
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f895621-cbd8-342a-81a0-8460baa998c1.roa
File: 2f895621-cbd8-342a-81a0-8460baa998c1.roa (raw, json)
Hash identifier: U93FLqGXsLRGB2AO9JBA/21ovLuskEIOCvk0K+h2IB8=
Subject key identifier: B3:AC:14:11:9C:31:AD:8E:D6:CA:34:61:39:8B:B2:53:16:26:94:13
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BAD625AF98C8F6C15939D7780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f895621-cbd8-342a-81a0-8460baa998c1.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 22773
IP address blocks: 2001:57a:f241::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:5a:f9:8c:8f:6c:15:93:9d:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=f2e437c0-5b42-4943-bd22-c5e8a8e63ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:3d:08:2e:1e:1b:f3:8e:17:09:d2:25:a4:
e6:ff:fb:5d:51:25:51:92:ff:52:6c:82:88:25:b3:
bf:4d:28:39:95:54:81:95:7d:d2:09:b6:49:ce:97:
0c:8e:0d:c9:d8:a9:82:dc:43:a0:3b:93:07:7d:b9:
be:b2:bc:bd:7c:63:79:05:9c:aa:98:33:d3:c5:06:
e8:d7:92:d7:68:bf:fe:15:20:12:31:b1:00:65:75:
1c:92:4f:b4:3e:6d:14:19:6b:75:81:60:c3:ef:2d:
b9:54:c7:ad:df:6c:75:be:f1:3f:b1:83:6c:a4:46:
77:b7:23:c7:69:e1:97:7f:39:c1:bc:6a:25:84:b0:
4b:60:80:f2:9b:83:f3:21:7f:27:23:23:aa:d9:55:
d3:e6:99:ec:bf:3a:8d:c4:1a:ff:f0:ab:05:3b:0a:
c6:f1:64:c3:49:7f:3f:90:b7:00:79:9b:86:97:cd:
ab:b4:2a:8b:4c:68:ab:32:3a:fc:04:8c:98:8e:5a:
52:a7:86:c8:76:62:58:d9:00:cf:a5:c0:5e:86:54:
2e:a3:d3:04:04:f2:89:e2:40:f3:5c:f9:27:67:6b:
df:f1:6c:d8:6a:2e:c8:88:c9:f9:bd:74:06:02:14:
7a:e4:36:e8:65:fb:56:a5:fd:2b:94:22:31:b1:e9:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:14:11:9C:31:AD:8E:D6:CA:34:61:39:8B:B2:53:16:26:94:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f895621-cbd8-342a-81a0-8460baa998c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:57a:f241::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:cf:12:b6:cd:55:83:7b:72:b5:7b:fc:c3:d0:74:69:c4:e5:
7a:99:26:92:5f:f2:5e:f0:63:39:c8:4d:d5:36:b9:e1:7e:05:
64:aa:5b:7e:f4:bc:33:26:c8:9e:74:f9:b6:3d:22:6f:04:42:
a6:8a:cb:69:28:26:77:9d:61:00:11:1c:96:c1:68:36:34:40:
96:cc:a9:3b:18:f1:eb:df:51:25:4a:fb:fc:da:72:a9:95:da:
dd:af:fe:e8:f0:bc:2e:15:96:30:aa:58:8c:6d:bb:10:e5:03:
0d:a9:76:98:9a:84:d0:ca:30:85:f6:fe:29:10:80:f5:20:eb:
84:5f:ab:cc:55:83:a0:b9:75:37:bb:3e:65:3d:a2:8f:9a:c9:
4a:4e:3b:20:75:6b:cf:c1:68:25:59:36:e0:8b:de:64:65:01:
f5:0e:92:2e:0c:1f:9b:80:72:f1:46:5c:31:48:3c:60:8a:fe:
0f:ce:50:95:02:2e:63:af:d5:16:63:42:06:0c:2a:92:a3:52:
b6:37:1c:59:64:3f:59:62:de:81:bf:3b:89:ef:93:f2:78:04:
11:97:93:59:af:5c:b8:7e:0c:44:69:29:56:cc:d7:51:fd:17:
e7:bb:e0:f8:0d:06:94:f1:e5:64:f2:ab:0e:c5:ae:b7:28:ee:
54:db:0d:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYlr5jI9sFZOdd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZjJlNDM3YzAtNWI0Mi00OTQzLWJkMjItYzVlOGE4ZTYzZWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidE9CC4eG/OOFwnSJaTm//tdUSVRkv9SbIKI
JbO/TSg5lVSBlX3SCbZJzpcMjg3J2KmC3EOgO5MHfbm+sry9fGN5BZyqmDPTxQbo
15LXaL/+FSASMbEAZXUckk+0Pm0UGWt1gWDD7y25VMet32x1vvE/sYNspEZ3tyPH
aeGXfznBvGolhLBLYIDym4PzIX8nIyOq2VXT5pnsvzqNxBr/8KsFOwrG8WTDSX8/
kLcAeZuGl82rtCqLTGirMjr8BIyYjlpSp4bIdmJY2QDPpcBehlQuo9MEBPKJ4kDz
XPknZ2vf8WzYai7IiMn5vXQGAhR65DboZftWpf0rlCIxsektkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLOsFBGcMa2O1so0YTmLslMWJpQTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY4OTU2MjEtY2JkOC0z
NDJhLTgxYTAtODQ2MGJhYTk5OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFevJB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGbPErbNVYN7crV7/MPQdGnE5XqZJpJf8l7wYznITdU2ueF+BWSq
W370vDMmyJ50+bY9Im8EQqaKy2koJnedYQARHJbBaDY0QJbMqTsY8evfUSVK+/za
cqmV2t2v/ujwvC4VljCqWIxtuxDlAw2pdpiahNDKMIX2/ikQgPUg64Rfq8xVg6C5
dTe7PmU9oo+ayUpOOyB1a8/BaCVZNuCL3mRlAfUOki4MH5uAcvFGXDFIPGCK/g/O
UJUCLmOv1RZjQgYMKpKjUrY3HFlkP1li3oG/O4nvk/J4BBGXk1mvXLh+DERpKVbM
11H9F+e74PgNBpTx5WTyqw7Frrco7lTbDWU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:12:19 2025 by rpki-client