
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
File: 3b2baeea-9ebf-3e73-8198-bfb726dce325.roa (raw, json)
Hash identifier: 3sN4tIgVCjij5ByIGaYXAbfqFxuEmbFCjHYCLopOL1Q=
Subject key identifier: 83:DC:EF:B3:6D:18:10:86:D3:5D:A1:54:25:F8:E7:B4:E5:14:63:FC
Certificate issuer: /CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Certificate serial: 010D0C9F4328584B99D77DCFEB3201810D2F7B80
Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 22996
IP address blocks: 173.241.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:7d:cf:eb:32:01:81:0d:2f:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=582a3838-babb-45bf-98de-7509a4eb45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:58:74:b6:a7:ce:0a:62:3e:23:ef:2b:5a:
31:b6:3b:d5:e6:3a:e7:b8:fd:51:45:54:1d:eb:fe:
e1:fc:c7:ac:8f:37:e4:5a:34:21:69:03:97:0d:5b:
b0:5d:16:72:ca:6d:7a:42:48:88:fa:95:b2:16:9b:
f0:a5:73:33:4e:c0:47:29:bc:7b:f0:9c:8f:9f:07:
71:6d:c9:4d:b0:e2:71:7e:23:20:d4:6d:ab:ba:37:
c2:4c:ff:04:cf:02:ff:2e:db:df:a3:b1:df:0e:07:
5a:21:b5:f2:83:de:ce:ad:a9:28:28:ea:a4:93:e6:
c7:77:c3:3a:e9:a8:84:5d:b9:49:f3:47:f8:32:3b:
d9:93:5c:de:8f:2f:87:fa:3f:1d:fb:7a:e8:e9:bd:
2b:95:45:73:8e:9c:c0:c3:a6:4c:f5:e3:86:2f:52:
f1:a5:a7:d1:43:d3:b4:ae:d4:76:29:f2:cb:79:73:
ed:45:a1:68:8d:41:2e:46:80:89:37:6b:48:d7:92:
d0:2f:6f:d4:15:6f:7d:4b:45:c7:cc:ac:84:99:1d:
23:e8:62:f9:69:e5:1e:1d:50:08:a2:49:ff:be:f2:
d2:9c:72:8e:0c:58:82:99:f4:2a:c1:fb:10:d6:31:
da:95:ca:47:4c:16:05:5f:f5:a0:3a:43:48:29:64:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:EF:B3:6D:18:10:86:D3:5D:A1:54:25:F8:E7:B4:E5:14:63:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl
X509v3 Authority Key Identifier:
keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.241.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:1b:55:a7:4c:c1:ff:3f:c3:44:73:a3:e2:7d:3b:4d:65:1c:
81:a1:e5:93:8f:26:9a:e7:4b:b6:88:c1:c1:a7:43:09:0f:7b:
95:2f:09:21:1f:33:77:9c:9d:85:d0:db:8d:7f:36:93:98:4d:
75:7e:48:d3:2a:99:1c:1c:4d:ea:08:d9:7a:cb:23:6c:f1:2b:
1b:a5:20:5a:b9:94:4c:57:b9:0f:6a:46:53:de:42:0b:e0:5b:
8f:c8:ac:48:5e:9b:8a:e3:54:46:09:cf:8e:0a:b4:2a:26:09:
6a:69:99:18:30:4e:2d:31:1b:80:2d:5c:34:94:ed:d6:2f:cb:
60:b4:8b:a9:49:26:b8:5e:94:fb:4e:42:df:df:c7:68:ea:99:
5a:6a:2a:a0:53:eb:9d:4a:7f:be:80:99:83:9c:4e:01:cc:12:
0b:da:0d:b4:4a:86:b4:25:66:cd:4a:da:74:eb:50:60:86:f3:
a7:ab:d3:1f:b6:2e:66:87:b8:cf:74:42:96:cd:44:15:3f:05:
20:70:36:a4:f2:e4:35:4b:11:c7:d1:cc:aa:67:fb:7d:ba:ed:
04:d4:57:c8:8d:95:70:a5:b3:52:2b:cd:21:59:7c:db:6c:ad:
0d:5d:dd:27:09:46:96:89:76:df:c4:3e:67:9e:63:ac:a9:d9:
00:95:6c:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ133P6zIBgQ0ve4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkMTQyZDctNTMxMS00ODdiLTljMTEtZjE2OTUwZTRk
NTdkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NTgyYTM4MzgtYmFiYi00NWJmLTk4ZGUtNzUwOWE0ZWI0NWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B1YdLanzgpiPiPvK1oxtjvV5jrnuP1RRVQd
6/7h/MesjzfkWjQhaQOXDVuwXRZyym16QkiI+pWyFpvwpXMzTsBHKbx78JyPnwdx
bclNsOJxfiMg1G2rujfCTP8EzwL/Ltvfo7HfDgdaIbXyg97OrakoKOqkk+bHd8M6
6aiEXblJ80f4MjvZk1zejy+H+j8d+3ro6b0rlUVzjpzAw6ZM9eOGL1LxpafRQ9O0
rtR2KfLLeXPtRaFojUEuRoCJN2tI15LQL2/UFW99S0XHzKyEmR0j6GL5aeUeHVAI
okn/vvLSnHKODFiCmfQqwfsQ1jHalcpHTBYFX/WgOkNIKWQXrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPc77NtGBCG012hVCX457TlFGP8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQx
NDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5NTBlNGQ1N2QvM2IyYmFlZWEtOWViZi0z
ZTczLTgxOTgtYmZiNzI2ZGNlMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWRkMTQyZDctNTMxMS00ODdiLTlj
MTEtZjE2OTUwZTRkNTdkLzFkZDE0MmQ3LTUzMTEtNDg3Yi05YzExLWYxNjk1MGU0
ZDU3ZC5jcmwwHwYDVR0jBBgwFoAURy2x5B5MCwnHXiyrNWyEEIuA9qEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQxNDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5
NTBlNGQ1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAbVadMwf8/w0Rzo+J9O01lHIGh5ZOPJprnS7aIwcGnQwkPe5UvCSEf
M3ecnYXQ241/NpOYTXV+SNMqmRwcTeoI2XrLI2zxKxulIFq5lExXuQ9qRlPeQgvg
W4/IrEhem4rjVEYJz44KtComCWppmRgwTi0xG4AtXDSU7dYvy2C0i6lJJrhelPtO
Qt/fx2jqmVpqKqBT651Kf76AmYOcTgHMEgvaDbRKhrQlZs1K2nTrUGCG86er0x+2
LmaHuM90QpbNRBU/BSBwNqTy5DVLEcfRzKpn+3267QTUV8iNlXCls1IrzSFZfNts
rQ1d3ScJRpaJdt/EPmeeY6yp2QCVbOY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:19 2025 by rpki-client