
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
File: 81898094-751d-312a-a1ce-de9855fd858a.roa (raw, json)
Hash identifier: BKq+NU1H4PYV2MqbbFq9FBMbGJ3tAySC0Tigc+uixA4=
Subject key identifier: 7A:36:73:4A:4D:9C:81:5D:8F:8F:36:20:1B:66:9C:57:4C:F8:C8:4A
Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial: 010D0C9F4328584BA7CCEC73706D015F7550CF00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 18914
IP address blocks: 206.168.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cc:ec:73:70:6d:01:5f:75:50:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=c82f8dd5-f237-4e47-955c-93fdf73aea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:42:7b:3e:bb:f6:1b:0a:f1:97:c5:cd:81:
17:fa:9f:ea:0b:3f:86:e3:51:d3:5b:88:0e:4a:6c:
91:39:2d:a6:a3:a1:96:6e:37:e2:2a:55:24:a0:71:
9c:31:51:32:56:9c:91:d6:20:f7:0e:7e:af:02:95:
59:a0:c1:b2:92:43:83:d7:0c:ff:05:3c:7d:f1:62:
9f:64:3a:c3:fd:e9:62:01:9c:45:eb:a0:41:78:3e:
2b:a5:69:20:0c:fa:f8:24:5b:63:6f:19:ad:aa:92:
6f:53:81:7d:86:fb:c2:de:28:c1:4a:ea:10:59:2b:
7d:7f:6d:f9:39:f3:63:e7:56:cf:6f:7e:e2:9f:1b:
e3:09:ac:a5:ee:c6:08:97:6b:b5:47:d9:d6:07:b6:
41:9e:ce:83:f3:59:18:80:86:09:d3:24:d5:84:a7:
fc:79:18:ba:2d:68:08:d8:ee:5a:2c:4b:75:f3:b5:
09:67:b5:3a:27:72:16:21:74:77:70:96:4d:63:24:
53:21:4e:c3:52:3e:d1:6f:a5:72:ae:85:19:d1:69:
80:78:26:0f:72:e8:44:5a:3f:78:18:2f:e7:9b:4c:
bb:74:43:64:29:54:5d:b3:5d:62:7a:f4:24:e0:47:
3d:c3:cf:29:c4:79:87:39:0e:fe:cb:0e:ed:f7:e7:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:36:73:4A:4D:9C:81:5D:8F:8F:36:20:1B:66:9C:57:4C:F8:C8:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
X509v3 Authority Key Identifier:
keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:45:a6:25:78:02:b2:c9:52:1e:3a:b9:f6:e3:1d:48:a3:f4:
1f:f8:e2:c2:cb:9a:f2:7f:54:58:94:31:17:d3:86:12:79:7b:
45:c4:56:e7:67:17:11:bb:94:09:f5:f4:75:56:11:43:12:66:
1b:1d:7e:e2:6c:04:a8:21:4a:ef:72:a5:30:32:f9:e5:9d:c1:
8b:da:bd:1e:ff:b0:45:1d:cd:30:04:8a:f6:d1:fb:e2:a5:aa:
01:3a:b8:fb:ca:fe:aa:a8:b4:ee:d5:88:27:c8:09:b1:41:bb:
8b:f6:3c:4b:ca:54:9b:35:37:7a:fd:73:e5:f9:17:fd:4d:fd:
44:fd:17:cc:13:31:dc:29:fb:45:a3:7e:c6:5c:58:e4:0c:a7:
37:74:0b:eb:20:36:1b:d9:d2:9b:37:91:b9:ae:07:9e:5f:33:
67:df:e4:da:83:bb:f4:b2:42:b1:8d:45:b7:91:28:56:c5:15:
94:ed:02:2d:df:03:d8:4b:af:56:76:a6:c5:01:82:d5:69:4d:
7b:e9:2d:13:88:e2:cd:d9:f2:07:c9:cf:c5:96:80:2c:a6:48:
92:12:7b:47:76:2e:30:9e:ee:16:af:c9:8e:ff:65:06:71:1f:
c5:a7:0a:62:e7:85:39:ca:b1:8a:c4:0d:d5:d0:65:7c:ee:83:
46:f7:16:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOxzcG0BX3VQzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
YzgyZjhkZDUtZjIzNy00ZTQ3LTk1NWMtOTNmZGY3M2FlYTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8pCez679hsK8ZfFzYEX+p/qCz+G41HTW4gO
SmyROS2mo6GWbjfiKlUkoHGcMVEyVpyR1iD3Dn6vApVZoMGykkOD1wz/BTx98WKf
ZDrD/eliAZxF66BBeD4rpWkgDPr4JFtjbxmtqpJvU4F9hvvC3ijBSuoQWSt9f235
OfNj51bPb37inxvjCayl7sYIl2u1R9nWB7ZBns6D81kYgIYJ0yTVhKf8eRi6LWgI
2O5aLEt187UJZ7U6J3IWIXR3cJZNYyRTIU7DUj7Rb6VyroUZ0WmAeCYPcuhEWj94
GC/nm0y7dENkKVRds11ievQk4Ec9w88pxHmHOQ7+yw7t9+eQcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHo2c0pNnIFdj482IBtmnFdM+MhKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvODE4OTgwOTQtNzUxZC0z
MTJhLWExY2UtZGU5ODU1ZmQ4NThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqhiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZFpiV4ArLJUh46ufbjHUij9B/44sLLmvJ/VFiUMRfThhJ5e0XEVudn
FxG7lAn19HVWEUMSZhsdfuJsBKghSu9ypTAy+eWdwYvavR7/sEUdzTAEivbR++Kl
qgE6uPvK/qqotO7ViCfICbFBu4v2PEvKVJs1N3r9c+X5F/1N/UT9F8wTMdwp+0Wj
fsZcWOQMpzd0C+sgNhvZ0ps3kbmuB55fM2ff5NqDu/SyQrGNRbeRKFbFFZTtAi3f
A9hLr1Z2psUBgtVpTXvpLROI4s3Z8gfJz8WWgCymSJISe0d2LjCe7havyY7/ZQZx
H8WnCmLnhTnKsYrEDdXQZXzug0b3Fi4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:09 2025 by rpki-client