
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/659f9f30-922e-350a-be8d-3efb90782b02.roa
File: 659f9f30-922e-350a-be8d-3efb90782b02.roa (raw, json)
Hash identifier: LZ88veavK7aWW3mqZ/vqMOsMxkvARRCBBFKcSNjdX28=
Subject key identifier: 05:DF:CE:33:5C:9A:C5:75:88:A3:B7:15:58:17:FE:6F:A1:AE:2D:D2
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584B88AC9F845FEEDF1180FC5F08
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/659f9f30-922e-350a-be8d-3efb90782b02.roa
Signing time: Wed 15 Oct 2025 21:25:27 +0000
ROA not before: Wed 15 Oct 2025 21:25:27 +0000
ROA not after: Tue 13 Jan 2026 22:25:27 +0000
asID: 9304
IP address blocks: 64.205.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:88:ac:9f:84:5f:ee:df:11:80:fc:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 15 21:25:27 2025 GMT
Not After : Jan 13 22:25:27 2026 GMT
Subject: CN=fd49caa8-bb2e-4e0f-bbf8-e72cd1f370ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:3e:20:e7:f5:e0:94:5a:70:ca:d2:6b:9b:
c6:e3:26:ce:88:ad:3c:dd:09:4e:1a:44:c5:e7:04:
bf:c4:df:8e:7b:e1:af:42:1e:81:e7:05:b3:12:a8:
5e:60:33:30:23:87:e2:fb:f2:8a:a3:75:91:bc:17:
c6:27:17:c8:80:2b:86:c2:73:e3:ca:52:83:d7:ba:
31:aa:22:e0:96:00:a8:30:0b:e1:52:73:b5:3e:22:
f5:03:6c:33:f3:06:4a:e7:9b:99:d3:2f:a8:47:64:
2b:d9:be:b6:e4:05:2c:f2:9d:95:7e:53:21:0d:93:
ab:12:de:d7:96:6b:e3:e5:09:54:ce:82:ab:f8:61:
86:7d:3f:93:f0:f3:2b:01:0e:a2:45:ea:58:81:36:
3c:4f:03:d8:fe:b0:12:d8:b1:28:6d:0d:cc:49:a4:
0d:e7:3c:44:9f:ee:0b:5c:aa:0b:27:1f:29:95:b3:
a6:9c:c9:1e:0e:ab:a4:e4:f1:01:c4:9f:5f:e2:01:
50:4f:87:29:20:89:d8:12:fe:97:f3:d8:83:2d:50:
4f:e9:af:e0:9e:ba:ef:ed:bd:ea:3f:1e:da:1e:04:
8d:96:a3:92:26:f1:4d:43:85:a2:e1:b2:78:3c:cd:
34:a6:ac:4b:b9:19:93:4a:93:ca:48:59:95:b0:4a:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DF:CE:33:5C:9A:C5:75:88:A3:B7:15:58:17:FE:6F:A1:AE:2D:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/659f9f30-922e-350a-be8d-3efb90782b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.205.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:88:5e:77:b0:16:85:bc:f6:47:30:1a:06:44:84:03:96:89:
41:8d:bc:8a:57:d2:2e:51:a6:4d:2a:33:bb:40:08:f8:47:72:
51:2f:d9:28:2f:3b:f0:4a:1f:0e:b5:12:47:33:f1:9b:d5:60:
64:87:27:8e:79:67:4f:f5:09:87:eb:56:ec:86:6b:9e:3e:c0:
19:90:83:9c:e1:e7:f0:34:52:11:bd:5c:c7:1e:d5:89:21:e0:
9e:0c:fd:00:23:13:18:63:5f:a9:6b:cd:75:10:61:a9:02:d9:
39:7f:c9:aa:3e:51:cf:6c:b7:fc:bd:da:43:c9:72:ac:70:36:
50:c9:1b:5e:49:6c:64:d7:78:fc:fa:62:05:96:c7:fb:11:eb:
63:e9:27:8b:b1:79:36:10:ca:81:bd:f3:29:17:70:76:87:77:
53:ea:1a:f3:26:c8:3a:cb:d3:30:91:54:f0:6a:02:48:2b:09:
58:39:6c:8b:a6:fa:3f:df:ef:d9:33:ba:b9:c0:17:bc:b4:28:
d7:6c:c6:9d:c0:b8:c3:86:1f:6a:3f:6b:11:a0:20:0f:6f:54:
20:4a:0a:60:39:6f:54:c6:f5:c5:6d:65:20:10:f6:03:40:83:
bf:1e:33:cb:33:29:d9:9e:60:78:e6:d3:7a:ec:18:b8:60:b9:
f0:af:f5:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIrJ+EX+7fEYD8XwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTAxNTIxMjUyN1oXDTI2MDExMzIyMjUyN1owLzEtMCsGA1UEAxMk
ZmQ0OWNhYTgtYmIyZS00ZTBmLWJiZjgtZTcyY2QxZjM3MGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyA+IOf14JRacMrSa5vG4ybOiK083QlOGkTF
5wS/xN+Oe+GvQh6B5wWzEqheYDMwI4fi+/KKo3WRvBfGJxfIgCuGwnPjylKD17ox
qiLglgCoMAvhUnO1PiL1A2wz8wZK55uZ0y+oR2Qr2b625AUs8p2VflMhDZOrEt7X
lmvj5QlUzoKr+GGGfT+T8PMrAQ6iRepYgTY8TwPY/rAS2LEobQ3MSaQN5zxEn+4L
XKoLJx8plbOmnMkeDquk5PEBxJ9f4gFQT4cpIInYEv6X89iDLVBP6a/gnrrv7b3q
Px7aHgSNlqOSJvFNQ4Wi4bJ4PM00pqxLuRmTSpPKSFmVsErZ5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXfzjNcmsV1iKO3FVgX/m+hri3SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjU5ZjlmMzAtOTIyZS0z
NTBhLWJlOGQtM2VmYjkwNzgyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQM3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKIXnewFoW89kcwGgZEhAOWiUGNvIpX0i5Rpk0qM7tACPhHclEv2Sgv
O/BKHw61Ekcz8ZvVYGSHJ455Z0/1CYfrVuyGa54+wBmQg5zh5/A0UhG9XMce1Ykh
4J4M/QAjExhjX6lrzXUQYakC2Tl/yao+Uc9st/y92kPJcqxwNlDJG15JbGTXePz6
YgWWx/sR62PpJ4uxeTYQyoG98ykXcHaHd1PqGvMmyDrL0zCRVPBqAkgrCVg5bIum
+j/f79kzurnAF7y0KNdsxp3AuMOGH2o/axGgIA9vVCBKCmA5b1TG9cVtZSAQ9gNA
g78eM8szKdmeYHjm03rsGLhgufCv9Rs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:27 2025 by rpki-client