
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa
File: 0ed965f1-d881-3302-a57e-78c8e4449123.roa (raw, json)
Hash identifier: ygyLfKMcUacH0ejflbOqEzi6ZR8nKPlzT4p3oyfFp/w=
Subject key identifier: 33:E8:19:F2:21:BC:8C:58:86:A9:11:95:4B:97:99:5C:10:CE:63:29
Certificate issuer: /CN=13f57bc2-46f7-4081-86db-6187bbb84dae
Certificate serial: 010D0C9F4328584B92DCF173816BA93FCF5D5F00
Authority key identifier: 96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa
Signing time: Sun 19 Oct 2025 13:00:39 +0000
ROA not before: Sun 19 Oct 2025 13:00:39 +0000
ROA not after: Sat 17 Jan 2026 14:00:39 +0000
asID: 54046
IP address blocks: 23.187.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:92:dc:f1:73:81:6b:a9:3f:cf:5d:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f57bc2-46f7-4081-86db-6187bbb84dae
Validity
Not Before: Oct 19 13:00:39 2025 GMT
Not After : Jan 17 14:00:39 2026 GMT
Subject: CN=6cb28899-c98e-4bbf-8010-998085aef08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:50:58:0f:68:d7:64:b3:16:53:c9:f9:fe:
af:ce:38:c0:3b:68:43:84:8a:b7:e2:c2:42:05:b8:
c3:22:68:85:bf:97:cb:1f:2a:a4:0e:3d:5e:c9:85:
62:20:35:1f:8e:a5:26:eb:66:07:b1:19:a6:08:2e:
34:bf:54:c3:36:3e:8d:a5:34:4f:f6:d2:ee:c8:fd:
ff:3a:b5:be:f0:86:64:51:c9:c1:ad:32:86:8c:52:
87:c2:42:03:ae:1a:bf:bd:21:d6:1c:6c:4d:e6:12:
04:39:69:74:92:81:7d:54:84:2e:a8:f0:24:d4:07:
6a:fa:03:e1:40:94:43:d6:3e:3f:54:70:37:31:a9:
f0:06:d7:09:1d:45:e5:a9:f3:ec:14:88:d4:f6:00:
ae:67:03:37:e7:7c:7a:1b:36:2b:7b:83:c4:d0:7b:
89:43:0f:9d:22:0f:da:33:08:c0:be:2f:89:e5:3f:
53:04:26:fc:ed:a0:9a:f2:27:a8:06:d7:b6:41:8a:
92:31:71:9c:fe:6c:8d:de:3d:c4:93:25:f8:0d:4e:
c0:77:92:f3:b8:22:3d:82:ca:6d:8d:ed:e9:d0:f1:
d3:dd:75:13:7f:7f:38:fa:b5:03:4c:39:93:da:38:
3d:45:4a:9b:aa:75:17:73:2a:34:f8:29:79:65:60:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:19:F2:21:BC:8C:58:86:A9:11:95:4B:97:99:5C:10:CE:63:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl
X509v3 Authority Key Identifier:
keyid:96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:16:13:25:52:6e:b6:d7:1f:21:1a:7c:61:a5:36:9a:fc:27:
15:c3:e1:6e:d3:f6:c5:fe:67:4f:d4:9c:c5:50:5c:34:24:7a:
55:af:d3:ea:a7:1c:44:a6:2e:a8:2b:df:b6:16:a9:fb:47:3d:
74:23:ae:17:8b:64:63:4c:a1:b2:d0:e1:a2:86:ef:fc:a8:ad:
68:be:c3:9f:a2:16:81:7b:47:c3:9c:0c:41:b8:c6:da:ab:94:
2c:c7:33:3a:fb:69:56:48:1b:a6:4e:27:79:06:54:ec:cd:58:
ce:e4:5a:d9:6b:40:80:ba:d0:d2:5c:8d:6c:c3:67:52:41:de:
23:70:90:71:39:8b:4f:e8:d3:8f:45:58:7a:07:db:36:14:9f:
b2:c5:98:be:b5:3c:ac:4d:80:a1:10:32:d0:29:9f:7d:1b:a0:
cf:4e:f0:76:8b:a1:1f:7f:43:00:6c:9a:af:d9:3e:7d:92:93:
3e:2f:e6:07:0f:74:f9:8f:d4:af:9c:fb:59:9f:44:19:d4:bd:
45:c5:46:e8:31:22:72:84:27:3e:bc:34:b9:49:1a:56:47:99:
d7:5b:29:76:db:ad:dc:17:d6:2e:c0:8f:cf:4f:ea:67:dc:79:
b9:05:0f:e3:62:07:62:0a:6b:16:28:54:0b:d6:c6:c9:c6:c8:
57:ed:54:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PFzgWupP89dXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNmNTdiYzItNDZmNy00MDgxLTg2ZGItNjE4N2JiYjg0
ZGFlMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
NmNiMjg4OTktYzk4ZS00YmJmLTgwMTAtOTk4MDg1YWVmMDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVRQWA9o12SzFlPJ+f6vzjjAO2hDhIq34sJC
BbjDImiFv5fLHyqkDj1eyYViIDUfjqUm62YHsRmmCC40v1TDNj6NpTRP9tLuyP3/
OrW+8IZkUcnBrTKGjFKHwkIDrhq/vSHWHGxN5hIEOWl0koF9VIQuqPAk1Adq+gPh
QJRD1j4/VHA3ManwBtcJHUXlqfPsFIjU9gCuZwM353x6GzYre4PE0HuJQw+dIg/a
MwjAvi+J5T9TBCb87aCa8ieoBte2QYqSMXGc/myN3j3EkyX4DU7Ad5LzuCI9gspt
je3p0PHT3XUTf384+rUDTDmT2jg9RUqbqnUXcyo0+Cl5ZWCwBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPoGfIhvIxYhqkRlUuXmVwQzmMpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xM2Y1
N2JjMi00NmY3LTQwODEtODZkYi02MTg3YmJiODRkYWUvMGVkOTY1ZjEtZDg4MS0z
MzAyLWE1N2UtNzhjOGU0NDQ5MTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTNmNTdiYzItNDZmNy00MDgxLTg2
ZGItNjE4N2JiYjg0ZGFlLzEzZjU3YmMyLTQ2ZjctNDA4MS04NmRiLTYxODdiYmI4
NGRhZS5jcmwwHwYDVR0jBBgwFoAUltgxhEEboMMRc50rggxPg4UN3GgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xM2Y1N2JjMi00NmY3LTQwODEtODZkYi02MTg3
YmJiODRkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7vRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAWEyVSbrbXHyEafGGlNpr8JxXD4W7T9sX+Z0/UnMVQXDQkelWv0+qn
HESmLqgr37YWqftHPXQjrheLZGNMobLQ4aKG7/yorWi+w5+iFoF7R8OcDEG4xtqr
lCzHMzr7aVZIG6ZOJ3kGVOzNWM7kWtlrQIC60NJcjWzDZ1JB3iNwkHE5i0/o049F
WHoH2zYUn7LFmL61PKxNgKEQMtApn30boM9O8HaLoR9/QwBsmq/ZPn2Skz4v5gcP
dPmP1K+c+1mfRBnUvUXFRugxInKEJz68NLlJGlZHmddbKXbbrdwX1i7Aj89P6mfc
ebkFD+NiB2IKaxYoVAvWxsnGyFftVFo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:06:46 2025 by rpki-client