
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
File: 06356a9a-a928-3159-af92-998e04f7da3a.roa (raw, json)
Hash identifier: 4/Azu4E0y402ds1QUr/cn6pAhr1QGsGbGB0h/MdMHg4=
Subject key identifier: 15:4C:83:0E:16:A9:0D:14:B2:CC:F1:B3:1D:EA:4C:9E:E4:73:D2:74
Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial: 010D0C9F4328584B38219EDFDCD2F4B9F9AF3A80
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
Signing time: Wed 17 Sep 2025 01:00:33 +0000
ROA not before: Wed 17 Sep 2025 01:00:33 +0000
ROA not after: Tue 16 Dec 2025 02:00:33 +0000
asID: 19651
IP address blocks: 23.168.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:38:21:9e:df:dc:d2:f4:b9:f9:af:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
Validity
Not Before: Sep 17 01:00:33 2025 GMT
Not After : Dec 16 02:00:33 2025 GMT
Subject: CN=e31f9636-934a-48f3-816d-2749a2b450b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:17:af:58:b8:fc:3f:8e:db:45:2c:76:9f:
62:e9:7d:d0:c7:da:fc:27:fe:c0:39:a5:14:d7:95:
ea:96:8f:63:b4:c3:53:ac:ce:33:e8:2d:e5:af:16:
d2:14:f1:32:b3:ef:a7:48:09:f3:39:47:a7:3d:0b:
e2:46:c9:41:23:d6:f2:4d:7c:1d:52:29:47:ac:d2:
f5:07:33:c0:a3:56:6a:ad:9e:a6:8d:c0:fa:86:e4:
bd:33:d8:12:c6:6f:8a:e2:47:ca:ea:62:dc:d9:6b:
c8:72:a8:bd:20:66:0d:f9:5c:ce:a9:7b:7a:38:6f:
39:e7:9d:6c:23:62:ee:64:a8:65:d4:94:95:7c:55:
e2:07:9a:ee:3b:ed:36:43:76:3f:f1:41:14:e1:39:
24:df:da:4b:96:bb:5d:86:87:82:de:8c:9c:ad:b9:
44:ba:e5:40:cb:44:fe:1c:ec:6b:d3:f2:09:2e:53:
bd:21:eb:db:68:0f:bb:a1:bb:6b:05:21:f7:4f:1c:
41:7e:a5:9a:0b:f1:66:fd:a6:44:28:27:24:34:bd:
33:54:24:3e:48:49:85:e5:72:7d:67:90:da:3d:ba:
f8:ae:44:d0:e5:5a:ac:06:b0:9a:72:14:5a:a4:12:
34:4a:b4:04:56:4f:b2:f7:1f:6f:cc:8a:36:4a:52:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4C:83:0E:16:A9:0D:14:B2:CC:F1:B3:1D:EA:4C:9E:E4:73:D2:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
X509v3 Authority Key Identifier:
keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:52:8a:4f:32:36:f9:6f:f7:2b:77:8c:9d:fd:a5:cf:09:e5:
d4:d5:a3:11:89:6a:f5:83:58:78:37:85:be:66:9a:53:28:f9:
6c:1e:04:11:82:f3:8d:4c:d7:e6:d9:ae:f2:15:00:50:5d:17:
b8:7a:c1:e3:06:1b:62:e6:a3:7a:0e:79:30:b2:7b:7e:64:00:
23:aa:a5:23:55:26:93:c4:27:04:19:30:13:26:84:eb:b0:5b:
d7:4b:d9:49:42:a6:9e:3e:85:53:6d:41:ad:a6:19:96:f4:34:
9f:16:86:16:ed:0b:a8:93:d6:c5:e9:10:1d:af:cd:06:91:20:
3c:74:fa:0d:b7:1c:eb:1f:d3:de:48:dc:c4:17:59:ab:b4:07:
9a:82:33:26:e4:c5:a9:bc:b7:ab:24:90:11:35:ec:c0:56:50:
a4:e2:a3:12:ed:ca:b9:eb:72:be:31:23:1e:77:11:2e:c4:d8:
cf:43:54:2f:a4:cf:a9:11:17:72:4b:25:0f:b0:eb:6f:46:58:
ab:a8:a5:14:a0:9c:dc:a4:10:e9:13:f8:4b:bb:6c:89:c4:45:
20:3c:ba:22:a8:1a:50:88:3a:4c:cb:b7:fb:7f:c9:b2:fa:7c:
62:6c:ae:8f:51:9e:22:e0:34:82:3a:dd:4f:9a:74:11:a5:a7:
2a:4b:c4:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZ7f3NL0ufmvOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw
NDdkMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTMxZjk2MzYtOTM0YS00OGYzLTgxNmQtMjc0OWEyYjQ1MGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6wXr1i4/D+O20Usdp9i6X3Qx9r8J/7AOaUU
15Xqlo9jtMNTrM4z6C3lrxbSFPEys++nSAnzOUenPQviRslBI9byTXwdUilHrNL1
BzPAo1ZqrZ6mjcD6huS9M9gSxm+K4kfK6mLc2WvIcqi9IGYN+VzOqXt6OG85551s
I2LuZKhl1JSVfFXiB5ruO+02Q3Y/8UEU4Tkk39pLlrtdhoeC3oycrblEuuVAy0T+
HOxr0/IJLlO9IevbaA+7obtrBSH3TxxBfqWaC/Fm/aZEKCckNL0zVCQ+SEmF5XJ9
Z5DaPbr4rkTQ5VqsBrCachRapBI0SrQEVk+y9x9vzIo2SlKXPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVMgw4WqQ0Usszxsx3qTJ7kc9J0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1
NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvMDYzNTZhOWEtYTkyOC0z
MTU5LWFmOTItOTk4ZTA0ZjdkYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0
MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi
MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli
OGI0YjA0N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6gIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlSik8yNvlv9yt3jJ39pc8J5dTVoxGJavWDWHg3hb5mmlMo+WweBBGC
841M1+bZrvIVAFBdF7h6weMGG2Lmo3oOeTCye35kACOqpSNVJpPEJwQZMBMmhOuw
W9dL2UlCpp4+hVNtQa2mGZb0NJ8WhhbtC6iT1sXpEB2vzQaRIDx0+g23HOsf095I
3MQXWau0B5qCMybkxam8t6skkBE17MBWUKTioxLtyrnrcr4xIx53ES7E2M9DVC+k
z6kRF3JLJQ+w629GWKuopRSgnNykEOkT+Eu7bInERSA8uiKoGlCIOkzLt/t/ybL6
fGJsro9RniLgNII63U+adBGlpypLxB0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:42:26 2025 by rpki-client