
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa
File: 4a99249e-6e25-30fa-8e16-0fa2326d6959.roa (raw, json)
Hash identifier: h5nRl59xhpTob6BLZrNOWzT9fHgugWA6QfXERWneIuw=
Subject key identifier: CC:8B:B3:A1:20:2A:B5:DA:11:3B:C5:7E:1D:7C:4B:14:ED:92:0C:FF
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F4328584B758C9477DA36423C249E16A0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa
Signing time: Thu 09 Oct 2025 01:00:28 +0000
ROA not before: Thu 09 Oct 2025 01:00:28 +0000
ROA not after: Wed 07 Jan 2026 02:00:28 +0000
asID: 209854
IP address blocks: 172.102.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:75:8c:94:77:da:36:42:3c:24:9e:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Oct 9 01:00:28 2025 GMT
Not After : Jan 7 02:00:28 2026 GMT
Subject: CN=72884fe0-dac2-4bb7-9c9e-15b243912d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:37:95:f4:13:15:02:ff:b8:46:0c:75:19:ed:
e7:d2:d4:86:1c:7c:b7:97:6c:22:79:e4:a2:ea:65:
98:83:6f:23:17:fa:f0:bd:b2:78:70:6a:39:2e:4f:
e0:9e:ce:d5:29:e3:81:21:c6:68:ff:f7:9d:1e:7a:
20:26:3e:d8:db:5d:bc:a2:6d:40:c5:72:c1:dc:e7:
37:fe:c3:62:85:62:f5:ad:5c:f3:75:f0:f1:95:01:
a1:98:52:fb:e3:bb:a8:ac:a7:87:40:7f:5d:49:06:
11:98:93:66:2d:96:bb:66:dd:f1:79:ba:09:c3:d2:
ae:ea:e0:57:17:88:d5:38:0b:4d:72:c6:7f:72:52:
b1:12:a1:81:c1:06:53:44:93:cc:07:a8:05:08:9e:
cd:d8:29:c9:4b:22:fc:9c:50:5a:e2:c6:74:a4:a1:
2c:84:d5:e1:09:17:e2:62:52:70:cc:58:c4:2f:a7:
64:2c:ad:e3:7b:45:dd:cd:b9:83:9a:a0:4b:49:ac:
b9:c9:07:08:a5:43:d0:3b:de:c9:e1:b8:db:aa:2d:
14:22:2f:e4:70:49:29:cd:4d:3c:d0:d5:1e:1e:ee:
98:ba:0c:3e:f7:5d:73:44:0c:9a:ba:bc:0f:84:47:
15:fc:30:01:82:29:77:71:12:98:1b:99:04:d8:5b:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8B:B3:A1:20:2A:B5:DA:11:3B:C5:7E:1D:7C:4B:14:ED:92:0C:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c6:a6:8a:9c:56:39:23:1d:5d:39:ba:60:73:4e:bc:b8:77:
c2:e9:9e:35:74:ab:81:8f:8e:37:a6:60:7c:88:db:37:0a:ba:
33:01:0f:af:be:68:4d:22:bd:71:6f:a1:fb:fd:ec:f6:bd:92:
c9:19:76:7b:6a:72:bc:5f:6f:33:90:37:a3:9b:8a:62:57:9e:
99:15:22:4c:f5:f5:b5:9c:9f:ff:2d:dd:e6:b0:83:f6:46:90:
f9:36:a0:99:c2:87:01:3d:a7:b2:1b:53:1b:e3:5a:5b:78:f9:
f1:db:5a:ed:69:3d:01:26:bf:9a:6c:d8:93:2b:55:61:53:62:
ce:fa:32:3e:11:39:64:d7:68:b1:ef:4d:bd:47:d4:ab:41:40:
e2:98:fd:f1:12:fa:db:94:87:29:f4:85:f5:6c:79:9f:0b:84:
f7:7f:b5:7d:86:6e:df:b7:02:a2:47:91:b2:7a:ca:67:af:74:
e7:be:79:aa:26:e0:3e:c8:a8:74:9a:f3:5a:bc:e4:6f:ef:89:
92:5f:6f:92:4c:93:e3:6a:b2:88:a5:a4:db:99:22:9b:ff:0f:
dd:b0:31:7c:63:2d:8f:57:05:c7:9f:b0:a4:aa:5e:7b:ec:c1:
9a:f5:06:e3:9c:b3:bc:d9:26:dc:1e:53:b6:c6:e1:de:c2:c8:
90:46:66:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJR32jZCPCSeFqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
NzI4ODRmZTAtZGFjMi00YmI3LTljOWUtMTViMjQzOTEyZDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjeV9BMVAv+4Rgx1Ge3n0tSGHHy3l2wieeSi
6mWYg28jF/rwvbJ4cGo5Lk/gns7VKeOBIcZo//edHnogJj7Y2128om1AxXLB3Oc3
/sNihWL1rVzzdfDxlQGhmFL747uorKeHQH9dSQYRmJNmLZa7Zt3xeboJw9Ku6uBX
F4jVOAtNcsZ/clKxEqGBwQZTRJPMB6gFCJ7N2CnJSyL8nFBa4sZ0pKEshNXhCRfi
YlJwzFjEL6dkLK3je0XdzbmDmqBLSay5yQcIpUPQO97J4bjbqi0UIi/kcEkpzU08
0NUeHu6Yugw+911zRAyaurwPhEcV/DABgil3cRKYG5kE2Fsf3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyLs6EgKrXaETvFfh18SxTtkgz/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNGE5OTI0OWUtNmUyNS0z
MGZhLThlMTYtMGZhMjMyNmQ2OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnGpoqcVjkjHV05umBzTry4d8LpnjV0q4GPjjemYHyI2zcKujMBD6++
aE0ivXFvofv97Pa9kskZdntqcrxfbzOQN6ObimJXnpkVIkz19bWcn/8t3eawg/ZG
kPk2oJnChwE9p7IbUxvjWlt4+fHbWu1pPQEmv5ps2JMrVWFTYs76Mj4ROWTXaLHv
Tb1H1KtBQOKY/fES+tuUhyn0hfVseZ8LhPd/tX2Gbt+3AqJHkbJ6ymevdOe+eaom
4D7IqHSa81q85G/viZJfb5JMk+NqsoilpNuZIpv/D92wMXxjLY9XBcefsKSqXnvs
wZr1BuOcs7zZJtweU7bG4d7CyJBGZoQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:22 2025 by rpki-client