
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa
File: 0187a465-5877-364d-b1a0-2133ea204e7c.roa (raw, json)
Hash identifier: eqxu5ftkxSW8ccTdjNfOxUwvV2+//7wCa43eaCZZzko=
Subject key identifier: B7:CD:1B:60:1E:53:E8:5F:73:62:8F:66:28:3B:A4:B0:D8:FC:10:E7
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F4328584B99D788A7796D59A45A917F00
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 14618
IP address blocks: 209.142.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:88:a7:79:6d:59:a4:5a:91:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=f3f83a54-0c68-4d41-9720-c687ac878479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:a5:7d:c8:b4:30:aa:22:2f:30:1d:6f:9d:
10:a6:1c:7d:49:bc:7a:9f:28:43:41:83:40:55:3c:
87:f8:f3:a8:ec:6f:98:29:a3:ec:04:ce:b9:6f:cc:
b5:39:59:ee:9c:5c:7f:9c:68:e8:a1:6d:3f:3a:2e:
b3:54:1a:db:40:5c:9f:4f:b8:af:06:c2:c1:ce:59:
a0:87:eb:83:4e:df:d5:5f:73:2b:57:9b:c2:31:2a:
ce:d8:75:67:e7:98:17:62:bb:65:1f:ce:0b:1a:e0:
3c:c6:1d:17:d6:a4:b3:7a:e1:c9:cc:7e:bf:b7:58:
59:e7:82:7d:a5:be:cf:99:f9:cf:ea:0f:8d:f9:d9:
0d:c0:c1:a1:03:9d:a7:13:b1:fb:e8:b5:69:82:5e:
d3:eb:c1:a0:6b:91:b3:87:91:2e:d8:cd:ac:87:ae:
94:76:5f:bd:4a:c2:5e:f1:4a:b6:3a:5a:1b:fe:60:
1b:91:f5:3d:ad:3c:63:8c:cb:62:63:bf:26:b5:5d:
db:48:c0:1c:37:6f:78:78:50:ed:54:ca:fb:e0:d9:
61:01:ac:73:d2:3b:0e:74:b1:0a:79:29:e1:ee:1a:
5d:87:61:70:41:c2:98:0b:31:92:a5:bd:0d:7b:3e:
b0:dd:d4:1e:c6:02:b6:0f:eb:ae:9b:6d:28:13:30:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CD:1B:60:1E:53:E8:5F:73:62:8F:66:28:3B:A4:B0:D8:FC:10:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:4a:b2:03:7e:34:2e:a5:24:92:1f:09:9f:dc:0d:0d:c5:68:
45:e1:f8:1c:a8:cd:08:38:f8:3c:c8:67:7b:fa:e5:75:5c:40:
01:69:81:60:bc:08:34:7e:6c:b8:7c:cd:db:3e:1d:64:0c:03:
a4:ce:09:7e:cf:92:a2:4c:36:40:47:8a:a7:5b:2c:bb:76:a1:
e0:8f:53:24:7e:88:87:e9:90:1d:19:cc:45:51:23:80:a4:de:
50:fc:ef:9d:33:a7:25:bf:54:e4:52:95:76:c2:84:e6:d2:b1:
81:d7:98:43:a7:35:77:d3:88:fd:45:fc:d4:99:4d:bc:08:f6:
cc:52:e3:8e:6d:87:2a:86:f1:3e:96:ca:54:5c:26:8d:11:99:
f6:b6:63:77:1b:67:3f:d8:25:03:dc:6d:20:e2:b1:ad:10:42:
e8:df:9f:5a:2f:d0:c2:5f:ec:63:74:81:05:61:e2:f7:cf:1e:
a3:86:84:fe:4b:fe:8b:ad:e0:5b:46:52:21:81:d3:3a:da:70:
81:c8:c1:33:ee:5d:cc:42:11:95:94:7f:e0:5e:de:ea:e7:2a:
ad:83:03:5c:3c:ea:dc:23:92:20:b7:0a:41:89:39:3f:f7:6e:
41:8a:26:fb:39:bb:22:7e:ef:90:ac:a9:ad:2c:f8:2e:0d:ac:
ab:63:6d:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14ineW1ZpFqRfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz
ZWExMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZjNmODNhNTQtMGM2OC00ZDQxLTk3MjAtYzY4N2FjODc4NDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8ulfci0MKoiLzAdb50Qphx9Sbx6nyhDQYNA
VTyH+POo7G+YKaPsBM65b8y1OVnunFx/nGjooW0/Oi6zVBrbQFyfT7ivBsLBzlmg
h+uDTt/VX3MrV5vCMSrO2HVn55gXYrtlH84LGuA8xh0X1qSzeuHJzH6/t1hZ54J9
pb7PmfnP6g+N+dkNwMGhA52nE7H76LVpgl7T68Gga5Gzh5Eu2M2sh66Udl+9SsJe
8Uq2Olob/mAbkfU9rTxjjMtiY78mtV3bSMAcN294eFDtVMr74NlhAaxz0jsOdLEK
eSnh7hpdh2FwQcKYCzGSpb0Nez6w3dQexgK2D+uum20oEzAXfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfNG2AeU+hfc2KPZig7pLDY/BDnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz
MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvMDE4N2E0NjUtNTg3Ny0z
NjRkLWIxYTAtMjEzM2VhMjA0ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3
MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3
M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0
NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFKsgN+NC6lJJIfCZ/cDQ3FaEXh+ByozQg4+DzIZ3v65XVcQAFpgWC8
CDR+bLh8zds+HWQMA6TOCX7PkqJMNkBHiqdbLLt2oeCPUyR+iIfpkB0ZzEVRI4Ck
3lD8750zpyW/VORSlXbChObSsYHXmEOnNXfTiP1F/NSZTbwI9sxS445thyqG8T6W
ylRcJo0Rmfa2Y3cbZz/YJQPcbSDisa0QQujfn1ov0MJf7GN0gQVh4vfPHqOGhP5L
/out4FtGUiGB0zracIHIwTPuXcxCEZWUf+Be3urnKq2DA1w86twjkiC3CkGJOT/3
bkGKJvs5uyJ+75Csqa0s+C4NrKtjbZ4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:52 2025 by rpki-client