
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c69098ee-403b-34a9-897d-5af36804bdac.roa
File: c69098ee-403b-34a9-897d-5af36804bdac.roa (raw, json)
Hash identifier: 4OhXf06o2hzpYAMQxcTP1AEXg/DUV8zS45vWVBQsD2U=
Subject key identifier: A4:20:91:45:8E:4D:86:C3:B5:17:3D:4C:A1:39:F4:D1:6A:4A:65:7D
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584B7F524E14EBB319AF9FA53960
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c69098ee-403b-34a9-897d-5af36804bdac.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 33363
IP address blocks: 72.31.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:4e:14:eb:b3:19:af:9f:a5:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=beba9f8f-0e4d-4949-8400-8820442837b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:fb:d2:28:42:39:2d:0e:45:6c:2e:0c:fd:
bd:7e:eb:ba:52:eb:3b:e1:a0:08:50:45:39:0a:92:
e3:30:89:e5:e1:b4:f3:49:a1:9a:76:0f:6c:30:3b:
73:c3:21:93:bc:3a:df:9a:5d:39:ea:75:52:59:22:
5c:fd:44:ee:d2:e1:0b:8a:99:ae:93:c6:97:ed:ec:
68:a1:29:5e:71:ec:f4:01:a7:cc:0e:11:e6:2b:42:
c4:2f:77:99:30:d0:1c:24:9c:97:2c:2c:f4:db:fb:
e9:94:d1:cf:67:2f:21:61:ad:a5:52:18:f1:ae:4e:
66:89:8a:04:ec:61:d1:56:a3:aa:1e:35:4e:6e:65:
85:08:9a:42:b5:6f:dd:b0:79:7c:a1:fc:67:de:42:
04:52:84:3a:ba:8e:71:18:07:69:47:95:8b:04:b5:
a8:30:45:d0:37:f5:6d:62:85:57:f0:76:d6:83:0b:
d3:ae:c7:3f:72:5c:06:7f:a7:30:80:a3:8f:4f:40:
66:f3:2e:58:d2:1e:ec:10:db:85:7c:c2:4f:52:6e:
fe:c9:8a:f9:8b:87:62:bd:2e:d7:fe:c9:ce:8b:27:
e2:8a:01:0d:82:cb:33:dd:a2:02:77:71:aa:bb:96:
fc:71:9a:db:36:7c:a8:a9:1c:6e:6e:b3:a5:bd:31:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:91:45:8E:4D:86:C3:B5:17:3D:4C:A1:39:F4:D1:6A:4A:65:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c69098ee-403b-34a9-897d-5af36804bdac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ec:03:2f:1c:de:c1:be:44:57:24:0c:25:31:00:b8:21:c4:
22:e2:d8:20:e7:4d:96:d4:e4:c2:76:59:7a:5f:4e:41:75:1f:
6c:f8:31:b5:6e:95:ed:64:7d:d5:18:36:57:2f:70:5a:30:50:
46:f3:38:01:00:87:19:df:42:71:81:d8:7a:92:ce:7a:33:3f:
8b:f2:ee:9a:39:76:36:79:9a:fa:71:da:17:9b:7d:af:5b:68:
78:ea:22:fc:dc:f7:15:f4:da:bf:01:eb:c8:3d:93:4c:2a:79:
b0:6d:f9:a0:57:e3:fb:f4:49:16:65:5c:17:5c:1e:80:06:7a:
04:cb:e4:7d:a3:6e:a3:f8:14:81:71:8c:f6:0b:51:2e:85:1e:
d0:02:d9:63:5f:99:f4:39:f6:e8:52:74:16:94:d3:15:dc:ec:
35:fb:de:71:3b:99:99:02:34:f8:ab:72:5b:5a:ce:0b:13:6e:
1b:6b:0d:d1:17:cf:43:47:b8:8f:fa:b3:8f:c9:e7:52:8e:51:
28:69:77:92:a5:7e:7c:09:4b:02:b4:75:c0:4b:32:f4:37:14:
df:c5:ba:49:48:00:37:12:61:20:94:56:61:50:17:24:25:e9:
78:2c:72:a6:2b:29:62:46:46:b0:5b:34:5d:6f:58:2d:8d:44:
77:f2:0d:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uk4U67MZr5+lOWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
YmViYTlmOGYtMGU0ZC00OTQ5LTg0MDAtODgyMDQ0MjgzN2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4j70ihCOS0ORWwuDP29fuu6Uus74aAIUEU5
CpLjMInl4bTzSaGadg9sMDtzwyGTvDrfml056nVSWSJc/UTu0uELipmuk8aX7exo
oSlecez0AafMDhHmK0LEL3eZMNAcJJyXLCz02/vplNHPZy8hYa2lUhjxrk5miYoE
7GHRVqOqHjVObmWFCJpCtW/dsHl8ofxn3kIEUoQ6uo5xGAdpR5WLBLWoMEXQN/Vt
YoVX8HbWgwvTrsc/clwGf6cwgKOPT0Bm8y5Y0h7sENuFfMJPUm7+yYr5i4divS7X
/snOiyfiigENgssz3aICd3Gqu5b8cZrbNnyoqRxubrOlvTH9CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQgkUWOTYbDtRc9TKE59NFqSmV9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzY5MDk4ZWUtNDAzYi0z
NGE5LTg5N2QtNWFmMzY4MDRiZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB/4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrsAy8c3sG+RFckDCUxALghxCLi2CDnTZbU5MJ2WXpfTkF1H2z4MbVu
le1kfdUYNlcvcFowUEbzOAEAhxnfQnGB2HqSznozP4vy7po5djZ5mvpx2hebfa9b
aHjqIvzc9xX02r8B68g9k0wqebBt+aBX4/v0SRZlXBdcHoAGegTL5H2jbqP4FIFx
jPYLUS6FHtAC2WNfmfQ59uhSdBaU0xXc7DX73nE7mZkCNPircltazgsTbhtrDdEX
z0NHuI/6s4/J51KOUShpd5KlfnwJSwK0dcBLMvQ3FN/FuklIADcSYSCUVmFQFyQl
6XgscqYrKWJGRrBbNF1vWC2NRHfyDbY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:56:14 2025 by rpki-client