
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa
File: 86486939-09ae-3b8e-9df3-248401e6ffe2.roa (raw, json)
Hash identifier: vDnmVz+00go/Uwfa4KCYR/maaDSUb5+cWQ3ZD3Gcrb4=
Subject key identifier: D2:E8:36:C3:87:F5:2A:75:97:E8:A5:B8:6C:A6:15:C9:9E:28:91:AF
Certificate issuer: /CN=dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc
Certificate serial: 010D0C9F4328584BAA97A8737513F3001EF38400
Authority key identifier: 73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 400465
IP address blocks: 23.132.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:a8:73:75:13:f3:00:1e:f3:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=9b702ce2-f69d-4e4a-bc0d-e9b17b48f6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:42:1b:20:6a:0b:ea:c8:9f:f0:ae:87:18:
e5:6a:6e:ad:f0:69:b8:e7:ba:86:e6:44:bb:70:92:
00:b2:af:34:9e:fc:22:f2:e4:44:bb:f3:7e:60:38:
8d:e7:22:3b:22:ed:3b:b7:77:2d:76:b1:0b:23:dd:
90:fc:0a:c9:da:52:9e:22:6d:2a:ba:41:24:39:e9:
04:01:3c:4e:b6:0f:ab:05:e8:31:ef:11:66:f7:21:
13:66:56:74:4e:58:8f:03:35:18:77:39:0a:23:6c:
88:1c:91:dd:97:3b:df:90:16:10:87:ca:5e:d5:8e:
0e:85:72:34:46:de:d1:6c:d7:d0:f7:03:11:91:68:
c8:d4:2c:c0:2e:79:1f:0b:d9:c8:88:ab:c9:18:db:
9b:92:2a:c7:8f:c1:43:9f:8c:19:c5:77:79:8c:09:
8b:5a:63:66:f2:bb:50:6e:b5:bd:29:ed:cd:7f:be:
cd:08:62:21:7e:9d:75:91:3b:db:6b:04:81:1f:e6:
5b:b8:a5:12:58:ae:86:e8:bc:06:8c:8f:16:5e:56:
d9:dc:77:17:74:68:a3:f6:db:9e:cd:5d:b2:54:94:
cb:52:db:78:39:f1:3a:12:26:f2:31:bb:83:fc:16:
69:64:24:27:95:4a:ca:4f:aa:51:c4:bc:4c:0d:03:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:36:C3:87:F5:2A:75:97:E8:A5:B8:6C:A6:15:C9:9E:28:91:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.crl
X509v3 Authority Key Identifier:
keyid:73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:38:21:0f:f5:ed:9a:71:cc:cf:81:bd:b5:da:d2:20:32:46:
e9:43:42:b0:a4:10:e0:98:9a:9f:60:83:2d:25:8b:8a:43:aa:
67:4c:40:01:1a:a0:38:b6:41:7f:2e:d6:00:83:ed:fb:f9:48:
03:de:32:d5:b3:4c:5d:7b:bf:4a:cc:4b:83:3a:7a:c3:aa:f3:
91:dc:42:1b:ec:9c:b4:38:b1:4f:37:f0:6f:09:54:9e:87:62:
f3:c2:68:6c:92:69:81:14:ec:b1:28:77:c8:17:de:2c:65:b5:
ef:36:e2:52:7e:2f:54:a9:49:9e:d6:e5:2f:d6:64:79:cb:20:
34:a6:0d:6d:8f:6a:dc:2d:b3:69:a5:67:c5:36:5c:dc:b1:e2:
ee:27:3d:30:be:3c:36:92:42:f8:a6:6e:b5:fe:5a:85:50:61:
89:0b:7c:b5:ce:7e:e4:01:56:c1:3f:00:60:6c:39:a7:07:de:
54:02:aa:6e:46:62:60:8b:3d:58:e5:52:d8:37:12:0c:90:df:
e2:56:bc:f7:bd:c5:56:cf:ce:6d:80:0a:f0:9c:20:3b:f5:e4:
f9:30:c9:7b:81:b7:26:4e:c4:df:41:c7:82:50:df:08:02:c0:
00:41:b6:70:9f:ab:76:a8:a6:40:3f:ac:4c:e1:ba:6e:a1:d2:
01:5d:4e:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6hzdRPzAB7zhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJkYjZjMmItZGRjNi00NDk5LWEzZTctODZjOGMwODg2
OGJjMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
OWI3MDJjZTItZjY5ZC00ZTRhLWJjMGQtZTliMTdiNDhmNmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIpCGyBqC+rIn/Cuhxjlam6t8Gm457qG5kS7
cJIAsq80nvwi8uREu/N+YDiN5yI7Iu07t3ctdrELI92Q/ArJ2lKeIm0qukEkOekE
ATxOtg+rBegx7xFm9yETZlZ0TliPAzUYdzkKI2yIHJHdlzvfkBYQh8pe1Y4OhXI0
Rt7RbNfQ9wMRkWjI1CzALnkfC9nIiKvJGNubkirHj8FDn4wZxXd5jAmLWmNm8rtQ
brW9Ke3Nf77NCGIhfp11kTvbawSBH+ZbuKUSWK6G6LwGjI8WXlbZ3HcXdGij9tue
zV2yVJTLUtt4OfE6EibyMbuD/BZpZCQnlUrKT6pRxLxMDQMUQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLoNsOH9Sp1l+iluGymFcmeKJGvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYmRi
NmMyYi1kZGM2LTQ0OTktYTNlNy04NmM4YzA4ODY4YmMvODY0ODY5MzktMDlhZS0z
YjhlLTlkZjMtMjQ4NDAxZTZmZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGJkYjZjMmItZGRjNi00NDk5LWEz
ZTctODZjOGMwODg2OGJjL2RiZGI2YzJiLWRkYzYtNDQ5OS1hM2U3LTg2YzhjMDg4
NjhiYy5jcmwwHwYDVR0jBBgwFoAUc8mRG36CYRdtKjI/l577nDzpuuwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kYmRiNmMyYi1kZGM2LTQ0OTktYTNlNy04NmM4
YzA4ODY4YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4TIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC44IQ/17ZpxzM+BvbXa0iAyRulDQrCkEOCYmp9ggy0li4pDqmdMQAEa
oDi2QX8u1gCD7fv5SAPeMtWzTF17v0rMS4M6esOq85HcQhvsnLQ4sU838G8JVJ6H
YvPCaGySaYEU7LEod8gX3ixlte824lJ+L1SpSZ7W5S/WZHnLIDSmDW2Patwts2ml
Z8U2XNyx4u4nPTC+PDaSQvimbrX+WoVQYYkLfLXOfuQBVsE/AGBsOacH3lQCqm5G
YmCLPVjlUtg3EgyQ3+JWvPe9xVbPzm2ACvCcIDv15PkwyXuBtyZOxN9Bx4JQ3wgC
wABBtnCfq3aopkA/rEzhum6h0gFdTj0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:30 2025 by rpki-client