
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/e9487e93-81a1-33df-85bb-341ba5cd5682.roa
File: e9487e93-81a1-33df-85bb-341ba5cd5682.roa (raw, json)
Hash identifier: L9H4pH1kCkQriX2hoU8WzErCFv6Suz2ucSa059dtraU=
Subject key identifier: 16:41:AA:91:27:DD:53:85:04:35:D7:7C:3B:EE:3C:55:31:64:2E:D5
Certificate issuer: /CN=a1645882-ff21-425f-8a87-08ec6b0a30d0
Certificate serial: 010D0C9F4328584B609C8AC27CE663492A819BE0
Authority key identifier: 66:EF:4B:49:86:33:A8:73:E3:79:4A:3B:74:DF:E4:6F:DD:E2:29:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/e9487e93-81a1-33df-85bb-341ba5cd5682.roa
Signing time: Wed 01 Oct 2025 13:00:41 +0000
ROA not before: Wed 01 Oct 2025 13:00:41 +0000
ROA not after: Tue 30 Dec 2025 14:00:41 +0000
asID: 401652
IP address blocks: 23.138.36.0/24 maxlen: 24
2602:f687::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/a1645882-ff21-425f-8a87-08ec6b0a30d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/a1645882-ff21-425f-8a87-08ec6b0a30d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:60:9c:8a:c2:7c:e6:63:49:2a:81:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1645882-ff21-425f-8a87-08ec6b0a30d0
Validity
Not Before: Oct 1 13:00:41 2025 GMT
Not After : Dec 30 14:00:41 2025 GMT
Subject: CN=3c20d4ad-83b9-4283-ae87-7d1fc061de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:00:7d:1b:73:4f:0c:5b:53:60:c0:c2:00:51:
ae:1c:89:b9:b4:f7:cf:81:d5:d7:6e:7b:56:d0:ff:
12:f9:1a:79:49:27:c2:1c:48:0e:0d:54:d9:a5:2f:
39:93:7e:ed:d3:e3:47:c6:61:d0:91:ee:ef:6e:11:
d6:e2:19:a9:f7:00:5f:d4:36:01:41:70:7f:cf:a7:
38:11:35:0c:bb:db:da:60:69:bb:07:c2:8e:24:d8:
91:c4:5a:a4:ea:5a:f2:79:98:d7:61:91:99:28:1e:
9c:a6:14:07:1f:f9:84:31:3a:27:3f:92:13:75:61:
b1:46:ee:32:4b:74:fe:e3:5b:54:90:96:c5:67:d4:
20:0b:09:8a:70:dc:64:98:8f:e7:6a:94:43:ad:60:
78:49:a2:86:a7:44:e1:60:4a:53:c1:53:eb:d7:a0:
a7:48:c4:9c:ce:ab:b9:88:85:52:5f:48:e0:69:fe:
59:ad:d0:e1:0b:77:5e:96:5a:d2:1e:fb:56:55:71:
be:b5:f2:df:17:0c:ae:a3:f2:2c:a1:c7:01:bc:02:
94:0f:82:de:fc:8b:81:48:14:20:c6:93:5a:b3:ed:
68:aa:f6:3f:55:ed:15:79:19:29:f0:5e:be:82:e6:
95:a2:f6:bb:1c:16:74:c6:a5:15:80:ad:9c:46:52:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:AA:91:27:DD:53:85:04:35:D7:7C:3B:EE:3C:55:31:64:2E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/e9487e93-81a1-33df-85bb-341ba5cd5682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/a1645882-ff21-425f-8a87-08ec6b0a30d0.crl
X509v3 Authority Key Identifier:
keyid:66:EF:4B:49:86:33:A8:73:E3:79:4A:3B:74:DF:E4:6F:DD:E2:29:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.36.0/24
IPv6:
