
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa
File: e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa (raw, json)
Hash identifier: FwAkriZq38B+cJld0bfU1bji0/ojznL0Toxkr28RwFY=
Subject key identifier: 5F:16:B4:2A:76:EB:A8:84:6D:CD:93:A5:A6:7C:5B:CE:B7:38:5F:B5
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F4328584BBFA5A46797402F5CD5B19B40
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 376
IP address blocks: 206.167.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:a4:67:97:40:2f:5c:d5:b1:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=626ed5df-338b-4c8e-b668-c2de7d49f72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:01:b6:b3:66:c2:d3:a7:3c:b7:df:ca:c6:
f6:76:3e:33:55:1c:38:7d:18:57:a3:f7:a7:62:1e:
34:12:2a:af:d5:6c:6f:f2:69:04:5f:c9:7b:3d:8d:
87:d2:7f:a7:5f:8c:ab:ca:69:8f:13:5c:91:ae:80:
f4:56:dd:80:b1:1e:82:9c:cd:b6:7f:02:9d:8a:0a:
99:01:f1:70:f6:4b:83:60:ed:63:c0:98:4f:73:3a:
da:fd:08:fe:63:40:66:25:71:a9:cb:98:e8:ed:77:
fc:d7:19:99:06:b2:2e:85:ac:58:1e:ea:82:4c:01:
d1:66:0a:69:b6:dd:47:18:87:01:4d:26:72:a8:dd:
dc:cf:26:b0:38:25:1c:1e:46:4a:b2:b6:5b:ce:c4:
4a:d1:ad:63:34:a0:42:60:24:83:b8:d7:2f:e6:f4:
1a:bf:32:f1:e0:56:dc:f4:bc:90:9b:6b:7b:4c:24:
76:4d:2a:85:e2:83:d4:9c:5d:85:f7:0d:22:53:ad:
d8:60:0b:51:33:00:c9:dc:b2:79:78:95:3f:82:d8:
00:28:09:5d:d3:7f:1d:90:fb:23:c2:06:cc:8d:10:
64:bc:d0:5c:ae:d4:73:d7:3a:f9:94:3c:37:af:82:
dc:61:49:2e:34:86:54:0f:83:48:b3:3e:a7:1f:29:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:B4:2A:76:EB:A8:84:6D:CD:93:A5:A6:7C:5B:CE:B7:38:5F:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:45:77:da:02:0d:73:75:30:ae:08:5a:b0:58:27:ef:d6:ab:
55:40:fe:ad:95:64:f7:ca:2c:60:0b:e6:73:bf:1c:c8:34:58:
48:98:32:c4:2e:1a:bc:cd:5d:51:8e:30:3f:73:30:fc:b3:86:
55:17:e7:df:43:fe:7b:df:3c:19:d5:17:f7:87:ea:ab:8d:9f:
bb:dc:c2:30:78:e0:0c:79:dc:5a:60:10:09:bd:a4:94:d5:92:
c0:e4:e8:82:b1:07:ea:39:75:ed:98:0c:7e:7e:b7:84:aa:88:
ac:03:21:7c:c2:bc:25:7d:ab:06:cb:61:44:2f:36:27:8a:9f:
ce:48:74:62:5c:bb:b7:1d:2e:9c:7d:72:b1:08:81:c0:8e:d1:
12:1d:32:c1:15:31:2c:0b:a5:ca:7c:5b:af:0b:2f:6f:cc:ba:
88:ae:c3:84:70:09:34:c4:b8:6b:b7:49:cf:c8:54:b6:47:48:
4c:01:30:be:9e:45:98:85:ae:06:01:cf:a2:e9:bd:3a:c4:37:
1a:48:ab:00:05:99:33:a7:3c:bb:34:5d:11:bf:e4:49:a8:34:
ef:26:a4:4b:75:38:c3:08:1f:aa:4e:6d:24:ec:00:b2:ef:ed:
be:b9:5b:16:81:3a:de:ec:6e:8d:90:ed:33:08:9e:de:ad:dd:
71:5b:a5:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paRnl0AvXNWxm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjViMmFhMDMtZGU1YS00N2E5LWEzODEtY2MyYjI3NDUx
YzI4MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
NjI2ZWQ1ZGYtMzM4Yi00YzhlLWI2NjgtYzJkZTdkNDlmNzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnMBtrNmwtOnPLffysb2dj4zVRw4fRhXo/en
Yh40Eiqv1Wxv8mkEX8l7PY2H0n+nX4yrymmPE1yRroD0Vt2AsR6CnM22fwKdigqZ
AfFw9kuDYO1jwJhPczra/Qj+Y0BmJXGpy5jo7Xf81xmZBrIuhaxYHuqCTAHRZgpp
tt1HGIcBTSZyqN3czyawOCUcHkZKsrZbzsRK0a1jNKBCYCSDuNcv5vQavzLx4Fbc
9LyQm2t7TCR2TSqF4oPUnF2F9w0iU63YYAtRMwDJ3LJ5eJU/gtgAKAld038dkPsj
wgbMjRBkvNBcrtRz1zr5lDw3r4LcYUkuNIZUD4NIsz6nHymiowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8WtCp266iEbc2TpaZ8W863OF+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIy
YWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0NTFjMjgvZTBhOWM1MWMtYTBlZC0z
OGZjLTg2MzUtNGY3ODM0NWI5ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjViMmFhMDMtZGU1YS00N2E5LWEz
ODEtY2MyYjI3NDUxYzI4LzI1YjJhYTAzLWRlNWEtNDdhOS1hMzgxLWNjMmIyNzQ1
MWMyOC5jcmwwHwYDVR0jBBgwFoAUWwvbffpjXBHQ2Dq7nfM1nr6lKw4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJi
Mjc0NTFjMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqckMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9Fd9oCDXN1MK4IWrBYJ+/Wq1VA/q2VZPfKLGAL5nO/HMg0WEiYMsQu
GrzNXVGOMD9zMPyzhlUX599D/nvfPBnVF/eH6quNn7vcwjB44Ax53FpgEAm9pJTV
ksDk6IKxB+o5de2YDH5+t4SqiKwDIXzCvCV9qwbLYUQvNieKn85IdGJcu7cdLpx9
crEIgcCO0RIdMsEVMSwLpcp8W68LL2/Muoiuw4RwCTTEuGu3Sc/IVLZHSEwBML6e
RZiFrgYBz6LpvTrENxpIqwAFmTOnPLs0XRG/5EmoNO8mpEt1OMMIH6pObSTsALLv
7b65WxaBOt7sbo2Q7TMInt6t3XFbpVU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:31 2025 by rpki-client