
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa
File: bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa (raw, json)
Hash identifier: LiSAptxkZJOkHQ/p8z1vtEhIpiZTT+mVRKJjpr9qEoQ=
Subject key identifier: 7D:D3:50:58:0D:88:7A:FF:3E:65:91:8A:8D:46:A0:DA:F4:61:15:D0
Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial: 010D0C9F4328584BAA979D0EF38D397ED7980A00
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 43181
IP address blocks: 168.245.216.0/21 maxlen: 24
208.56.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:9d:0e:f3:8d:39:7e:d7:98:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=fe7e940a-c74c-4caf-b318-2890dc7f67e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:fc:1f:3a:11:66:7b:ed:13:c3:1d:8b:69:
97:05:b4:c9:67:e8:81:1e:f7:25:da:11:fd:b6:3d:
08:4b:e4:ec:2b:66:1d:81:99:41:68:96:39:60:ff:
18:c0:26:78:17:eb:66:df:f2:22:1b:39:c9:2b:f4:
2e:b6:02:e7:75:d5:f6:3a:db:c6:06:60:07:8d:34:
75:a0:14:ab:64:76:83:a5:3e:24:bf:cc:6e:63:3a:
64:c8:47:c9:c3:05:5a:a0:4c:97:fd:d9:89:a5:a2:
bb:71:e0:8a:50:a8:9c:2a:3f:ae:3b:30:2d:b2:d3:
be:4b:2b:c9:ab:d9:27:5a:05:dc:bb:94:be:c6:d9:
bf:c9:ac:44:2a:b0:cf:e8:cc:ed:53:a4:bd:f0:93:
39:d7:cd:7f:e1:e2:9b:87:9f:fa:75:37:d1:b5:c4:
87:08:68:0b:ef:f1:fb:e6:c3:56:68:e2:72:82:e6:
b1:6e:2f:69:16:7b:c9:90:2b:85:e6:de:c5:93:9c:
a3:52:8f:39:6f:68:50:c3:33:7e:b4:ed:69:42:47:
6e:d6:93:14:d7:cc:3d:76:29:c2:fd:0a:2a:f7:59:
65:69:b8:75:03:b4:9d:41:88:af:35:0d:92:5c:f1:
e2:5d:31:d8:bd:13:c7:da:fd:71:7e:49:b6:ac:fd:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:50:58:0D:88:7A:FF:3E:65:91:8A:8D:46:A0:DA:F4:61:15:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bce8f7fa-78bc-36f8-afbf-07c9cbb7fbde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
X509v3 Authority Key Identifier:
keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
sbgp-ipAddrBlock: critical
IPv4:
168.245.216.0/21
208.56.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:0c:6c:82:7d:22:78:40:9f:b4:fd:22:ef:55:82:30:3e:02:
21:68:be:9c:1f:29:1b:e3:69:5b:54:b3:07:bd:89:e7:09:73:
c7:67:e5:28:a9:0c:ab:0f:f3:a5:8e:92:5f:2b:26:56:51:35:
b5:32:07:9d:5c:9c:38:ee:38:e6:46:f2:7a:d9:70:a0:73:74:
e3:f8:41:01:1a:ab:57:c4:dc:b5:b6:34:f8:f5:81:44:17:06:
57:83:69:ab:51:c7:54:86:3c:ca:f4:65:1f:17:64:fb:be:f0:
f1:fd:d0:78:cb:5f:f0:33:f6:06:a7:d2:3c:b0:08:ff:24:d4:
94:63:b4:a2:fd:8f:5f:e8:4c:37:f4:84:aa:fa:30:13:bc:71:
fb:fd:7e:22:43:05:9f:3c:a0:09:b6:af:33:54:8f:f2:fe:5a:
fd:74:33:e2:e6:55:48:24:66:0d:c2:c2:c5:8f:2b:15:a3:3f:
06:0f:a0:9b:b9:36:2b:d9:98:dc:90:c1:7b:7c:e7:17:2e:54:
82:d8:63:47:94:d6:27:ea:38:80:f8:56:9e:78:c6:00:1d:7e:
5e:85:0e:a5:81:3f:21:1c:a8:78:03:01:34:d4:de:f2:39:71:
e0:8c:eb:12:7b:1b:23:76:17:87:6a:07:db:05:0c:27:1b:a9:
47:f2:60:c8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuql50O8405fteYCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy
OTQ1MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZmU3ZTk0MGEtYzc0Yy00Y2FmLWIzMTgtMjg5MGRjN2Y2N2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrf8HzoRZnvtE8Mdi2mXBbTJZ+iBHvcl2hH9
tj0IS+TsK2YdgZlBaJY5YP8YwCZ4F+tm3/IiGznJK/QutgLnddX2OtvGBmAHjTR1
oBSrZHaDpT4kv8xuYzpkyEfJwwVaoEyX/dmJpaK7ceCKUKicKj+uOzAtstO+SyvJ
q9knWgXcu5S+xtm/yaxEKrDP6MztU6S98JM5181/4eKbh5/6dTfRtcSHCGgL7/H7
5sNWaOJyguaxbi9pFnvJkCuF5t7Fk5yjUo85b2hQwzN+tO1pQkdu1pMU18w9dinC
/Qoq91llabh1A7SdQYivNQ2SXPHiXTHYvRPH2v1xfkm2rP3rDQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFH3TUFgNiHr/PmWRio1GoNr0YRXQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi
ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvYmNlOGY3ZmEtNzhiYy0z
NmY4LWFmYmYtMDdjOWNiYjdmYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy
MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1
Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2
YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG
0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF0MbIJ9InhAn7T9Iu9VgjA+AiFovpwfKRvjaVtUswe9iecJ
c8dn5SipDKsP86WOkl8rJlZRNbUyB51cnDjuOOZG8nrZcKBzdOP4QQEaq1fE3LW2
NPj1gUQXBleDaatRx1SGPMr0ZR8XZPu+8PH90HjLX/Az9gan0jywCP8k1JRjtKL9
j1/oTDf0hKr6MBO8cfv9fiJDBZ88oAm2rzNUj/L+Wv10M+LmVUgkZg3CwsWPKxWj
PwYPoJu5NivZmNyQwXt85xcuVILYY0eU1ifqOID4Vp54xgAdfl6FDqWBPyEcqHgD
ATTU3vI5ceCM6xJ7GyN2F4dqB9sFDCcbqUfyYMg=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:38:11 2025 by rpki-client