
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
File: a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json)
Hash identifier: 0SKx4wHtkISafYvloXz7SHrezzPVCHHY0q/PmDv56Hk=
Subject key identifier: 90:D4:28:48:C9:1E:9C:85:A6:CF:69:7B:07:9C:B7:F1:15:97:C5:05
Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial: 010D0C9F4328584BB2F7D0287F1B4598AE7DF630
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 3565
IP address blocks: 208.68.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:d0:28:7f:1b:45:98:ae:7d:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=8d680124-6c7f-4818-bd61-c6454e4522ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:da:f8:1b:27:85:87:20:84:c1:0e:c6:4d:
4c:6b:2a:a6:cb:c0:ce:7b:f7:8c:f0:9a:7a:cf:e1:
f6:7f:cf:01:b2:23:a6:b2:27:86:70:9e:d1:c9:5f:
7e:63:f4:38:dc:5d:c3:0b:62:b7:d9:7b:d7:39:86:
b5:aa:a3:5f:8c:1e:71:46:0e:f2:87:d8:b3:25:33:
b9:42:80:46:ec:49:d3:1b:b7:b5:8f:b7:55:de:5d:
1b:9c:f7:bb:4c:9c:ed:7d:51:db:0d:49:8b:32:35:
15:bd:c5:0f:08:22:38:23:d3:77:e5:bd:f7:3a:dd:
3a:30:b0:72:1d:2a:d0:8b:ab:72:31:d5:a3:0b:29:
d1:41:5a:dd:04:46:85:3c:ce:d8:bd:9d:e7:ba:98:
7f:ba:1e:d1:a0:45:8c:17:3f:ef:f1:87:9c:03:76:
b8:08:8b:a7:9d:ed:a8:83:ce:24:be:b1:29:e1:93:
17:a6:79:5e:e8:de:5c:f6:ea:4a:e0:e0:35:ac:e0:
0f:2f:9a:70:c8:68:d0:09:bd:ef:4f:72:51:83:65:
33:1a:14:0c:eb:f9:6b:82:30:14:25:94:60:d4:06:
67:68:14:aa:24:98:30:00:53:aa:78:d5:ea:5e:45:
ea:65:f9:cb:0f:48:c0:25:d7:13:86:15:45:da:e4:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:28:48:C9:1E:9C:85:A6:CF:69:7B:07:9C:B7:F1:15:97:C5:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
X509v3 Authority Key Identifier:
keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:e8:b0:f7:00:b8:68:8c:23:18:74:6b:42:13:6a:c9:2a:97:
04:14:9e:b1:40:26:78:08:ce:6e:0f:46:7d:5b:4e:2b:38:5c:
23:63:7c:82:6f:2a:b1:d9:55:eb:22:b4:0f:50:7a:26:4a:dd:
d3:5c:42:4f:f7:76:1e:f0:15:90:38:71:b0:d2:4a:c0:45:84:
19:a1:1f:d3:4e:ea:95:a3:f9:9f:b5:c8:37:75:e4:f4:53:71:
54:eb:8e:aa:bb:0f:a1:80:b6:04:0f:39:85:5a:8f:23:03:d4:
89:9d:29:f1:3d:db:c5:e2:25:4f:4a:d2:b7:f2:87:33:52:f5:
94:4d:cd:16:2c:74:ba:7b:0a:d4:b9:80:fc:c5:77:10:6e:57:
d2:0c:10:e8:9b:f7:6a:e6:b9:9b:5d:d7:09:8a:4b:52:19:c8:
4e:bc:8c:8d:f2:8e:9e:e2:1b:0e:a9:58:fe:22:3b:ec:bb:a4:
85:30:18:cc:f3:f6:59:59:05:b0:9c:82:81:dd:cd:e0:9a:f0:
27:b0:c7:c5:89:53:cb:73:83:15:1c:95:5d:c6:cd:56:ca:f8:
b2:57:00:e8:27:b0:a1:2e:07:99:85:f6:54:dd:bf:e8:c0:21:
ee:8e:4d:f3:5b:7b:0f:16:85:26:1a:18:03:03:72:16:3d:b5:
04:93:6f:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99AofxtFmK599jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1
NjI0MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
OGQ2ODAxMjQtNmM3Zi00ODE4LWJkNjEtYzY0NTRlNDUyMmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD3a+BsnhYcghMEOxk1Mayqmy8DOe/eM8Jp6
z+H2f88BsiOmsieGcJ7RyV9+Y/Q43F3DC2K32XvXOYa1qqNfjB5xRg7yh9izJTO5
QoBG7EnTG7e1j7dV3l0bnPe7TJztfVHbDUmLMjUVvcUPCCI4I9N35b33Ot06MLBy
HSrQi6tyMdWjCynRQVrdBEaFPM7YvZ3nuph/uh7RoEWMFz/v8YecA3a4CIunne2o
g84kvrEp4ZMXpnle6N5c9upK4OA1rOAPL5pwyGjQCb3vT3JRg2UzGhQM6/lrgjAU
JZRg1AZnaBSqJJgwAFOqeNXqXkXqZfnLD0jAJdcThhVF2uTOXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDUKEjJHpyFps9pewect/EVl8UFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2
NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTY2NWUzN2EtMjI2NC0z
YjE5LWI4YTQtYWUyNzBjMTBkNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3
MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2
NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh
MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHosPcAuGiMIxh0a0ITaskqlwQUnrFAJngIzm4PRn1bTis4XCNjfIJv
KrHZVesitA9QeiZK3dNcQk/3dh7wFZA4cbDSSsBFhBmhH9NO6pWj+Z+1yDd15PRT
cVTrjqq7D6GAtgQPOYVajyMD1ImdKfE928XiJU9K0rfyhzNS9ZRNzRYsdLp7CtS5
gPzFdxBuV9IMEOib92rmuZtd1wmKS1IZyE68jI3yjp7iGw6pWP4iO+y7pIUwGMzz
9llZBbCcgoHdzeCa8Cewx8WJU8tzgxUclV3GzVbK+LJXAOgnsKEuB5mF9lTdv+jA
Ie6OTfNbew8WhSYaGAMDchY9tQSTb/8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:58 2025 by rpki-client