
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa
File: c70dbfee-845c-3917-bfbd-449bc42023fa.roa (raw, json)
Hash identifier: ck+RDv/oi4dA+uRKn04vJA0sjzTYVlPbmGENbkJlPw8=
Subject key identifier: 57:D5:F7:57:F3:CA:64:E6:D9:C8:45:00:38:1A:AC:3A:2B:18:49:53
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584BBFA5B23DB62ADDDBB8D1DB00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 16839
IP address blocks: 199.91.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:b2:3d:b6:2a:dd:db:b8:d1:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=1aaacfaa-3ab9-4b42-be05-05cd14c08726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:c6:f7:41:e9:e3:66:86:f5:3e:12:4d:1d:
65:a7:a1:86:a2:82:7d:45:f7:d1:3e:b8:a2:b1:82:
0e:4a:29:59:85:9e:1a:ae:a6:0c:2d:da:9e:6e:f7:
70:50:aa:9b:39:0d:98:be:bb:b7:12:9b:e6:79:74:
c9:2b:fe:a6:b9:6b:0b:ec:40:f1:80:bf:e2:50:81:
43:c6:6b:4e:f1:6c:02:84:21:29:83:84:32:f9:7b:
8c:2a:48:04:d9:2e:c7:c3:99:52:2c:9f:b1:9d:fd:
51:e2:7c:8f:38:e2:64:0b:94:d5:b3:c0:2e:ed:12:
f4:f0:e7:34:6c:4c:64:08:7f:dd:24:73:c0:22:25:
16:57:71:dd:2e:78:96:eb:12:76:8f:bc:28:7c:56:
77:03:37:5e:e3:3e:04:29:21:67:0c:b2:c8:06:26:
c4:f9:ce:7e:7b:06:30:de:15:ed:50:87:b6:26:84:
f1:f5:31:18:94:52:1c:bd:f5:d4:37:d6:48:c9:74:
df:a3:38:be:c3:05:7c:8b:ba:60:a3:07:31:14:0d:
8a:62:e8:95:a7:72:88:b0:cb:2b:ef:01:ce:32:4f:
0b:77:64:78:ed:bd:0b:30:0d:56:08:14:eb:7c:58:
ca:c5:1d:31:dd:1b:0c:0d:b8:d9:0c:c0:4b:c4:e9:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:F7:57:F3:CA:64:E6:D9:C8:45:00:38:1A:AC:3A:2B:18:49:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:41:1a:0e:0a:88:99:f3:94:99:78:9a:35:d9:f2:06:99:cf:
0a:71:49:ed:75:77:d0:0c:85:41:9e:ab:76:56:b3:0e:1c:f8:
15:c0:36:68:5e:eb:18:e9:e1:73:fa:6d:61:e8:b9:4d:19:98:
6f:b8:ca:eb:3f:3e:49:ed:77:95:65:fd:d5:52:11:54:48:e4:
36:c2:5e:20:f3:d3:6d:c8:85:c5:1e:05:94:19:55:29:15:8e:
54:94:00:4c:2c:dd:67:fd:6a:7b:9f:fd:17:de:81:94:40:07:
79:2d:34:20:ad:1f:ac:47:2e:7b:2c:1c:b1:7e:72:a0:64:96:
55:b7:91:e9:f7:25:99:f9:72:0f:99:0e:cc:28:50:15:82:af:
2b:40:6e:e2:e6:6d:34:09:9d:8f:e9:81:e6:96:3f:82:ba:30:
a8:5b:6a:dc:09:3c:fe:1a:77:76:cc:f4:20:53:f1:12:38:3a:
1d:61:8e:f1:4f:5f:b7:75:dd:b3:18:fb:25:76:1f:11:a1:69:
86:3c:86:99:e1:58:52:7e:30:ae:c3:3e:f7:f7:32:2c:ea:31:
fb:60:62:f0:49:b2:75:e2:f0:0e:47:45:e7:ee:36:7f:ea:2f:
c9:74:8f:0e:ee:18:eb:57:70:6f:43:22:c2:c8:8f:7a:0f:82:
ed:f8:31:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbI9tird27jR2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
MWFhYWNmYWEtM2FiOS00YjQyLWJlMDUtMDVjZDE0YzA4NzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA7G90Hp42aG9T4STR1lp6GGooJ9RffRPrii
sYIOSilZhZ4arqYMLdqebvdwUKqbOQ2Yvru3EpvmeXTJK/6muWsL7EDxgL/iUIFD
xmtO8WwChCEpg4Qy+XuMKkgE2S7Hw5lSLJ+xnf1R4nyPOOJkC5TVs8Au7RL08Oc0
bExkCH/dJHPAIiUWV3HdLniW6xJ2j7wofFZ3Azde4z4EKSFnDLLIBibE+c5+ewYw
3hXtUIe2JoTx9TEYlFIcvfXUN9ZIyXTfozi+wwV8i7pgowcxFA2KYuiVp3KIsMsr
7wHOMk8Ld2R47b0LMA1WCBTrfFjKxR0x3RsMDbjZDMBLxOm+iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfV91fzymTm2chFADgarDorGElTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzcwZGJmZWUtODQ1Yy0z
OTE3LWJmYmQtNDQ5YmM0MjAyM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFBGg4KiJnzlJl4mjXZ8gaZzwpxSe11d9AMhUGeq3ZWsw4c+BXANmhe
6xjp4XP6bWHouU0ZmG+4yus/Pkntd5Vl/dVSEVRI5DbCXiDz023IhcUeBZQZVSkV
jlSUAEws3Wf9anuf/RfegZRAB3ktNCCtH6xHLnssHLF+cqBkllW3ken3JZn5cg+Z
DswoUBWCrytAbuLmbTQJnY/pgeaWP4K6MKhbatwJPP4ad3bM9CBT8RI4Oh1hjvFP
X7d13bMY+yV2HxGhaYY8hpnhWFJ+MK7DPvf3MizqMftgYvBJsnXi8A5HRefuNn/q
L8l0jw7uGOtXcG9DIsLIj3oPgu34MTs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:49:10 2025 by rpki-client