLYBSMiAwv3m+IFdQ3UpsJK2+4
2Q8gmjQi7dwdfnRdmeRAO1UsW4bcmgUWkz+osywaaH+V8LmNJMnmP/YgayXblJ4s
HVYv6+v3XmtAk2Qi5IF/HbJTFYAvlSITrAX2JQ9S7tiaGe5rQtsq2GF9MC8hD4XM
5kz6BvrsFlTIN9Hyvx228jRdXi7mW6IQ9Y/0JVFunrEYpVLhEIVzHfqNN0CW2SYt
2rN94Lmo5KgYreo6kkmh6ahm6TKjP6pGLWmGmWobiX3OlaZLx0Piw3b5BS0MXwy1
FeD+NHQVe0humhPGBLOvc2iauPjSzP8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:49:09 2025 by rpki-client