
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa
File: c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa (raw, json)
Hash identifier: zHBDGLN1tj7304o5/k0tzwpoICaJVwTMVYcMypFZLV0=
Subject key identifier: 1F:2F:78:54:69:D6:6D:D2:27:FB:75:88:B2:15:10:C7:ED:96:E7:1B
Certificate issuer: /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial: 010D0C9F4328584BA9325F3F694F869506B79680
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 53856
IP address blocks: 142.202.116.0/23 maxlen: 23
172.110.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:5f:3f:69:4f:86:95:06:b7:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=56a1e7f9-3585-4a52-97d5-236c67606032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:26:51:bd:42:e2:ad:f9:bf:ba:28:26:99:
58:2f:5b:ba:41:09:77:f9:de:c7:2f:6b:0b:3a:58:
74:f7:d8:fb:56:7e:9e:df:eb:b0:a6:22:d9:af:59:
b8:b7:63:fe:ab:ef:03:a9:08:a1:c8:0e:06:7b:c9:
09:c4:55:eb:6c:79:17:67:b1:49:47:26:30:fb:71:
5f:44:b7:9d:2c:13:f7:8a:aa:53:a6:6b:46:9c:ea:
f2:14:6c:50:65:e1:29:c9:ad:54:2b:d4:9f:19:03:
be:5f:51:e4:fd:60:24:d5:ad:17:6f:60:2f:90:10:
d2:b1:80:99:50:2b:85:ad:c7:11:d6:35:09:5e:bb:
3f:40:ed:93:94:0a:40:d6:6d:93:a8:b0:33:55:4b:
9b:c8:49:30:d6:cd:3c:86:6e:de:f2:a1:42:aa:7b:
3b:54:f7:0c:0c:76:62:35:d8:9f:be:3c:e2:5a:ee:
0d:a0:06:62:7c:0a:28:4e:f9:38:cd:b6:9f:02:c0:
dc:6b:af:a3:8c:ee:8f:ff:1b:0c:f6:9e:17:30:2c:
c0:f5:49:8c:51:dd:d0:9c:99:8e:62:5d:bc:68:57:
cf:31:f6:7a:1e:7a:95:fa:a7:48:03:da:d6:17:65:
7d:62:05:a7:40:6b:ba:05:e7:e8:a0:aa:56:6b:64:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:78:54:69:D6:6D:D2:27:FB:75:88:B2:15:10:C7:ED:96:E7:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
X509v3 Authority Key Identifier:
keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.116.0/23
172.110.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:72:37:11:43:17:78:d2:94:1e:6f:a8:c6:76:41:02:da:22:
a8:0e:0e:2c:b7:98:8f:ef:c7:4f:ee:cf:0f:4f:05:ca:03:f5:
01:6b:83:b1:92:ef:da:1f:c9:85:f7:2f:f1:dc:6e:8b:f9:63:
4f:aa:1f:83:41:a8:4a:9e:ba:a0:ed:1d:d1:8a:67:f1:b8:93:
c8:86:57:66:13:fa:bf:59:01:23:90:b4:49:5a:85:9c:6a:96:
dd:a5:dd:10:c9:a1:f9:34:7c:18:8c:12:ab:8a:0e:75:5e:a7:
4b:42:29:a0:26:5a:4d:a4:e1:4a:d6:09:d8:2a:8d:34:ed:ac:
ed:ce:8c:bd:f9:a0:32:84:31:56:f3:45:f8:55:21:a6:48:de:
f2:3d:a4:07:e5:35:41:bc:47:5e:21:1e:32:2a:f5:69:c5:c5:
e7:e4:8a:32:76:d8:65:33:1c:0e:ad:fd:dd:29:8a:83:f8:01:
59:3c:dd:20:3d:7f:0c:07:25:79:00:7e:4b:2c:8e:8f:5d:4f:
3e:58:72:96:71:84:c1:dc:a6:2b:fd:d5:9f:d8:a5:c0:b7:ce:
c4:59:68:a2:55:ea:07:61:ac:70:7a:51:21:39:85:2f:2d:a8:
86:0a:6f:ca:b5:b1:85:5c:98:43:ae:8e:1e:dd:88:ea:92:98:
2a:02:9d:10
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEupMl8/aU+GlQa3loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4
MTljMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
NTZhMWU3ZjktMzU4NS00YTUyLTk3ZDUtMjM2YzY3NjA2MDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+smUb1C4q35v7ooJplYL1u6QQl3+d7HL2sL
Olh099j7Vn6e3+uwpiLZr1m4t2P+q+8DqQihyA4Ge8kJxFXrbHkXZ7FJRyYw+3Ff
RLedLBP3iqpTpmtGnOryFGxQZeEpya1UK9SfGQO+X1Hk/WAk1a0Xb2AvkBDSsYCZ
UCuFrccR1jUJXrs/QO2TlApA1m2TqLAzVUubyEkw1s08hm7e8qFCqns7VPcMDHZi
NdifvjziWu4NoAZifAooTvk4zbafAsDca6+jjO6P/xsM9p4XMCzA9UmMUd3QnJmO
Yl28aFfPMfZ6HnqV+qdIA9rWF2V9YgWnQGu6BefooKpWa2TnUwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB8veFRp1m3SJ/t1iLIVEMftlucbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx
ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvYzFiOWJjOWMtNWVlNi0z
MzU3LWI4NmMtNGQ1Y2I5Zjg4YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx
ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh
ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky
NWQ1YTgxOWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBjsp0AwQB
rG6SMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAARyNxFDF3jSlB5vqMZ2QQLaIqgODiy3mI/vx0/uzw9PBcoD
9QFrg7GS79ofyYX3L/Hcbov5Y0+qH4NBqEqeuqDtHdGKZ/G4k8iGV2YT+r9ZASOQ
tElahZxqlt2l3RDJofk0fBiMEquKDnVep0tCKaAmWk2k4UrWCdgqjTTtrO3OjL35
oDKEMVbzRfhVIaZI3vI9pAflNUG8R14hHjIq9WnFxefkijJ22GUzHA6t/d0pioP4
AVk83SA9fwwHJXkAfkssjo9dTz5YcpZxhMHcpiv91Z/YpcC3zsRZaKJV6gdhrHB6
USE5hS8tqIYKb8q1sYVcmEOujh7diOqSmCoCnRA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:10 2025 by rpki-client