
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
File: 92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa (raw, json)
Hash identifier: YOVCnj0uFCrkM2jS14soTKhxsuoIZ9dCkQYZUWM1FlY=
Subject key identifier: 3B:DD:D2:31:F6:AB:94:E4:72:17:EF:10:11:82:AC:F9:8C:4C:F5:10
Certificate issuer: /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
Certificate serial: 010D0C9F4328584B2A2C3A2F1ECEEC43798C0320
Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
Signing time: Fri 12 Sep 2025 01:00:32 +0000
ROA not before: Fri 12 Sep 2025 01:00:32 +0000
ROA not after: Thu 11 Dec 2025 02:00:32 +0000
asID: 25813
IP address blocks: 192.252.0.0/21 maxlen: 24
207.231.176.0/20 maxlen: 24
208.65.4.0/22 maxlen: 24
216.9.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2a:2c:3a:2f:1e:ce:ec:43:79:8c:03:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
Validity
Not Before: Sep 12 01:00:32 2025 GMT
Not After : Dec 11 02:00:32 2025 GMT
Subject: CN=cdcd1df9-efde-4b51-b2fc-20b74bdfa5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:f1:51:fa:f9:81:83:a5:15:90:6a:64:0f:
c8:be:ce:6e:7a:ca:12:54:f1:fe:fb:db:bc:61:d5:
ec:30:ec:1c:8e:e0:15:f7:e6:fd:bc:3b:34:87:19:
12:4c:85:ce:62:c2:58:28:dc:da:0a:69:6a:ee:bf:
02:77:1d:28:88:be:7f:9c:a2:9a:7a:95:e6:8e:79:
b9:b6:30:eb:5e:bb:f7:6f:5b:75:79:68:26:e0:d2:
a6:50:1b:9d:83:e4:40:34:92:db:39:b8:0a:53:55:
99:ce:f9:17:0a:73:c3:19:c3:59:fa:55:ce:80:bc:
0a:3f:75:a9:6f:61:44:e6:ef:5d:de:84:92:dc:ea:
6f:36:21:99:60:1e:71:3f:bd:89:0a:e4:21:62:51:
d3:3e:99:ca:54:40:2a:e1:1e:27:95:ce:bd:b9:66:
f2:16:70:9a:d6:c2:4a:c0:ac:7b:ab:df:30:0a:8b:
a8:04:49:8d:9a:43:8d:9f:81:9b:16:7f:d0:68:ba:
e7:6d:9a:fe:7b:87:d1:b7:10:d1:97:ca:22:ab:a9:
64:b7:ba:8a:d4:30:62:9d:6e:a6:eb:09:4c:88:1d:
f2:ca:bf:27:6f:88:43:24:c8:5c:9f:13:99:f5:4e:
64:32:34:a2:2c:54:c1:ff:3c:1a:8f:86:fb:8f:8f:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:D2:31:F6:AB:94:E4:72:17:EF:10:11:82:AC:F9:8C:4C:F5:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl
X509v3 Authority Key Identifier:
keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.252.0.0/21
207.231.176.0/20
208.65.4.0/22
216.9.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:31:d7:60:4e:6e:50:e7:d5:ba:19:aa:8f:3a:24:7a:cb:b6:
81:18:84:5b:e9:01:bd:01:30:10:57:68:33:f6:04:65:69:9a:
b1:e8:e8:49:e6:0e:38:63:7f:aa:fc:c2:21:f4:46:77:a1:d1:
1c:8e:b1:cd:ab:85:9a:c8:35:03:13:19:ba:60:80:8d:88:dd:
69:41:49:78:8c:75:0c:39:c9:a6:fb:bc:dd:76:2d:46:b0:bc:
ee:9b:9d:a8:93:0d:a3:ab:71:6d:5a:50:74:d0:82:8b:c6:01:
3b:d6:dc:a8:8e:6e:91:0e:47:8c:49:69:05:6c:b4:4c:57:b1:
63:53:37:18:36:d9:c9:9e:dc:f8:14:6a:ff:be:95:31:df:57:
b2:e4:d5:19:89:32:c6:84:d2:39:8c:41:61:bc:10:27:c2:5d:
fe:4a:8f:cf:d6:10:59:bd:6c:59:1e:7b:bb:00:56:49:f5:98:
9e:10:f6:cf:5c:a6:a7:7f:d1:78:23:d6:d2:e3:94:52:e5:45:
c2:e1:a9:39:45:bf:7b:21:ca:3f:1b:09:c2:1f:04:7c:a4:23:
0f:f0:f2:f0:15:cd:11:b0:05:63:cf:1d:dd:38:a8:48:ce:6b:
18:28:ae:c5:51:83:98:61:71:f5:db:f4:b6:a3:3c:ec:91:4c:
cb:1d:a8:e5
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEsqLDovHs7sQ3mMAyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2Vl
N2E1MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
Y2RjZDFkZjktZWZkZS00YjUxLWIyZmMtMjBiNzRiZGZhNWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBTxUfr5gYOlFZBqZA/Ivs5uesoSVPH++9u8
YdXsMOwcjuAV9+b9vDs0hxkSTIXOYsJYKNzaCmlq7r8Cdx0oiL5/nKKaepXmjnm5
tjDrXrv3b1t1eWgm4NKmUBudg+RANJLbObgKU1WZzvkXCnPDGcNZ+lXOgLwKP3Wp
b2FE5u9d3oSS3OpvNiGZYB5xP72JCuQhYlHTPpnKVEAq4R4nlc69uWbyFnCa1sJK
wKx7q98wCouoBEmNmkONn4GbFn/QaLrnbZr+e4fRtxDRl8oiq6lkt7qK1DBinW6m
6wlMiB3yyr8nb4hDJMhcnxOZ9U5kMjSiLFTB/zwaj4b7j49jzwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFDvd0jH2q5TkchfvEBGCrPmMTPUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMmM5
NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvOTJlZTZhZDktMTFhYi0z
MTM2LTgxYTItODIwNGQ0MmMwZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjJjOTQ1OTItNzNlOS00NTJlLWFk
ODgtYWFmYzhlM2VlN2E1L2IyYzk0NTkyLTczZTktNDUyZS1hZDg4LWFhZmM4ZTNl
ZTdhNS5jcmwwHwYDVR0jBBgwFoAUi1izm4Qm8HXsOYvA8T1AHv13TxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZj
OGUzZWU3YTUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDwPwAAwQE
z+ewAwQC0EEEAwQE2AlwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH4x12BOblDn1boZqo86JHrLtoEYhFvp
Ab0BMBBXaDP2BGVpmrHo6EnmDjhjf6r8wiH0Rneh0RyOsc2rhZrINQMTGbpggI2I
3WlBSXiMdQw5yab7vN12LUawvO6bnaiTDaOrcW1aUHTQgovGATvW3KiObpEOR4xJ
aQVstExXsWNTNxg22cme3PgUav++lTHfV7Lk1RmJMsaE0jmMQWG8ECfCXf5Kj8/W
EFm9bFkee7sAVkn1mJ4Q9s9cpqd/0Xgj1tLjlFLlRcLhqTlFv3shyj8bCcIfBHyk
Iw/w8vAVzRGwBWPPHd04qEjOaxgorsVRg5hhcfXb9LajPOyRTMsdqOU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:53 2025 by rpki-client