
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa
File: 167071d7-0649-3013-aa5e-af1ce1d335da.roa (raw, json)
Hash identifier: cFe8UUJPSaIyPPObYY4udej2Ahd66eTqhgmC+1yuCDE=
Subject key identifier: A5:C9:3A:3C:58:34:10:DD:31:97:D5:37:52:49:F3:6B:B3:A0:A6:5F
Certificate issuer: /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial: 010D0C9F4328584BAEC7B3CDBB0444E3F0686000
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa
Signing time: Wed 29 Oct 2025 13:00:39 +0000
ROA not before: Wed 29 Oct 2025 13:00:39 +0000
ROA not after: Tue 27 Jan 2026 14:00:39 +0000
asID: 174
IP address blocks: 66.187.0.0/23 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ae:c7:b3:cd:bb:04:44:e3:f0:68:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Validity
Not Before: Oct 29 13:00:39 2025 GMT
Not After : Jan 27 14:00:39 2026 GMT
Subject: CN=d31355b8-645b-430d-bcdc-aa43bc06bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:a1:cc:fb:03:a4:77:ce:f7:ad:ec:5e:13:
ca:66:88:cf:92:cc:fc:86:76:b8:2a:da:95:62:8a:
e0:d1:72:a0:68:df:35:64:4b:3e:9a:0b:2b:ce:8b:
2c:2a:c6:31:ed:3d:d1:81:47:0b:56:fd:4f:1e:7e:
51:a6:b3:40:81:8e:dc:3b:02:bc:91:2c:64:50:52:
7b:24:ce:9b:42:04:8c:78:d9:6d:b8:d0:c4:67:43:
44:bc:df:b6:14:3f:fb:ec:d7:b0:ed:95:02:b4:e7:
5c:15:1a:58:1c:79:c5:27:05:0b:b4:b2:d1:f8:f5:
c1:bc:0a:dd:23:80:18:40:bb:ee:38:20:24:ea:5a:
65:60:36:fb:35:c3:b8:19:ff:69:5c:4f:5a:3f:8d:
9f:a9:dc:1d:0f:7a:e3:3e:21:f0:b3:3e:a8:2b:96:
c5:bf:19:92:c9:4a:66:d7:98:79:51:80:10:f2:a3:
d2:61:02:54:bc:36:d8:a9:f1:40:b8:72:1b:4d:33:
51:4f:27:7c:ef:ba:5c:23:fc:04:fd:79:5b:b0:5d:
78:9d:a2:74:ff:56:31:48:c3:5c:18:df:c2:f2:23:
78:a0:cd:39:5a:59:55:c8:e3:65:a5:2a:cd:d9:72:
fe:37:84:55:fa:fb:92:0d:7c:02:4f:8b:1a:ec:20:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:3A:3C:58:34:10:DD:31:97:D5:37:52:49:F3:6B:B3:A0:A6:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
X509v3 Authority Key Identifier:
keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:3e:0d:c2:0f:3d:04:8a:bb:db:78:50:e0:a9:75:2d:51:93:
54:79:e1:7a:7b:0e:f0:f8:80:9a:bc:ad:a9:19:a7:5f:6a:ea:
0b:b3:97:53:e0:49:81:11:b1:07:f7:7e:3a:9a:8a:59:67:74:
42:d9:c8:bc:9c:6a:fe:59:74:81:00:e0:23:be:61:7d:63:7b:
b8:07:3c:9d:ef:89:ea:72:58:3e:24:04:0f:ce:48:f4:e4:f3:
19:f6:16:20:de:f1:28:e5:8f:4c:26:e3:fa:d6:43:94:7b:13:
a0:a2:eb:2c:56:d6:40:06:a2:27:eb:6f:7e:a9:26:78:fc:17:
7f:0f:9f:90:cd:b6:b4:3c:a4:18:19:e4:30:2e:76:dc:26:fd:
27:53:5d:c5:65:78:5f:5d:5e:66:46:e4:51:87:12:7f:cb:e9:
91:90:8c:33:df:b0:ec:b5:ec:fe:c6:3d:b6:b0:09:bc:be:b7:
9e:36:a7:81:b1:13:d6:ee:f1:96:36:b4:c5:eb:ed:e4:54:e6:
cd:4d:1c:13:cc:98:9f:16:c3:3f:d5:e5:3f:cf:7e:55:eb:ca:
db:a6:cc:b6:13:e4:5e:a4:8b:5b:b4:08:52:84:2b:63:83:b6:
25:61:d6:2d:6b:ff:d0:92:d1:c5:21:01:4b:59:04:4e:9d:26:
d3:fc:32:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7PNuwRE4/BoYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw
NzY1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk
ZDMxMzU1YjgtNjQ1Yi00MzBkLWJjZGMtYWE0M2JjMDZiY2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBChzPsDpHfO963sXhPKZojPksz8hna4KtqV
Yorg0XKgaN81ZEs+mgsrzossKsYx7T3RgUcLVv1PHn5RprNAgY7cOwK8kSxkUFJ7
JM6bQgSMeNltuNDEZ0NEvN+2FD/77New7ZUCtOdcFRpYHHnFJwULtLLR+PXBvArd
I4AYQLvuOCAk6lplYDb7NcO4Gf9pXE9aP42fqdwdD3rjPiHwsz6oK5bFvxmSyUpm
15h5UYAQ8qPSYQJUvDbYqfFAuHIbTTNRTyd877pcI/wE/XlbsF14naJ0/1YxSMNc
GN/C8iN4oM05WllVyONlpSrN2XL+N4RV+vuSDXwCT4sa7CBzyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXJOjxYNBDdMZfVN1JJ82uzoKZfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm
NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvMTY3MDcxZDctMDY0OS0z
MDEzLWFhNWUtYWYxY2UxZDMzNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl
NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk
MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0
OTIxZDA3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHU+DcIPPQSKu9t4UOCpdS1Rk1R54Xp7DvD4gJq8rakZp19q6guzl1Pg
SYERsQf3fjqaillndELZyLycav5ZdIEA4CO+YX1je7gHPJ3viepyWD4kBA/OSPTk
8xn2FiDe8Sjlj0wm4/rWQ5R7E6Ci6yxW1kAGoifrb36pJnj8F38Pn5DNtrQ8pBgZ
5DAudtwm/SdTXcVleF9dXmZG5FGHEn/L6ZGQjDPfsOy17P7GPbawCby+t542p4Gx
E9bu8ZY2tMXr7eRU5s1NHBPMmJ8Wwz/V5T/PflXrytumzLYT5F6ki1u0CFKEK2OD
tiVh1i1r/9CS0cUhAUtZBE6dJtP8Mv8=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:50 2025 by rpki-client