
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa
File: 3d4c19c0-cef8-3686-be24-c516be99f254.roa (raw, json)
Hash identifier: cj5qIsxN/GcO3jlZt+KHhtuapuvrOzblwLYFvJ72DTc=
Subject key identifier: 68:E3:6C:EC:4A:69:21:7D:AF:54:3D:50:11:09:EC:12:7D:BB:84:F8
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584BB88D26476CAC2D1EE046D440
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 30238
IP address blocks: 207.54.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:26:47:6c:ac:2d:1e:e0:46:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=a23e011a-3b09-42f6-9443-e5eaab8e7830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:61:af:38:37:a3:8d:6c:6d:e2:dd:f5:26:
48:e1:e2:2b:e5:91:e7:5d:54:2e:e2:ce:14:a1:5d:
76:e9:f9:60:39:0d:66:8a:a7:2b:7d:d3:dc:f4:9c:
23:43:26:f4:2f:2d:49:ed:ac:02:31:f2:e5:4a:16:
d6:6b:06:2b:be:cf:04:0b:c9:10:7b:b2:3e:f0:42:
0a:6d:bd:7d:82:04:81:87:34:2f:3d:a2:23:e3:b9:
0f:cd:4a:ef:44:81:92:c2:ac:77:6a:64:d1:3e:c6:
22:5e:3d:b1:82:b8:4e:55:0b:7c:af:ac:bc:18:f0:
2c:7e:db:1f:a3:ea:e0:86:7b:85:e0:96:2f:0b:47:
f6:a2:eb:3c:5c:2e:ae:9e:ae:7b:fa:2b:75:5e:3b:
4e:73:a2:99:63:ca:4f:c5:4c:94:08:c2:54:b4:13:
7d:1a:62:72:58:7b:ac:99:83:de:a9:2c:3b:40:39:
c4:eb:5e:38:bf:5c:6a:80:55:ee:6e:68:e8:55:4f:
0c:39:9a:3f:55:10:6f:c6:ef:2a:92:00:83:d9:13:
47:ae:c2:b4:61:a3:82:4d:8d:67:9f:9f:49:a6:21:
d8:1c:e2:fb:11:49:04:ad:ce:be:9f:60:36:c6:74:
79:3e:95:d3:1a:e2:43:9f:2c:2a:b0:02:4c:78:5a:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:6C:EC:4A:69:21:7D:AF:54:3D:50:11:09:EC:12:7D:BB:84:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:f6:fe:88:c5:b0:cd:8e:8c:e0:23:c9:06:dc:46:23:8e:bf:
50:c1:d6:ed:37:90:6e:bf:36:ed:e0:77:f6:13:cd:20:01:ba:
9f:ff:89:05:cd:3c:04:0a:28:3d:11:da:94:83:c0:28:b5:be:
ef:93:6e:09:da:8a:e5:d1:db:2a:6b:ad:9f:06:66:38:a1:75:
66:21:5e:ef:d1:bf:62:1f:e5:05:06:6d:f7:1d:79:8f:d1:de:
9c:8f:b3:58:fd:e2:f8:37:a9:3f:8f:54:85:3d:5c:81:4b:48:
ea:32:2d:ce:63:20:85:47:3a:7c:7c:6a:a9:f1:11:cd:f3:17:
70:de:37:02:b1:0b:29:86:0b:5f:70:98:cb:1c:61:d4:7e:82:
2f:7d:c3:7d:72:16:92:43:00:ed:3d:25:0a:43:87:ab:ed:01:
09:a8:7e:3e:0a:92:94:bc:1a:69:c2:ac:9c:d2:31:df:d8:fe:
c3:30:dc:27:84:ee:ae:31:a8:10:6f:94:e9:8b:b9:8b:32:39:
58:b0:cc:55:37:d0:3a:28:05:99:27:d5:0d:49:8c:3e:0e:9d:
cd:01:e8:d6:cc:0e:6a:fc:56:97:0e:e6:7f:cb:01:6f:ec:18:
e7:11:9a:46:e0:d9:00:d2:0d:57:69:22:2e:61:1a:82:0f:31:
66:77:61:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSZHbKwtHuBG1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
YTIzZTAxMWEtM2IwOS00MmY2LTk0NDMtZTVlYWFiOGU3ODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaphrzg3o41sbeLd9SZI4eIr5ZHnXVQu4s4U
oV126flgOQ1miqcrfdPc9JwjQyb0Ly1J7awCMfLlShbWawYrvs8EC8kQe7I+8EIK
bb19ggSBhzQvPaIj47kPzUrvRIGSwqx3amTRPsYiXj2xgrhOVQt8r6y8GPAsftsf
o+rghnuF4JYvC0f2ous8XC6unq57+it1XjtOc6KZY8pPxUyUCMJUtBN9GmJyWHus
mYPeqSw7QDnE6144v1xqgFXubmjoVU8MOZo/VRBvxu8qkgCD2RNHrsK0YaOCTY1n
n59JpiHYHOL7EUkErc6+n2A2xnR5PpXTGuJDnywqsAJMeFoODwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjjbOxKaSF9r1Q9UBEJ7BJ9u4T4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2Q0YzE5YzAtY2VmOC0z
Njg2LWJlMjQtYzUxNmJlOTlmMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALD2/ojFsM2OjOAjyQbcRiOOv1DB1u03kG6/Nu3gd/YTzSABup//iQXN
PAQKKD0R2pSDwCi1vu+TbgnaiuXR2yprrZ8GZjihdWYhXu/Rv2If5QUGbfcdeY/R
3pyPs1j94vg3qT+PVIU9XIFLSOoyLc5jIIVHOnx8aqnxEc3zF3DeNwKxCymGC19w
mMscYdR+gi99w31yFpJDAO09JQpDh6vtAQmofj4KkpS8GmnCrJzSMd/Y/sMw3CeE
7q4xqBBvlOmLuYsyOViwzFU30DooBZkn1Q1JjD4Onc0B6NbMDmr8VpcO5n/LAW/s
GOcRmkbg2QDSDVdpIi5hGoIPMWZ3YZw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:59 2025 by rpki-client