
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa
File: 15122190-e0af-3278-8750-551255abdfdb.roa (raw, json)
Hash identifier: LGBBZBmcIuuU2xaU7q0gT6UCtSophsJQWKDtFfJcUv4=
Subject key identifier: BD:B3:73:D8:A1:76:41:9A:8F:4F:6A:E2:79:78:AA:70:5D:3E:82:89
Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial: 010D0C9F4328584B95A78C66F0DB6944E8E46680
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 25649
IP address blocks: 142.147.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:8c:66:f0:db:69:44:e8:e4:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=6a0462a0-7464-407d-94e1-10e57261a5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:d8:9d:bc:b6:fe:5c:6f:db:04:f1:c0:65:
ea:11:a1:58:a6:4c:fb:91:db:39:e3:ef:fb:08:b0:
25:04:64:67:e7:15:e8:e0:1c:bb:8d:27:88:90:94:
4b:33:f3:d9:e3:c0:58:8b:a3:76:b7:a4:54:79:81:
ca:7a:56:32:f9:f8:98:1f:e7:64:b1:fc:1a:a5:55:
94:06:a3:f3:2e:c5:7a:e0:48:58:f9:58:3c:ca:06:
61:7a:15:f9:19:84:31:8d:ed:ad:9f:74:9d:2c:e3:
51:4d:23:aa:af:71:7b:8f:d5:19:44:da:17:eb:8e:
e3:07:f9:99:fe:4b:54:26:3f:d4:6c:54:fd:0a:87:
2a:86:9e:a9:06:f2:3f:10:2a:5b:09:0f:d7:47:32:
3c:6e:8e:06:96:dc:4e:01:30:86:73:53:72:16:e1:
5d:af:e6:f3:c2:94:29:93:54:67:12:af:09:40:d5:
f8:93:00:e6:a1:e9:be:2d:4b:5c:62:43:4a:55:4e:
03:16:89:e6:ae:f0:99:9f:41:41:ac:67:26:1e:9d:
03:cc:e2:18:80:57:10:35:3d:ec:b5:6f:c7:c4:43:
3f:54:54:62:69:21:9f:18:59:bd:df:24:d3:f0:8a:
76:e4:2a:87:4a:3e:92:8a:13:7f:60:c7:6a:a6:58:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:73:D8:A1:76:41:9A:8F:4F:6A:E2:79:78:AA:70:5D:3E:82:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
X509v3 Authority Key Identifier:
keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:8b:af:05:74:c0:41:7f:fe:54:bf:fe:f9:06:f1:bd:b8:a3:
d1:e9:02:4a:c7:58:d2:a8:ab:fe:84:fd:e5:3b:76:85:67:7e:
56:3b:3f:e4:cd:47:55:af:da:7f:ac:4b:5b:95:61:04:fd:fd:
5e:9b:7c:db:bb:95:b6:3d:c2:27:ff:ac:97:02:5e:55:93:4c:
5e:1b:5e:96:8f:6d:77:3b:45:17:30:1a:43:90:04:b5:ff:fc:
b8:a7:b0:73:6f:7c:4e:b2:fe:b2:cf:c3:2a:97:8b:ca:ab:aa:
b3:f7:18:d3:da:95:9e:e6:2b:57:f5:a2:a5:01:99:9a:d4:f5:
62:65:bd:7e:1c:2c:7f:0e:54:1f:e7:28:69:7c:16:04:fe:7b:
91:fa:10:91:83:4b:a6:90:01:49:bc:b7:02:65:39:4a:39:ff:
97:ab:b0:d2:e9:0d:54:e5:15:4d:dc:b8:17:0b:f8:15:24:b0:
dc:c6:9f:60:f5:86:4d:3d:06:2d:9c:18:26:78:92:97:46:09:
d9:9c:45:05:52:9b:de:e6:3a:0c:bb:5a:c3:38:19:55:3c:f8:
51:aa:38:52:78:b7:fc:b3:9d:24:14:87:95:3b:71:78:ad:a7:
ae:ad:b9:ed:34:80:c5:fe:19:99:bb:21:f6:01:98:be:6a:49:
9b:8d:c9:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4xm8NtpROjkZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NmEwNDYyYTAtNzQ2NC00MDdkLTk0ZTEtMTBlNTcyNjFhNWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRbYnby2/lxv2wTxwGXqEaFYpkz7kds54+/7
CLAlBGRn5xXo4By7jSeIkJRLM/PZ48BYi6N2t6RUeYHKelYy+fiYH+dksfwapVWU
BqPzLsV64EhY+Vg8ygZhehX5GYQxje2tn3SdLONRTSOqr3F7j9UZRNoX647jB/mZ
/ktUJj/UbFT9Cocqhp6pBvI/ECpbCQ/XRzI8bo4GltxOATCGc1NyFuFdr+bzwpQp
k1RnEq8JQNX4kwDmoem+LUtcYkNKVU4DFonmrvCZn0FBrGcmHp0DzOIYgFcQNT3s
tW/HxEM/VFRiaSGfGFm93yTT8Ip25CqHSj6SihN/YMdqpliH/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2zc9ihdkGaj09q4nl4qnBdPoKJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvMTUxMjIxOTAtZTBhZi0z
Mjc4LTg3NTAtNTUxMjU1YWJkZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjpNUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCLrwV0wEF//lS//vkG8b24o9HpAkrHWNKoq/6E/eU7doVnflY7P+TN
R1Wv2n+sS1uVYQT9/V6bfNu7lbY9wif/rJcCXlWTTF4bXpaPbXc7RRcwGkOQBLX/
/LinsHNvfE6y/rLPwyqXi8qrqrP3GNPalZ7mK1f1oqUBmZrU9WJlvX4cLH8OVB/n
KGl8FgT+e5H6EJGDS6aQAUm8twJlOUo5/5ersNLpDVTlFU3cuBcL+BUksNzGn2D1
hk09Bi2cGCZ4kpdGCdmcRQVSm97mOgy7WsM4GVU8+FGqOFJ4t/yznSQUh5U7cXit
p66tue00gMX+GZm7IfYBmL5qSZuNyc4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:31:21 2025 by rpki-client