
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa
File: 10d49d5c-b633-3f67-8315-94c511151349.roa (raw, json)
Hash identifier: 8bT3/17B5KjyZnJNJbETUIx8gR4ITq7+PGoZEOd4ybQ=
Subject key identifier: 33:A5:32:57:E6:A5:18:E2:BA:3D:84:24:E3:E6:83:D1:A6:29:01:CD
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584BBFA5AB684D81ED93196CC0A0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 16839
IP address blocks: 149.96.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:ab:68:4d:81:ed:93:19:6c:c0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=caf7e093-36d8-4a98-ae16-ed8214873c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:02:9f:d1:82:0f:8f:86:b1:e2:38:25:80:
a4:ce:e4:df:5e:f9:81:ae:39:5f:a3:7f:6a:f2:20:
1e:dc:6d:b8:31:f2:bc:c9:18:55:2b:88:53:0c:95:
fc:40:e4:4f:a4:c4:dc:16:e3:16:39:ea:a4:f2:19:
16:9f:23:bd:f5:4d:29:16:81:1b:9d:7d:b2:64:03:
a5:92:f4:2f:dd:cb:12:4c:ed:72:70:6a:4f:88:c0:
45:a8:87:92:d7:7e:8d:b4:99:d0:72:bf:8f:2f:26:
a9:69:af:a6:53:40:03:c7:55:74:97:84:58:7a:7e:
dc:e0:9f:06:dd:70:48:5c:47:f0:fc:89:6e:e5:77:
49:57:c1:99:f1:6c:15:f1:38:6e:2b:6b:63:14:49:
e8:b9:f8:86:e3:3f:ad:ee:a9:aa:30:ec:57:fd:c9:
95:31:88:d6:76:75:82:27:7f:d2:46:4a:06:3d:8a:
77:c6:97:4b:4f:8c:53:5b:0e:3d:29:51:cf:95:9b:
bb:bb:5d:33:80:fc:fd:d0:fd:bd:b9:c2:d6:58:45:
95:95:8b:32:07:b9:35:33:79:1e:1b:77:e2:b9:f6:
9e:de:a3:3c:3e:82:9c:79:ab:85:0e:65:2d:da:33:
5c:6f:a9:8b:b3:cf:b1:7c:b7:45:17:ed:2a:45:59:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:32:57:E6:A5:18:E2:BA:3D:84:24:E3:E6:83:D1:A6:29:01:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:b4:6a:98:f8:e8:8b:dd:ec:9c:2b:e8:a8:23:c8:8c:92:5d:
a9:c7:65:94:e9:c0:65:4c:70:a9:d3:ab:00:44:a8:e8:66:32:
ea:f1:46:4e:2b:7a:35:f3:b4:f7:19:90:0a:8a:17:03:4c:55:
73:46:69:c1:6f:75:c4:6a:b3:34:b1:8a:6e:f3:55:b6:b2:da:
40:b9:47:c6:3b:7d:78:36:58:38:09:57:eb:b3:f9:d4:96:4c:
62:8b:38:41:bb:d3:6a:8c:b2:1f:e0:0b:8c:a6:96:aa:d7:2f:
ae:2a:37:cd:aa:91:2c:7d:77:b1:e7:8c:fd:57:6a:82:09:5d:
33:ed:88:7f:85:a6:7d:59:39:ad:23:e4:fa:f4:c4:f1:81:0b:
7d:43:62:6b:26:f2:fc:05:bd:ef:70:7c:1d:83:4f:31:4c:44:
04:2f:21:78:49:1b:08:53:dd:1a:91:2c:88:88:23:e8:b1:50:
64:93:5b:ad:6f:d9:e0:3f:73:e6:77:ce:26:fa:a8:92:c4:20:
c1:13:9b:26:aa:71:09:23:00:c7:d8:b3:db:5f:ff:cb:f8:1b:
ff:ba:c0:6b:fa:00:5d:bd:51:69:19:4b:fd:3f:50:4a:af:61:
a4:7c:a2:de:95:5e:62:82:7e:f0:5b:84:52:63:5e:b5:82:58:
9f:ae:fb:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/patoTYHtkxlswKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
Y2FmN2UwOTMtMzZkOC00YTk4LWFlMTYtZWQ4MjE0ODczYzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+ECn9GCD4+GseI4JYCkzuTfXvmBrjlfo39q
8iAe3G24MfK8yRhVK4hTDJX8QORPpMTcFuMWOeqk8hkWnyO99U0pFoEbnX2yZAOl
kvQv3csSTO1ycGpPiMBFqIeS136NtJnQcr+PLyapaa+mU0ADx1V0l4RYen7c4J8G
3XBIXEfw/Ilu5XdJV8GZ8WwV8ThuK2tjFEnoufiG4z+t7qmqMOxX/cmVMYjWdnWC
J3/SRkoGPYp3xpdLT4xTWw49KVHPlZu7u10zgPz90P29ucLWWEWVlYsyB7k1M3ke
G3fiufae3qM8PoKceauFDmUt2jNcb6mLs8+xfLdFF+0qRVnq2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOlMlfmpRjiuj2EJOPmg9GmKQHNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTBkNDlkNWMtYjYzMy0z
ZjY3LTgzMTUtOTRjNTExMTUxMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq0apj46Ivd7Jwr6KgjyIySXanHZZTpwGVMcKnTqwBEqOhmMurxRk4r
ejXztPcZkAqKFwNMVXNGacFvdcRqszSxim7zVbay2kC5R8Y7fXg2WDgJV+uz+dSW
TGKLOEG702qMsh/gC4ymlqrXL64qN82qkSx9d7HnjP1XaoIJXTPtiH+Fpn1ZOa0j
5Pr0xPGBC31DYmsm8vwFve9wfB2DTzFMRAQvIXhJGwhT3RqRLIiII+ixUGSTW61v
2eA/c+Z3zib6qJLEIMETmyaqcQkjAMfYs9tf/8v4G/+6wGv6AF29UWkZS/0/UEqv
YaR8ot6VXmKCfvBbhFJjXrWCWJ+u+9E=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:12 2025 by rpki-client