
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa
File: 82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa (raw, json)
Hash identifier: TyPMapOXGFcogZ7lEEis5gd5t9T0uDcyBnlGLNJHEok=
Subject key identifier: 8D:53:73:E7:AE:A2:26:BB:F6:1B:9B:90:CE:CF:2B:FE:A4:29:57:E1
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F4328584BB88D56389B958B0CC78A6300
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 14618
IP address blocks: 205.201.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:56:38:9b:95:8b:0c:c7:8a:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=f28364e7-a2f1-4f96-81a2-07a021dc846e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:92:c6:a8:25:92:5c:83:d5:90:1b:28:d9:
79:4f:52:fb:28:38:16:12:28:bb:be:2a:a3:02:31:
89:55:e6:51:c1:50:bb:88:89:31:8a:9f:1f:58:c1:
86:28:33:18:bd:6c:6b:5d:01:85:da:75:68:82:68:
66:f6:6b:90:80:1a:80:68:de:d0:10:43:b2:f7:5d:
fc:44:3a:8e:80:13:b4:57:de:64:88:2f:40:22:41:
31:e5:e6:b3:be:86:fc:d6:e5:b4:58:dd:d0:0e:43:
bb:4f:06:46:64:73:22:d6:f7:9c:68:f0:b6:5d:eb:
cf:cb:f2:ba:f7:10:5c:d0:50:4c:ea:a9:c5:be:7d:
9f:54:07:3b:2d:3c:da:36:f3:05:c0:e5:fb:d8:38:
1d:41:c1:56:6c:f6:e7:bc:f0:9c:3e:e7:e0:82:53:
bb:ca:fa:cf:da:eb:3a:b7:36:45:b8:ae:c5:a2:8e:
7b:52:48:99:6d:ba:4e:d2:7a:1a:b6:fe:49:33:a2:
58:c6:2d:46:66:08:f2:11:b7:4e:e7:f6:ae:c5:ff:
80:b2:40:81:88:25:c0:ce:17:66:3b:8d:7c:6c:2d:
da:2a:fb:8b:0e:e7:60:b3:66:b5:e9:f9:0a:2b:a2:
72:11:39:3a:53:a5:6c:94:33:e0:cc:1b:8a:df:02:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:53:73:E7:AE:A2:26:BB:F6:1B:9B:90:CE:CF:2B:FE:A4:29:57:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv4:
205.201.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:dd:28:ab:c9:a1:26:06:25:e2:30:88:c9:87:ac:b9:31:3f:
e6:47:7e:d2:9a:9d:a2:e6:44:e5:37:e0:4b:44:8e:46:f8:4b:
49:7f:a0:4b:6a:a1:08:57:ce:43:31:df:6c:72:a3:cc:29:e1:
bd:ca:ec:de:ab:69:f3:f1:7e:a0:41:07:0e:b2:92:4a:e6:69:
53:9d:25:a8:fd:19:e2:56:62:43:f3:a5:ed:64:d6:6a:76:0e:
f0:68:20:45:5c:22:cb:ae:1c:e9:12:6e:6b:9f:e2:cf:59:a3:
ef:fd:4d:b8:57:d1:a5:7b:93:ac:29:4d:af:65:98:ae:39:47:
9b:62:66:eb:5e:e8:6e:2c:4e:70:93:8e:82:b7:7d:ff:d6:45:
f1:b1:c8:8b:2e:2d:cc:20:85:ba:41:67:03:74:17:1e:66:cb:
09:1d:89:ab:bf:88:db:52:0d:b7:61:e8:4f:76:07:66:b7:67:
0d:02:59:4c:e1:33:0b:1c:90:5d:af:f4:8d:05:66:8e:ec:5e:
57:9c:6d:09:01:0c:2e:82:f0:ef:b8:4e:60:1f:af:f3:a4:c2:
76:29:7b:17:d0:75:b8:9e:2b:b2:fa:0e:61:5b:9c:ff:f0:9d:
08:54:13:50:07:7c:41:b1:77:e0:b2:be:c3:a7:7e:52:05:70:
f1:22:9a:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVY4m5WLDMeKYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz
ZWExMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZjI4MzY0ZTctYTJmMS00Zjk2LTgxYTItMDdhMDIxZGM4NDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloOSxqglklyD1ZAbKNl5T1L7KDgWEii7viqj
AjGJVeZRwVC7iIkxip8fWMGGKDMYvWxrXQGF2nVogmhm9muQgBqAaN7QEEOy9138
RDqOgBO0V95kiC9AIkEx5eazvob81uW0WN3QDkO7TwZGZHMi1vecaPC2XevPy/K6
9xBc0FBM6qnFvn2fVAc7LTzaNvMFwOX72DgdQcFWbPbnvPCcPufgglO7yvrP2us6
tzZFuK7Foo57UkiZbbpO0noatv5JM6JYxi1GZgjyEbdO5/auxf+AskCBiCXAzhdm
O418bC3aKvuLDudgs2a16fkKK6JyETk6U6VslDPgzBuK3wJiVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1Tc+euoia79hubkM7PK/6kKVfhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz
MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvODJjODU2YTMtMWE3Yi0z
Y2YwLWE2ZGQtMjM2YTEzNDUxOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3
MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3
M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0
NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzck7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHdKKvJoSYGJeIwiMmHrLkxP+ZHftKanaLmROU34EtEjkb4S0l/oEtq
oQhXzkMx32xyo8wp4b3K7N6rafPxfqBBBw6ykkrmaVOdJaj9GeJWYkPzpe1k1mp2
DvBoIEVcIsuuHOkSbmuf4s9Zo+/9TbhX0aV7k6wpTa9lmK45R5tiZute6G4sTnCT
joK3ff/WRfGxyIsuLcwghbpBZwN0Fx5mywkdiau/iNtSDbdh6E92B2a3Zw0CWUzh
MwsckF2v9I0FZo7sXlecbQkBDC6C8O+4TmAfr/OkwnYpexfQdbieK7L6DmFbnP/w
nQhUE1AHfEGxd+CyvsOnflIFcPEimqY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:29 2025 by rpki-client