
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
File: fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa (raw, json)
Hash identifier: Oatvk2FCUSdKAC8Rpgwb7MKN/M21GeysGuGPPvzUhLc=
Subject key identifier: 74:53:7F:EB:16:79:65:60:13:20:26:8C:C1:01:3D:C7:A8:6F:35:90
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F4328584B99D77BDDB61CEC0136F97A50
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 16509
IP address blocks: 143.220.128.0/23 maxlen: 23
143.220.130.0/23 maxlen: 23
143.220.132.0/23 maxlen: 23
143.220.134.0/23 maxlen: 23
143.220.136.0/23 maxlen: 23
143.220.138.0/23 maxlen: 23
143.220.140.0/23 maxlen: 23
143.220.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:7b:dd:b6:1c:ec:01:36:f9:7a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=4f70354d-c79b-4747-98b3-154e954f5369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:66:85:6d:33:9e:1c:cf:ad:09:44:b6:f8:
30:96:94:7b:51:7a:1a:ee:6c:3a:e5:59:11:7b:6e:
c9:43:ee:3f:75:8a:34:6e:8c:ba:50:b6:ac:7e:8f:
c3:4b:d0:70:d6:99:ad:12:b9:a4:82:e4:41:f7:e9:
02:26:bd:fe:ad:7a:47:f1:61:1e:aa:42:8e:03:34:
ec:fd:f5:63:0a:04:f6:54:c8:09:a2:18:fe:1b:e4:
a2:3a:bb:be:45:92:77:4e:61:64:1f:51:c8:03:c6:
d3:9f:06:14:c4:54:68:14:c9:b1:ec:85:d3:66:9f:
23:de:14:98:b5:37:a8:57:42:6a:7f:cc:fd:87:f4:
45:d4:3d:87:51:d4:ee:fe:75:30:b7:bf:05:52:73:
e2:d6:79:bf:92:ee:3f:b1:6a:57:6f:63:a9:60:69:
57:fa:bf:7d:f0:aa:91:0e:fa:1f:da:ba:f0:c4:0a:
9c:e1:79:97:2e:60:16:ff:50:06:c4:ee:a6:1b:58:
28:63:d6:de:de:d9:69:7b:27:56:47:f7:17:09:2a:
6c:e5:a7:d1:72:92:41:87:38:2b:dd:49:f5:88:ce:
eb:40:64:f4:a5:eb:01:ab:11:71:5c:e5:17:31:2a:
55:8a:39:78:8a:7a:cf:2e:d7:dc:d2:47:73:8a:7e:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:53:7F:EB:16:79:65:60:13:20:26:8C:C1:01:3D:C7:A8:6F:35:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.128.0-143.220.142.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:1d:aa:01:4f:18:02:05:a8:2f:8e:bc:cb:c7:38:b8:45:df:
8a:85:95:f5:c2:b5:8f:0b:ce:32:13:0e:7d:e8:ff:36:44:19:
4f:75:37:45:c1:20:3d:60:37:0f:93:bc:6f:16:d4:62:d0:75:
b8:79:7c:a7:05:a3:82:f8:29:fc:34:48:63:72:5a:9a:8d:38:
42:13:09:e8:d5:19:4a:33:39:44:87:56:ee:92:d4:0e:57:2a:
d9:6f:71:b0:fa:00:ef:64:ff:e3:ba:17:fd:d3:6f:2c:8e:49:
dd:c8:e7:46:3a:84:a5:e7:97:dc:28:0d:83:d6:85:d9:03:f9:
e6:97:d7:0b:10:23:af:96:52:20:16:ca:16:92:ab:68:53:e2:
68:98:bd:18:e2:02:05:32:df:f1:6c:c1:ee:9c:12:af:63:db:
ec:84:fc:3a:32:1b:0c:80:06:6f:b6:85:08:50:11:a8:c2:d1:
f1:d6:d9:ba:5a:9b:84:1c:4c:39:ad:7b:8e:18:22:7d:f7:31:
74:8e:4d:38:fa:82:9e:1c:6c:ed:32:08:82:3d:d4:ec:e7:fa:
b8:d2:ec:47:27:4f:f1:6a:06:bc:01:cd:64:be:fa:ec:4a:51:
10:6e:fb:8f:0d:67:3e:a7:f1:5c:e0:63:6a:da:b8:c4:55:c6:
f8:d2:6e:41
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuZ13vdthzsATb5elAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3
ODliMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NGY3MDM1NGQtYzc5Yi00NzQ3LTk4YjMtMTU0ZTk1NGY1MzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXZmhW0znhzPrQlEtvgwlpR7UXoa7mw65VkR
e27JQ+4/dYo0boy6ULasfo/DS9Bw1pmtErmkguRB9+kCJr3+rXpH8WEeqkKOAzTs
/fVjCgT2VMgJohj+G+SiOru+RZJ3TmFkH1HIA8bTnwYUxFRoFMmx7IXTZp8j3hSY
tTeoV0Jqf8z9h/RF1D2HUdTu/nUwt78FUnPi1nm/ku4/sWpXb2OpYGlX+r998KqR
Dvof2rrwxAqc4XmXLmAW/1AGxO6mG1goY9be3tlpeydWR/cXCSps5afRcpJBhzgr
3Un1iM7rQGT0pesBqxFxXOUXMSpVijl4inrPLtfc0kdzin7jfQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHRTf+sWeWVgEyAmjMEBPceobzWQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj
MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvZmRiMjZjNmQtZDg5Yi0z
NGNlLWE1MDYtYjUzYzYxMDEzYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw
Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy
Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex
ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeP3IAD
BACP3I4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAYh2qAU8YAgWoL468y8c4uEXfioWV9cK1jwvOMhMOfej/
NkQZT3U3RcEgPWA3D5O8bxbUYtB1uHl8pwWjgvgp/DRIY3Jamo04QhMJ6NUZSjM5
RIdW7pLUDlcq2W9xsPoA72T/47oX/dNvLI5J3cjnRjqEpeeX3CgNg9aF2QP55pfX
CxAjr5ZSIBbKFpKraFPiaJi9GOICBTLf8WzB7pwSr2Pb7IT8OjIbDIAGb7aFCFAR
qMLR8dbZulqbhBxMOa17jhgiffcxdI5NOPqCnhxs7TIIgj3U7Of6uNLsRydP8WoG
vAHNZL767EpREG77jw1nPqfxXOBjatq4xFXG+NJuQQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:02:49 2025 by rpki-client