
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7f946da9-d718-3646-bb94-ea37bac0eefb.roa
File: 7f946da9-d718-3646-bb94-ea37bac0eefb.roa (raw, json)
Hash identifier: u8Bpkdcfk0AbvWdxpCMS78SGpRrHquJH0/tHSu3w5e4=
Subject key identifier: 4B:1C:36:01:13:8E:85:90:6A:F1:32:29:13:AC:CE:4B:79:48:F5:4C
Certificate issuer: /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Certificate serial: 010D0C9F4328584BBE406004DD93EC7AFCE56100
Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7f946da9-d718-3646-bb94-ea37bac0eefb.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 401935
IP address blocks: 142.249.47.0/24 maxlen: 24
2620:ce:e000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:60:04:dd:93:ec:7a:fc:e5:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=df8aa1cb-409b-4f96-bb90-60c95d1de689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:de:2b:fa:9a:b3:4f:73:92:95:42:20:94:41:
8d:54:b5:d4:ce:47:88:9b:6b:2f:d6:48:41:38:c3:
c8:23:07:f0:08:39:a3:d6:6e:c7:08:c3:1d:ef:b1:
24:12:d4:a4:b1:66:5e:31:88:5a:21:4d:d3:9f:75:
10:41:e0:7e:39:38:5f:a0:4c:1a:93:3b:b1:1c:94:
c2:30:94:b6:f2:1e:10:15:fc:02:65:d5:7b:cc:fe:
d1:73:21:a9:43:54:4f:f8:6c:5a:12:6f:7d:f0:06:
0c:26:53:95:f9:d8:89:a4:23:dc:df:be:e6:36:8f:
92:18:2a:fd:b1:26:06:f3:c3:ca:07:e1:51:66:4e:
99:f8:3f:26:17:72:d6:e2:92:ea:55:56:26:4a:db:
df:ee:0c:64:41:94:1b:c7:dc:81:22:8d:2a:bb:15:
a9:c5:b8:e9:73:69:57:71:eb:bb:51:97:ce:11:04:
72:e1:4d:a8:f3:41:32:33:60:de:6f:9c:9a:38:41:
22:f0:39:33:47:d3:31:49:64:5a:6a:36:bf:4a:57:
0f:38:9d:63:7c:45:0a:0b:95:bd:59:c5:21:8f:10:
a7:48:27:fa:7f:67:c5:29:d0:21:9b:c2:22:0d:1f:
48:dd:00:6c:fd:ee:07:88:33:ba:eb:de:52:5d:0a:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:36:01:13:8E:85:90:6A:F1:32:29:13:AC:CE:4B:79:48:F5:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7f946da9-d718-3646-bb94-ea37bac0eefb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
X509v3 Authority Key Identifier:
keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
sbgp-ipAddrBlock: critical
IPv4:
142.249.47.0/24
IPv6:
2620:ce:e000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:be:a9:43:e7:39:68:7e:d7:5a:4c:d2:e8:77:9b:67:9d:40:
21:eb:68:8f:25:c6:7f:47:e9:23:15:7b:97:d3:56:8e:dc:78:
fc:9e:37:3d:15:a4:c6:52:73:ae:77:43:0d:6d:12:9c:0f:ad:
f3:0a:6a:26:68:ab:6f:76:77:f0:ac:cd:be:95:c4:1a:0d:1c:
22:97:af:82:13:1a:41:90:4e:f0:88:78:44:1e:45:36:59:31:
64:d8:4c:0a:44:0f:7b:8e:d4:8f:d5:53:82:9c:d9:f8:77:71:
29:24:06:d3:52:0c:94:03:bd:91:c7:48:8e:96:de:06:d8:3b:
f0:96:ff:17:6a:f2:6b:20:0d:c6:29:9e:77:fd:d3:2f:6c:7b:
ce:3b:75:83:bc:5e:c6:8c:fd:b2:30:20:76:16:de:ef:de:a0:
bb:88:84:d7:23:cc:d0:7a:33:5e:b3:f3:35:84:99:1e:cb:9e:
45:22:07:8c:1f:63:1a:a1:57:f0:2d:93:00:9a:b4:a1:1c:84:
93:18:1a:9f:60:60:c2:6b:fb:d4:c4:06:1b:47:27:1c:fb:f3:
85:47:aa:da:a2:a1:fa:43:8e:4a:47:0f:fe:a0:5a:f3:f0:90:
d9:f2:3d:59:e2:b4:16:66:6d:94:e4:34:7f:c0:f0:e4:a7:1d:
ae:5e:20:0c
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEu+QGAE3ZPsevzlYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThmNDdlM2UtMjU2MS00Yjc5LWIzMzItZWU4YTExZWEw
NjE5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZGY4YWExY2ItNDA5Yi00Zjk2LWJiOTAtNjBjOTVkMWRlNjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd4r+pqzT3OSlUIglEGNVLXUzkeIm2sv1khB
OMPIIwfwCDmj1m7HCMMd77EkEtSksWZeMYhaIU3Tn3UQQeB+OThfoEwakzuxHJTC
MJS28h4QFfwCZdV7zP7RcyGpQ1RP+GxaEm998AYMJlOV+diJpCPc377mNo+SGCr9
sSYG88PKB+FRZk6Z+D8mF3LW4pLqVVYmStvf7gxkQZQbx9yBIo0quxWpxbjpc2lX
ceu7UZfOEQRy4U2o80EyM2Deb5yaOEEi8DkzR9MxSWRaaja/SlcPOJ1jfEUKC5W9
WcUhjxCnSCf6f2fFKdAhm8IiDR9I3QBs/e4HiDO6695SXQp50QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFEscNgETjoWQavEyKROszkt5SPVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0
N2UzZS0yNTYxLTRiNzktYjMzMi1lZThhMTFlYTA2MTkvN2Y5NDZkYTktZDcxOC0z
NjQ2LWJiOTQtZWEzN2JhYzBlZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYThmNDdlM2UtMjU2MS00Yjc5LWIz
MzItZWU4YTExZWEwNjE5L2E4ZjQ3ZTNlLTI1NjEtNGI3OS1iMzMyLWVlOGExMWVh
MDYxOS5jcmwwHwYDVR0jBBgwFoAUWxYEyUxTiq2t4dvVwLnJn3tsqzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0N2UzZS0yNTYxLTRiNzktYjMzMi1lZThh
MTFlYTA2MTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAjvkvMA8E
AgACMAkDBwQmIADO4AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASr6pQ+c5aH7XWkzS6HebZ51AIetojyXG
f0fpIxV7l9NWjtx4/J43PRWkxlJzrndDDW0SnA+t8wpqJmirb3Z38KzNvpXEGg0c
IpevghMaQZBO8Ih4RB5FNlkxZNhMCkQPe47Uj9VTgpzZ+HdxKSQG01IMlAO9kcdI
jpbeBtg78Jb/F2ryayANximed/3TL2x7zjt1g7xexoz9sjAgdhbe796gu4iE1yPM
0HozXrPzNYSZHsueRSIHjB9jGqFX8C2TAJq0oRyEkxgan2Bgwmv71MQGG0cnHPvz
hUeq2qKh+kOOSkcP/qBa8/CQ2fI9WeK0FmZtlOQ0f8Dw5Kcdrl4gDA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:35 2025 by rpki-client