
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa
File: b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa (raw, json)
Hash identifier: 4c2/0oBQ2BwrsK4qLCJej7p4czur7kMLEHRBIzRcNs8=
Subject key identifier: 19:81:23:2E:18:4C:E8:6F:EF:A8:16:FB:BD:65:98:AB:1F:DB:38:7D
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584B382193E3F3D4320069FB9310
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa
Signing time: Wed 17 Sep 2025 01:00:33 +0000
ROA not before: Wed 17 Sep 2025 01:00:33 +0000
ROA not after: Tue 16 Dec 2025 02:00:33 +0000
asID: 203724
IP address blocks: 161.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:38:21:93:e3:f3:d4:32:00:69:fb:93:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Sep 17 01:00:33 2025 GMT
Not After : Dec 16 02:00:33 2025 GMT
Subject: CN=8de83e16-716f-4bb4-a899-89983616e5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:c5:08:88:9f:54:2b:bb:44:af:d4:02:b6:
8b:71:4b:96:c9:6b:3c:25:73:9b:cf:ef:53:16:f5:
bb:dd:5c:60:67:11:14:72:3c:3d:5f:89:f8:63:f3:
95:b9:63:70:d0:8d:6b:86:27:34:2a:f2:17:46:a0:
75:de:9f:b1:f1:38:cb:29:26:d8:67:bc:61:b7:6d:
95:36:a3:c2:6f:60:66:cf:70:d8:ca:01:15:8e:f4:
f0:ef:69:c2:e7:18:ea:95:bb:2e:9b:23:e5:11:fe:
29:3b:3d:1b:a6:6d:4d:a9:92:d0:f6:e2:e0:cb:94:
5e:53:7a:5f:1a:50:71:09:92:33:45:09:63:f4:18:
e4:b0:81:04:a3:cf:84:81:4d:49:bb:0f:74:b4:73:
52:0a:78:13:50:88:66:c6:6f:93:94:9d:34:e9:d2:
70:db:f7:92:20:16:92:3e:5c:01:8d:cf:30:0b:67:
99:5c:82:4d:7c:85:29:d5:ed:24:2d:03:61:c9:c8:
03:8e:50:98:08:f6:72:d5:dc:27:82:18:2a:d5:fa:
fb:c5:0f:72:4d:f0:3e:66:d1:ee:70:b3:18:9b:28:
84:a9:ea:85:42:02:e8:50:c0:c4:5a:b5:4b:8f:bd:
a3:2e:16:00:53:02:03:a0:df:3d:b7:24:dd:8c:a9:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:23:2E:18:4C:E8:6F:EF:A8:16:FB:BD:65:98:AB:1F:DB:38:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e9:c3:19:04:89:98:0f:61:47:a9:f5:36:95:b1:f3:28:2c:
6e:49:af:71:31:98:4c:ff:22:64:2e:db:44:a3:c6:13:fd:14:
fe:54:36:e6:c1:f8:3e:64:6c:29:d1:13:61:6c:60:9f:26:61:
26:30:91:a0:72:b0:5a:7f:a9:d6:14:aa:1d:5b:ed:7e:d5:c9:
f3:bb:6b:56:dc:60:d5:cb:61:99:09:14:12:72:6c:38:9b:2d:
2f:a5:40:ca:2a:6d:a3:f5:1f:df:85:51:74:c7:35:8f:00:ee:
69:36:68:20:01:73:e7:1e:47:ba:a2:32:0f:3f:ba:a2:fb:23:
28:75:e0:0f:da:ba:b5:73:f3:9f:eb:96:f4:f5:2b:ec:9c:b8:
fd:9f:92:67:c1:89:f2:31:d8:29:8c:13:17:bd:3f:4a:50:b8:
6c:25:af:cd:bf:99:12:86:c5:ff:e5:65:2f:c2:0e:df:04:a2:
e5:10:1b:a9:6a:52:58:93:af:29:8d:e6:8c:d4:9d:85:bd:03:
4a:82:f7:d5:5a:a7:37:9e:8c:5c:f2:d3:fd:be:bb:72:5e:70:
c2:fa:3b:05:71:d2:c8:e0:65:11:51:b5:d9:dd:f9:6d:0e:67:
65:de:9f:3c:09:3a:24:2c:14:b8:91:73:b6:35:a6:4a:46:d6:
5b:3b:7e:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZPj89QyAGn7kxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
OGRlODNlMTYtNzE2Zi00YmI0LWE4OTktODk5ODM2MTZlNWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyvFCIifVCu7RK/UAraLcUuWyWs8JXObz+9T
FvW73VxgZxEUcjw9X4n4Y/OVuWNw0I1rhic0KvIXRqB13p+x8TjLKSbYZ7xht22V
NqPCb2Bmz3DYygEVjvTw72nC5xjqlbsumyPlEf4pOz0bpm1NqZLQ9uLgy5ReU3pf
GlBxCZIzRQlj9BjksIEEo8+EgU1Juw90tHNSCngTUIhmxm+TlJ006dJw2/eSIBaS
PlwBjc8wC2eZXIJNfIUp1e0kLQNhycgDjlCYCPZy1dwnghgq1fr7xQ9yTfA+ZtHu
cLMYmyiEqeqFQgLoUMDEWrVLj72jLhYAUwIDoN89tyTdjKlTnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmBIy4YTOhv76gW+71lmKsf2zh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjkwYzc0ZTUtZTNjNS0z
Yjk4LTlhYzAtZDQyNmEyM2VlYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnpwxkEiZgPYUep9TaVsfMoLG5Jr3ExmEz/ImQu20SjxhP9FP5UNubB
+D5kbCnRE2FsYJ8mYSYwkaBysFp/qdYUqh1b7X7VyfO7a1bcYNXLYZkJFBJybDib
LS+lQMoqbaP1H9+FUXTHNY8A7mk2aCABc+ceR7qiMg8/uqL7Iyh14A/aurVz85/r
lvT1K+ycuP2fkmfBifIx2CmMExe9P0pQuGwlr82/mRKGxf/lZS/CDt8EouUQG6lq
UliTrymN5ozUnYW9A0qC99VapzeejFzy0/2+u3JecML6OwVx0sjgZRFRtdnd+W0O
Z2XenzwJOiQsFLiRc7Y1pkpG1ls7fpo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:56:53 2025 by rpki-client