
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
File: 92ac91aa-5a40-302f-b604-4405597dc272.roa (raw, json)
Hash identifier: CSmShipI2G2lLiewv1mfZi8YK59DZpE68qVRwBEvWqc=
Subject key identifier: AD:7D:29:CB:B1:04:04:E0:DF:5D:F9:C8:84:19:63:05:07:7A:D7:83
Certificate issuer: /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial: 010D0C9F4328584BB88D2C5B4486B560248CF900
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 14618
IP address blocks: 72.22.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:2c:5b:44:86:b5:60:24:8c:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=ea625d00-828a-4fb2-bc6b-477a52f535e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:48:ac:df:c0:76:ce:6f:54:85:d5:96:9b:
ed:08:03:07:bb:b6:f7:64:f3:a9:84:58:36:db:c7:
d9:2c:25:8c:9a:8d:8a:54:3a:84:a1:2a:a4:cf:cb:
3f:3c:02:e9:07:0e:71:61:3f:5b:e6:1f:6b:4e:24:
cf:44:92:4f:94:2a:10:2b:94:c1:e3:e8:3e:75:ff:
f7:ed:49:2c:52:94:a2:43:22:1b:ef:08:46:ca:10:
33:77:06:36:80:17:64:67:cd:49:47:38:a2:4b:e4:
30:4c:6d:07:98:51:1e:2c:5b:3c:7d:70:38:38:3b:
4d:34:d4:7c:67:a4:fa:72:33:40:c5:db:6f:6d:66:
91:1b:85:a8:6a:8c:6d:cd:8f:14:45:7b:44:c1:6a:
c2:46:69:1d:7c:17:f0:0b:9a:52:14:17:69:9a:18:
26:c4:52:34:40:ae:7d:7f:c6:4c:a4:1b:49:47:83:
11:d7:9a:2b:15:fa:cb:8b:81:86:8c:92:f4:6b:ac:
d4:68:24:27:0b:17:59:8a:f5:38:7c:c2:12:5a:de:
7c:28:0f:12:7c:54:7c:e0:ef:f1:6b:5a:3b:06:56:
d6:79:41:2c:4b:a6:f7:f1:b6:5d:83:93:21:43:67:
74:2c:08:da:f2:e1:41:80:17:4a:0b:a2:07:c9:d0:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:29:CB:B1:04:04:E0:DF:5D:F9:C8:84:19:63:05:07:7A:D7:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
X509v3 Authority Key Identifier:
keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:a2:a0:30:f6:af:4e:e5:79:75:5d:c8:d4:3f:80:32:e1:69:
bb:70:6f:fb:f1:a8:77:a3:b9:3a:7c:60:c8:38:b7:cb:39:18:
2d:7f:a8:21:36:de:b2:f5:89:d5:2f:16:fc:6d:5b:40:11:0e:
7d:f4:b9:81:6c:39:94:7c:ff:c9:20:e3:2f:3d:1d:8d:86:92:
fc:f7:82:a2:a1:8d:93:de:9e:ef:e1:91:7e:12:c0:01:e2:2d:
c4:0a:40:f2:a8:dd:51:85:f0:ab:dc:37:a1:17:6e:29:a0:2f:
68:6e:0d:d7:ec:5c:71:87:db:02:bc:42:11:dd:85:30:1c:43:
ad:52:e1:6e:08:e6:82:98:e4:b5:da:e2:9d:6d:37:a0:be:8e:
b0:f7:98:c0:13:1f:a3:0e:ca:63:a0:e1:e7:e2:2f:57:c7:bf:
21:ad:fc:ac:57:f3:bb:8e:31:58:a9:98:23:b7:d5:6d:d2:0a:
cf:41:81:8d:73:ad:0c:dc:e2:27:64:dd:3c:f7:c1:ee:7a:74:
0e:ee:4e:72:a5:0e:fd:f8:67:60:16:2d:a0:7b:7b:d8:7c:46:
39:11:83:59:a7:64:20:89:fb:96:a9:0e:83:86:26:85:2f:a5:
04:da:db:e9:84:b8:9d:72:a3:a6:bf:fb:2a:9c:b5:96:84:0e:
42:f2:23:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSxbRIa1YCSM+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIw
NGEyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZWE2MjVkMDAtODI4YS00ZmIyLWJjNmItNDc3YTUyZjUzNWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOhIrN/Ads5vVIXVlpvtCAMHu7b3ZPOphFg2
28fZLCWMmo2KVDqEoSqkz8s/PALpBw5xYT9b5h9rTiTPRJJPlCoQK5TB4+g+df/3
7UksUpSiQyIb7whGyhAzdwY2gBdkZ81JRziiS+QwTG0HmFEeLFs8fXA4ODtNNNR8
Z6T6cjNAxdtvbWaRG4WoaoxtzY8URXtEwWrCRmkdfBfwC5pSFBdpmhgmxFI0QK59
f8ZMpBtJR4MR15orFfrLi4GGjJL0a6zUaCQnCxdZivU4fMISWt58KA8SfFR84O/x
a1o7BlbWeUEsS6b38bZdg5MhQ2d0LAja8uFBgBdKC6IHydAZfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK19KcuxBATg3135yIQZYwUHeteDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMTdm
MGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvOTJhYzkxYWEtNWE0MC0z
MDJmLWI2MDQtNDQwNTU5N2RjMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTE3ZjBjOGEtNzA1ZS00NDBkLTgx
NjAtNzUyMTk2ZWIwNGEyLzExN2YwYzhhLTcwNWUtNDQwZC04MTYwLTc1MjE5NmVi
MDRhMi5jcmwwHwYDVR0jBBgwFoAUrR+VyGWB55XajGVUK0RqLpLI99gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIx
OTZlYjA0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJeioDD2r07leXVdyNQ/gDLhabtwb/vxqHejuTp8YMg4t8s5GC1/qCE2
3rL1idUvFvxtW0ARDn30uYFsOZR8/8kg4y89HY2Gkvz3gqKhjZPenu/hkX4SwAHi
LcQKQPKo3VGF8KvcN6EXbimgL2huDdfsXHGH2wK8QhHdhTAcQ61S4W4I5oKY5LXa
4p1tN6C+jrD3mMATH6MOymOg4efiL1fHvyGt/KxX87uOMVipmCO31W3SCs9BgY1z
rQzc4idk3Tz3we56dA7uTnKlDv34Z2AWLaB7e9h8RjkRg1mnZCCJ+5apDoOGJoUv
pQTa2+mEuJ1yo6a/+yqctZaEDkLyI/o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:46 2025 by rpki-client