
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa
File: 672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa (raw, json)
Hash identifier: zHRZR/VAFBzk40Nl7DDmTptzDR/YJ/FgH0oekidmQx4=
Subject key identifier: E0:F3:99:2F:7C:9A:8A:2F:32:F4:A1:FB:B5:6C:5A:99:06:F0:47:55
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584B679794E3F17167CE97442200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa
Signing time: Sat 04 Oct 2025 01:00:33 +0000
ROA not before: Sat 04 Oct 2025 01:00:33 +0000
ROA not after: Fri 02 Jan 2026 02:00:33 +0000
asID: 15169
IP address blocks: 35.190.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:67:97:94:e3:f1:71:67:ce:97:44:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 4 01:00:33 2025 GMT
Not After : Jan 2 02:00:33 2026 GMT
Subject: CN=65e7ecc8-0b48-40b4-b012-7544361897ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:fe:ff:82:2a:3d:d8:17:b8:a4:18:8a:4b:
39:e5:be:bf:2c:52:a3:e7:ae:43:ae:81:63:03:d4:
49:c0:64:14:d7:9c:f0:aa:c9:d6:8b:62:79:02:ab:
0a:39:eb:39:a3:5c:21:f9:31:2f:3d:62:8b:2c:b9:
e8:37:37:4d:48:c2:6e:0c:fc:83:b9:d6:51:e7:7a:
0d:86:61:14:79:a8:2c:b5:27:4b:08:81:8f:81:b7:
bd:da:36:c4:43:40:c4:0c:10:a8:fb:77:6b:e2:9c:
49:1d:cb:fe:d7:61:fa:d8:f6:cd:ce:59:74:9f:3e:
73:bf:ce:ca:80:19:30:11:20:1b:3c:7c:93:c4:5a:
4d:c4:7b:36:56:53:0a:3a:15:8e:3b:b6:94:18:77:
cc:83:94:e0:ec:20:81:d0:f8:e7:de:a2:ce:8e:25:
37:82:81:e2:0a:11:63:45:72:8f:77:ad:b6:ed:f5:
58:df:b1:b4:e3:02:41:51:4e:6d:2f:7f:aa:0c:28:
ec:0f:01:42:1d:72:0c:99:21:f3:75:a7:0d:d0:be:
8a:2f:12:65:74:b3:15:cd:d7:c8:11:ae:a3:22:4d:
0a:c9:28:fb:7b:27:c4:4a:87:dc:ec:15:46:67:aa:
5c:d8:7e:41:dd:62:96:6a:2a:31:07:fe:0c:c6:20:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:99:2F:7C:9A:8A:2F:32:F4:A1:FB:B5:6C:5A:99:06:F0:47:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.190.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:b1:66:cd:9f:85:18:e0:04:e1:6e:58:1a:52:25:04:4a:8f:
72:1d:90:5e:cb:48:ee:b7:be:c1:64:da:c9:27:20:06:53:6e:
b4:1b:ce:12:56:8c:c6:5a:4e:cb:d3:46:e9:15:87:23:07:98:
f3:e0:ae:b0:19:95:04:ba:75:49:66:95:e1:77:bf:8b:30:49:
2c:c0:c3:d9:00:f9:90:7f:0e:c2:af:85:3f:72:00:2f:d7:74:
ad:7b:03:00:7a:99:c5:ac:a8:65:61:50:71:d7:ce:bf:ac:79:
83:2a:b9:3e:3f:91:0f:fb:2d:fe:2d:f1:95:5a:3e:15:65:c7:
6c:47:b0:b9:42:5d:8a:07:6f:04:0b:f1:da:d9:3f:9f:e1:90:
f6:0e:6b:28:e9:25:2c:42:df:fe:2a:30:94:c1:2d:8b:35:82:
d4:62:38:8a:ac:00:9c:79:ab:6e:c0:0d:38:0e:dc:99:28:30:
da:90:fb:c7:3e:f3:89:f7:48:44:da:11:2d:e6:d2:7d:47:e5:
f6:a2:f5:f0:ae:6b:3d:ee:d0:64:f1:25:6e:5d:14:bd:eb:f8:
e8:a1:69:e2:6a:5b:65:49:80:09:42:59:4e:d4:c5:ce:44:96:
61:a3:1b:06:58:67:f5:c2:54:d7:de:89:9d:50:f3:f1:02:58:
80:b2:2d:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5Tj8XFnzpdEIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
NjVlN2VjYzgtMGI0OC00MGI0LWIwMTItNzU0NDM2MTg5N2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWn+/4IqPdgXuKQYiks55b6/LFKj565DroFj
A9RJwGQU15zwqsnWi2J5AqsKOes5o1wh+TEvPWKLLLnoNzdNSMJuDPyDudZR53oN
hmEUeagstSdLCIGPgbe92jbEQ0DEDBCo+3dr4pxJHcv+12H62PbNzll0nz5zv87K
gBkwESAbPHyTxFpNxHs2VlMKOhWOO7aUGHfMg5Tg7CCB0Pjn3qLOjiU3goHiChFj
RXKPd6227fVY37G04wJBUU5tL3+qDCjsDwFCHXIMmSHzdacN0L6KLxJldLMVzdfI
Ea6jIk0KySj7eyfESofc7BVGZ6pc2H5B3WKWaioxB/4MxiAcTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODzmS98moovMvSh+7VsWpkG8EdVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjcyZjc4NDEtM2FhOS0z
NWNkLWI1NTYtNWVkMWJjOWJlM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI77AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGxZs2fhRjgBOFuWBpSJQRKj3IdkF7LSO63vsFk2sknIAZTbrQbzhJW
jMZaTsvTRukVhyMHmPPgrrAZlQS6dUlmleF3v4swSSzAw9kA+ZB/DsKvhT9yAC/X
dK17AwB6mcWsqGVhUHHXzr+seYMquT4/kQ/7Lf4t8ZVaPhVlx2xHsLlCXYoHbwQL
8drZP5/hkPYOayjpJSxC3/4qMJTBLYs1gtRiOIqsAJx5q27ADTgO3JkoMNqQ+8c+
84n3SETaES3m0n1H5fai9fCuaz3u0GTxJW5dFL3r+OihaeJqW2VJgAlCWU7Uxc5E
lmGjGwZYZ/XCVNfeiZ1Q8/ECWICyLZI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:02:51 2025 by rpki-client