
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
File: 4165ca3f-83b4-34a3-8f24-e13d876b5294.roa (raw, json)
Hash identifier: 7LTu2GIVtoQ+ar+8QiCovF9WrryAJ5liKsqu2oa6+Rw=
Subject key identifier: FA:27:6B:C2:04:A4:81:A5:C7:86:50:48:10:88:98:71:B3:EA:30:EF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BAA9799D4373B3FC077D0D500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 12222
IP address blocks: 23.56.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:99:d4:37:3b:3f:c0:77:d0:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=4109a7fa-5791-4a12-b931-746d46f40379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:31:30:c2:85:6a:fc:99:a5:80:e4:b9:f2:
f7:fa:6e:52:4f:20:3e:22:59:35:57:57:b0:1f:45:
24:88:d6:e6:05:4f:27:15:b2:0a:7f:ed:2d:f9:b3:
ee:b3:32:1e:f1:fb:4c:b5:ef:6b:78:50:a8:34:ec:
0c:a7:ed:76:bc:3b:00:a0:d1:7a:ea:1d:4b:dd:a0:
21:0d:bd:3d:3a:2c:cf:f1:27:2d:d7:f6:c7:5f:91:
7e:8c:44:ba:eb:4f:c1:55:ce:12:c7:0e:2f:ea:54:
c9:a3:24:5b:f4:45:ca:f8:02:55:e3:ad:69:4d:0f:
7e:3e:7d:dc:13:c6:5e:df:93:13:e3:37:05:d5:fa:
6f:8c:cc:f3:21:68:42:d4:49:22:67:9d:a3:71:bf:
aa:e7:5b:72:7c:3c:3f:56:16:cd:fb:f6:42:10:14:
87:6f:f4:0c:fa:bd:c6:fa:e3:a3:83:8e:15:b2:7e:
ef:a2:0b:2f:e0:63:7e:cc:d7:ec:a6:d5:2a:1b:ef:
89:5c:05:e2:6b:25:d4:1a:4b:f9:9a:8c:05:f9:fe:
33:94:4c:68:c6:33:bf:d4:85:60:e2:8f:47:b3:2e:
74:66:5c:95:9a:31:28:5d:4b:2a:b2:46:37:25:bb:
ef:b1:f4:93:c3:88:f2:1d:c9:0f:34:5f:c9:83:b7:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:6B:C2:04:A4:81:A5:C7:86:50:48:10:88:98:71:B3:EA:30:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.56.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:c2:c2:70:92:75:c6:06:a4:22:0a:57:a8:7e:9b:53:4f:a0:
bd:5e:88:ca:58:bf:02:73:74:f1:70:fd:b0:0c:58:1d:bc:9b:
6d:b0:05:13:03:78:94:e6:2b:f3:48:7e:8f:fb:9a:dd:85:8d:
9f:6c:53:10:aa:0f:91:25:c8:86:a2:21:aa:79:0b:a8:ed:8f:
77:50:51:22:b5:6c:3a:36:6c:42:94:b4:41:fb:79:77:e2:2b:
44:3c:45:99:59:45:cd:f0:a5:7d:e7:ce:2d:f5:7f:fc:5e:44:
14:c4:b1:45:05:53:70:3f:43:33:39:36:69:35:c4:a9:80:47:
f9:c7:8c:18:56:62:77:f8:d9:f9:c0:41:c8:88:52:b6:03:57:
85:63:bc:53:37:a3:d1:1a:d4:fb:c2:5c:6f:f1:80:24:c8:4c:
5c:f9:09:ac:ca:3d:72:35:c9:70:47:25:96:40:bb:fd:6a:be:
d7:8e:01:e7:fd:52:fa:b9:ee:54:71:03:50:ce:73:d9:7c:c1:
03:cc:f2:69:eb:e7:68:d5:cd:73:c4:2a:ec:13:45:0a:7d:6b:
9b:1c:35:71:e3:3e:b9:68:10:cf:b8:01:c8:cf:fa:74:65:25:
f8:96:5f:72:4f:bb:4b:62:28:4b:ad:1f:c3:14:2f:3f:19:63:
4d:b8:75:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5nUNzs/wHfQ1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NDEwOWE3ZmEtNTc5MS00YTEyLWI5MzEtNzQ2ZDQ2ZjQwMzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd8xMMKFavyZpYDkufL3+m5STyA+Ilk1V1ew
H0UkiNbmBU8nFbIKf+0t+bPuszIe8ftMte9reFCoNOwMp+12vDsAoNF66h1L3aAh
Db09OizP8Sct1/bHX5F+jES660/BVc4Sxw4v6lTJoyRb9EXK+AJV461pTQ9+Pn3c
E8Ze35MT4zcF1fpvjMzzIWhC1EkiZ52jcb+q51tyfDw/VhbN+/ZCEBSHb/QM+r3G
+uOjg44Vsn7vogsv4GN+zNfsptUqG++JXAXiayXUGkv5mowF+f4zlExoxjO/1IVg
4o9Hsy50ZlyVmjEoXUsqskY3JbvvsfSTw4jyHckPNF/Jg7fnqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPona8IEpIGlx4ZQSBCImHGz6jDvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE2NWNhM2YtODNiNC0z
NGEzLThmMjQtZTEzZDg3NmI1Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzjRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzCwnCSdcYGpCIKV6h+m1NPoL1eiMpYvwJzdPFw/bAMWB28m22wBRMD
eJTmK/NIfo/7mt2FjZ9sUxCqD5ElyIaiIap5C6jtj3dQUSK1bDo2bEKUtEH7eXfi
K0Q8RZlZRc3wpX3nzi31f/xeRBTEsUUFU3A/QzM5Nmk1xKmAR/nHjBhWYnf42fnA
QciIUrYDV4VjvFM3o9Ea1PvCXG/xgCTITFz5CazKPXI1yXBHJZZAu/1qvteOAef9
Uvq57lRxA1DOc9l8wQPM8mnr52jVzXPEKuwTRQp9a5scNXHjPrloEM+4AcjP+nRl
JfiWX3JPu0tiKEutH8MULz8ZY024deQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:18:59 2025 by rpki-client