2602:f687::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:e0:8a:c4:a2:33:d3:32:33:5d:35:6c:23:c8:41:50:7b:a6:
6d:ca:03:2a:1d:1c:fc:06:35:10:19:b1:07:51:4c:83:23:6f:
4f:3c:c9:46:2e:f8:5f:61:10:fc:60:60:72:75:0b:3f:16:f7:
a9:ea:52:52:1d:ac:7c:13:bf:ba:26:1b:0e:7d:41:89:5a:c5:
40:0b:0f:eb:3e:5e:f2:06:6f:2b:64:43:b1:6f:b3:90:6d:60:
d4:bf:e9:ab:86:ee:68:58:f1:fb:ec:7a:74:c8:40:00:bc:10:
0f:58:cb:ab:57:49:fb:0b:d2:b0:33:b3:5b:11:cb:0f:bf:a0:
d3:8a:eb:e8:ab:98:59:32:ed:23:40:20:24:9c:fe:03:71:ae:
77:7b:f0:c2:67:e1:6c:35:5e:76:1c:80:ca:2b:22:9e:29:5e:
12:fa:f2:cc:d8:95:63:9f:36:e6:9f:2d:32:ad:57:2b:be:ba:
e4:45:be:d7:3d:90:ec:ff:99:ef:15:18:6c:b0:74:46:54:dc:
e5:1a:b5:ad:d5:28:d4:22:8f:23:3c:6b:e8:b7:fd:0f:d2:24:
6d:90:ec:74:42:36:32:72:db:45:18:93:1d:21:8c:1d:77:57:
18:da:14:39:fa:37:7d:25:df:81:da:cc:42:a7:a4:37:bd:15:
7d:8b:55:ca
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtgnIrCfOZjSSqBm+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTE2NDU4ODItZmYyMS00MjVmLThhODctMDhlYzZiMGEz
MGQwMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
M2MyMGQ0YWQtODNiOS00MjgzLWFlODctN2QxZmMwNjFkZTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAB9G3NPDFtTYMDCAFGuHIm5tPfPgdXXbntW
0P8S+Rp5SSfCHEgODVTZpS85k37t0+NHxmHQke7vbhHW4hmp9wBf1DYBQXB/z6c4
ETUMu9vaYGm7B8KOJNiRxFqk6lryeZjXYZGZKB6cphQHH/mEMTonP5ITdWGxRu4y
S3T+41tUkJbFZ9QgCwmKcNxkmI/napRDrWB4SaKGp0ThYEpTwVPr16CnSMSczqu5
iIVSX0jgaf5ZrdDhC3dellrSHvtWVXG+tfLfFwyuo/IsoccBvAKUD4Le/IuBSBQg
xpNas+1oqvY/Ve0VeRkp8F6+guaVova7HBZ0xqUVgK2cRlLEHQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFBZBqpEn3VOFBDXXfDvuPFUxZC7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMTY0
NTg4Mi1mZjIxLTQyNWYtOGE4Ny0wOGVjNmIwYTMwZDAvZTk0ODdlOTMtODFhMS0z
M2RmLTg1YmItMzQxYmE1Y2Q1NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTE2NDU4ODItZmYyMS00MjVmLThh
ODctMDhlYzZiMGEzMGQwL2ExNjQ1ODgyLWZmMjEtNDI1Zi04YTg3LTA4ZWM2YjBh
MzBkMC5jcmwwHwYDVR0jBBgwFoAUZu9LSYYzqHPjeUo7dN/kb93iKUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMTY0NTg4Mi1mZjIxLTQyNWYtOGE4Ny0wOGVj
NmIwYTMwZDAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4okMA4E
AgACMAgDBgAmAvaHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAN4IrEojPTMjNdNWwjyEFQe6ZtygMqHRz8
BjUQGbEHUUyDI29PPMlGLvhfYRD8YGBydQs/Fvep6lJSHax8E7+6JhsOfUGJWsVA
Cw/rPl7yBm8rZEOxb7OQbWDUv+mrhu5oWPH77Hp0yEAAvBAPWMurV0n7C9KwM7Nb
EcsPv6DTiuvoq5hZMu0jQCAknP4Dca53e/DCZ+FsNV52HIDKKyKeKV4S+vLM2JVj
nzbmny0yrVcrvrrkRb7XPZDs/5nvFRhssHRGVNzlGrWt1SjUIo8jPGvot/0P0iRt
kOx0QjYycttFGJMdIYwdd1cY2hQ5+jd9Jd+B2sxCp6Q3vRV9i1XK
-----END CERTIFICATE-----
Generated at Thu Nov 6 02:15:01 2025 by rpki-client