
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/3a9d2154-dc3b-33e1-aa6e-520600625eda.roa
File: 3a9d2154-dc3b-33e1-aa6e-520600625eda.roa (raw, json)
Hash identifier: F3Y0Pd1Az81/HDXO2MVJ7MCj7COY8r8kMHoxM0dWFD8=
Subject key identifier: 7D:20:7A:27:17:9D:D4:9B:2B:D4:98:4B:F0:32:12:DC:7E:35:B6:52
Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d
Certificate serial: 010D0C9F4328584B9B3CDF1D9C7FD0ADD788DE00
Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/3a9d2154-dc3b-33e1-aa6e-520600625eda.roa
Signing time: Wed 22 Oct 2025 13:00:38 +0000
ROA not before: Wed 22 Oct 2025 13:00:38 +0000
ROA not after: Tue 20 Jan 2026 14:00:38 +0000
asID: 398638
IP address blocks: 206.81.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9b:3c:df:1d:9c:7f:d0:ad:d7:88:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d
Validity
Not Before: Oct 22 13:00:38 2025 GMT
Not After : Jan 20 14:00:38 2026 GMT
Subject: CN=a825ec1d-11d0-4151-af85-0023322ca650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:99:05:12:0f:24:1b:83:69:e5:44:d3:59:
08:88:8d:fa:8b:8e:04:77:ff:17:cb:e0:da:04:15:
f0:08:7d:16:61:5f:d4:6b:9a:ce:39:05:c6:9c:1e:
4c:55:7c:55:c6:64:bc:23:37:11:58:09:51:06:b3:
c2:de:4e:aa:3c:01:3b:75:ba:78:ba:88:1e:1d:9a:
b2:64:f9:51:5e:ed:21:e7:d3:1a:df:f4:91:5f:bb:
31:96:76:6d:d4:26:4f:c4:ac:bb:c1:a2:79:31:4f:
ae:93:20:7e:df:ff:4b:f4:3c:d1:f7:c8:f6:11:7f:
58:a5:1d:fc:30:4e:85:4b:df:bd:26:f6:c4:d4:a6:
5c:2c:8a:68:dd:06:99:4e:d8:e8:b9:d2:52:96:80:
46:5e:37:64:19:24:e9:69:ca:76:93:bd:0b:a4:48:
30:2a:2a:ad:3b:d7:6d:8a:61:91:08:1a:1d:36:2f:
f7:46:f4:71:a1:8f:5f:01:42:2c:38:40:1f:7f:69:
91:4a:24:7d:29:cb:22:a0:45:9a:80:63:1f:5f:93:
5d:74:2c:07:af:2d:08:90:8d:2b:b0:3a:97:7d:3a:
69:1c:0a:a1:2b:3f:c3:f8:f9:d8:76:11:4b:05:b7:
b9:71:1d:57:10:1c:ac:b6:f4:f5:dc:3f:bc:ad:58:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:7A:27:17:9D:D4:9B:2B:D4:98:4B:F0:32:12:DC:7E:35:B6:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/3a9d2154-dc3b-33e1-aa6e-520600625eda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl
X509v3 Authority Key Identifier:
keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.81.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:2f:c8:63:b4:89:ca:fd:2c:6f:59:f7:2c:5f:30:23:e2:56:
c1:7f:be:51:b9:4c:52:fa:10:91:04:4d:0a:dd:eb:d6:a8:0e:
ea:58:4b:96:c2:b0:f9:61:1b:26:23:d4:5f:9e:f8:01:40:7d:
49:9c:91:5a:92:e3:d4:30:7d:bb:41:57:cf:78:e0:a8:9d:ce:
31:ce:4e:a2:3d:fb:6b:ca:fd:9f:69:71:94:b9:c9:54:22:b1:
b9:95:0b:57:80:82:df:d7:ab:d0:3e:ac:2f:8e:07:85:cd:f2:
15:87:84:e8:ff:7d:49:ce:48:80:91:fe:a9:28:73:d5:c0:3d:
ed:fa:e5:23:eb:fd:90:0d:6f:56:4d:ac:3b:df:da:b2:61:ed:
88:ce:4a:2a:a4:58:92:93:2a:53:6f:9e:08:d3:fd:c7:91:0e:
39:0d:5a:32:7e:0c:11:32:7e:6e:35:1e:a9:e3:1e:f3:da:65:
0d:4e:b1:5e:37:d5:03:85:e0:73:9a:96:4e:00:62:00:17:70:
02:50:be:6a:7d:c3:ef:93:c8:92:df:d6:2a:cb:f4:50:ae:0d:
74:8f:76:f8:33:a5:6d:33:57:7f:5a:e2:9d:9b:28:02:4a:e3:
0e:1b:35:dd:0a:38:b6:93:06:07:14:df:42:bf:fa:1b:72:8d:
06:e6:61:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPN8dnH/QrdeI3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1
OTVkMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
YTgyNWVjMWQtMTFkMC00MTUxLWFmODUtMDAyMzMyMmNhNjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6ZBRIPJBuDaeVE01kIiI36i44Ed/8Xy+Da
BBXwCH0WYV/Ua5rOOQXGnB5MVXxVxmS8IzcRWAlRBrPC3k6qPAE7dbp4uogeHZqy
ZPlRXu0h59Ma3/SRX7sxlnZt1CZPxKy7waJ5MU+ukyB+3/9L9DzR98j2EX9YpR38
ME6FS9+9JvbE1KZcLIpo3QaZTtjoudJSloBGXjdkGSTpacp2k70LpEgwKiqtO9dt
imGRCBodNi/3RvRxoY9fAUIsOEAff2mRSiR9KcsioEWagGMfX5NddCwHry0IkI0r
sDqXfTppHAqhKz/D+PnYdhFLBbe5cR1XEBystvT13D+8rViVWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0geicXndSbK9SYS/AyEtx+NbZSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2
OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvM2E5ZDIxNTQtZGMzYi0z
M2UxLWFhNmUtNTIwNjAwNjI1ZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4
MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh
NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk
NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzlF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKovyGO0icr9LG9Z9yxfMCPiVsF/vlG5TFL6EJEETQrd69aoDupYS5bC
sPlhGyYj1F+e+AFAfUmckVqS49QwfbtBV8944KidzjHOTqI9+2vK/Z9pcZS5yVQi
sbmVC1eAgt/Xq9A+rC+OB4XN8hWHhOj/fUnOSICR/qkoc9XAPe365SPr/ZANb1ZN
rDvf2rJh7YjOSiqkWJKTKlNvngjT/ceRDjkNWjJ+DBEyfm41HqnjHvPaZQ1OsV43
1QOF4HOalk4AYgAXcAJQvmp9w++TyJLf1irL9FCuDXSPdvgzpW0zV39a4p2bKAJK
4w4bNd0KOLaTBgcU30K/+htyjQbmYQ4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:02:39 2025 by rpki-client