
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/51ee5b25-41ed-33ca-b718-d952aeb03b8c.roa
File: 51ee5b25-41ed-33ca-b718-d952aeb03b8c.roa (raw, json)
Hash identifier: 0kHs5CeatfHQgVTEIGprjXOiwLarrHDr4aqOxIM8Nt4=
Subject key identifier: A2:7B:4C:22:99:EB:66:69:E6:E1:E3:EC:F9:27:CE:B5:E3:F9:E8:9C
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584BABFD0531F4E1299391101F40
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/51ee5b25-41ed-33ca-b718-d952aeb03b8c.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 20454
IP address blocks: 66.85.182.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:05:31:f4:e1:29:93:91:10:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=12931e26-96e3-46b9-9109-496fc1848e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:10:8c:5b:0b:1b:96:bb:1a:a2:2d:b0:52:
dc:98:24:9b:1c:b4:ef:4c:73:0a:02:c5:86:c6:b4:
fa:d1:64:f9:47:1e:7c:1a:a0:95:25:b0:b1:d8:28:
d0:f4:8b:db:14:49:e1:8b:f9:18:51:0b:58:fb:9b:
4e:93:bc:4e:4e:83:01:57:4d:0a:a4:df:2e:42:ec:
f0:ab:e8:d4:28:20:0d:83:ae:aa:81:57:94:53:3c:
d7:80:96:81:93:f0:92:99:53:bc:9c:99:ab:3f:5a:
08:dd:5b:e6:98:ce:0f:5a:85:b0:fd:23:48:ef:53:
56:24:12:41:f0:fe:84:24:3c:ad:56:18:34:ff:ab:
17:88:30:b8:82:a2:be:e2:f5:1f:12:c9:10:de:24:
df:37:98:7f:13:df:a4:07:8b:62:4c:94:ac:47:4b:
6d:b6:c5:62:4a:cc:6d:b2:5d:68:cc:a9:8f:1d:47:
e6:4e:d2:03:ff:4b:f5:00:e6:8f:73:dc:37:0c:6f:
c0:e5:63:11:df:9b:cc:06:0a:b2:09:4b:5f:75:ba:
f3:a0:9e:64:d9:db:40:ab:7b:6c:60:cc:f1:36:aa:
09:4b:fa:64:8a:e2:46:14:a0:13:6a:6b:0b:c4:c8:
40:96:12:cb:fd:71:95:3d:60:0d:8a:d1:00:58:7f:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7B:4C:22:99:EB:66:69:E6:E1:E3:EC:F9:27:CE:B5:E3:F9:E8:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/51ee5b25-41ed-33ca-b718-d952aeb03b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:0d:63:b3:f5:0b:bd:94:b1:42:e5:91:55:8b:75:1d:32:e4:
e4:81:82:22:8f:2e:7e:e7:86:2d:04:07:77:f2:86:36:1f:00:
40:8a:55:c9:23:0a:1a:0d:6b:fd:e4:b9:21:a6:1b:3b:49:ec:
73:18:8f:58:aa:0d:73:dc:9e:da:9f:9b:b8:62:28:c2:41:9a:
57:6f:ed:40:60:d1:62:ba:71:bd:35:69:b0:d5:ac:9c:b0:90:
8e:de:56:d0:2b:51:ce:1c:88:de:62:bb:53:44:a0:76:d2:63:
9f:00:08:81:84:0c:1b:e6:48:ef:e5:a9:18:84:5a:e7:a4:b8:
70:e5:07:3f:9c:b3:2e:6b:36:d3:43:28:61:a9:94:de:bf:82:
61:12:f6:2d:8a:a9:24:ea:86:71:f3:8d:f3:82:22:07:ac:cd:
2b:9f:8b:ab:51:ab:f3:84:2a:61:76:e2:8c:2b:5b:70:de:32:
57:4d:b3:92:80:39:0b:76:a7:83:d7:c7:e6:fa:e0:6f:ce:77:
cd:af:03:af:1e:32:ba:b6:5a:dc:c2:e8:88:0b:38:04:a4:f0:
4e:00:2a:9b:f8:4a:c8:29:c3:c7:81:9c:9a:15:35:28:ed:6e:
16:5e:9f:89:48:29:f0:63:d7:be:43:4e:00:26:a7:d8:58:18:
12:0b:14:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QUx9OEpk5EQH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
MTI5MzFlMjYtOTZlMy00NmI5LTkxMDktNDk2ZmMxODQ4ZTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbwQjFsLG5a7GqItsFLcmCSbHLTvTHMKAsWG
xrT60WT5Rx58GqCVJbCx2CjQ9IvbFEnhi/kYUQtY+5tOk7xOToMBV00KpN8uQuzw
q+jUKCANg66qgVeUUzzXgJaBk/CSmVO8nJmrP1oI3VvmmM4PWoWw/SNI71NWJBJB
8P6EJDytVhg0/6sXiDC4gqK+4vUfEskQ3iTfN5h/E9+kB4tiTJSsR0tttsViSsxt
sl1ozKmPHUfmTtID/0v1AOaPc9w3DG/A5WMR35vMBgqyCUtfdbrzoJ5k2dtAq3ts
YMzxNqoJS/pkiuJGFKATamsLxMhAlhLL/XGVPWANitEAWH/MtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJ7TCKZ62Zp5uHj7PknzrXj+eicMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTFlZTViMjUtNDFlZC0z
M2NhLWI3MTgtZDk1MmFlYjAzYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlW2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4NY7P1C72UsULlkVWLdR0y5OSBgiKPLn7nhi0EB3fyhjYfAECKVckj
ChoNa/3kuSGmGztJ7HMYj1iqDXPcntqfm7hiKMJBmldv7UBg0WK6cb01abDVrJyw
kI7eVtArUc4ciN5iu1NEoHbSY58ACIGEDBvmSO/lqRiEWuekuHDlBz+csy5rNtND
KGGplN6/gmES9i2KqSTqhnHzjfOCIgeszSufi6tRq/OEKmF24owrW3DeMldNs5KA
OQt2p4PXx+b64G/Od82vA68eMrq2WtzC6IgLOASk8E4AKpv4Ssgpw8eBnJoVNSjt
bhZen4lIKfBj175DTgAmp9hYGBILFAk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:10:53 2025 by rpki-client