
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1986b36a-53c5-3448-96bb-3d16aa321a66.roa
File: 1986b36a-53c5-3448-96bb-3d16aa321a66.roa (raw, json)
Hash identifier: 15R1/g0e+j2e1pflB31KXt6YiGJBTGzp09awkBaWdXo=
Subject key identifier: C5:27:DD:1B:99:4E:C8:13:D7:8D:4B:59:51:90:CE:C9:77:CC:5F:C1
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F4328584B891762EAEEA3AB8A617281C0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1986b36a-53c5-3448-96bb-3d16aa321a66.roa
Signing time: Thu 16 Oct 2025 01:00:30 +0000
ROA not before: Thu 16 Oct 2025 01:00:30 +0000
ROA not after: Wed 14 Jan 2026 02:00:30 +0000
asID: 13807
IP address blocks: 72.8.192.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:89:17:62:ea:ee:a3:ab:8a:61:72:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Oct 16 01:00:30 2025 GMT
Not After : Jan 14 02:00:30 2026 GMT
Subject: CN=26d3da08-1a4e-4e55-a117-caafe8afb2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:36:0d:b0:01:42:94:48:f4:4a:81:c7:f1:cb:
9c:d3:e6:cb:46:52:4d:aa:8f:c3:40:45:62:b4:68:
01:a0:7a:6d:c3:a0:51:4a:55:e6:fc:c1:aa:2a:ac:
82:ca:58:ee:dc:62:4f:57:1c:43:b7:be:63:5c:14:
3c:cb:2e:03:e2:d6:f5:8f:d7:e8:37:0b:2d:5e:bc:
a7:f0:5a:4e:e1:00:a0:d4:99:2d:60:3a:f4:f0:60:
d9:9e:07:ab:0b:95:b0:43:9e:32:2a:7b:3e:71:94:
ee:92:31:5e:46:27:e3:f0:c8:32:03:4c:e1:49:b1:
d1:11:b5:31:f1:05:33:91:1e:23:f6:46:0e:2e:ab:
77:8c:f8:d5:03:ea:5a:4b:da:61:db:e6:7b:6b:0c:
a8:35:fc:bc:86:9f:bb:07:1f:ac:29:10:88:9b:bb:
94:b9:02:30:bc:cf:3b:ca:45:d3:e8:1a:c3:98:66:
e9:29:10:88:d0:d7:4b:ba:bc:b4:07:cc:62:d9:9c:
84:98:23:5e:24:7e:6e:a9:bd:60:70:de:4b:0c:24:
be:f6:e9:c9:34:3a:c6:70:60:3a:2c:5f:1b:59:f2:
09:ac:d4:39:e4:71:9f:cb:fa:64:c2:07:70:36:85:
b8:7b:ff:6b:cc:dc:e6:af:2a:3d:fa:1e:6b:6e:9a:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:DD:1B:99:4E:C8:13:D7:8D:4B:59:51:90:CE:C9:77:CC:5F:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1986b36a-53c5-3448-96bb-3d16aa321a66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
72.8.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:f0:77:8b:d6:69:f6:09:d7:e2:6b:0e:47:8b:d7:fe:18:d3:
7a:85:c0:55:cd:ae:bd:d1:a4:fd:83:31:e5:32:df:0a:a4:01:
e6:df:0e:ea:8b:d6:35:6a:89:58:7e:d2:ee:06:d6:2f:1b:8e:
88:9a:40:71:2e:2d:c6:f5:c5:9b:88:2e:55:f3:e8:9b:45:31:
fa:eb:09:d7:a2:e4:18:73:38:2d:e3:ae:46:c6:89:bd:5d:55:
df:ba:14:02:ef:9c:12:51:48:16:5b:13:c9:70:31:0f:4c:73:
19:b6:59:bf:9a:d8:35:0a:39:86:e1:c1:06:76:db:b1:2c:da:
f9:9a:65:b5:d3:61:48:68:0e:ec:36:f1:f6:e6:7b:d5:d6:9a:
fc:9c:ed:2c:41:75:99:52:e7:84:9f:fd:77:2d:15:ed:58:d0:
fe:34:66:a1:c8:7a:33:3b:06:e1:b5:8b:a9:67:10:11:12:6e:
d2:ac:d2:b5:64:80:4d:88:1a:33:19:20:9c:e8:da:3e:45:3c:
34:29:cd:29:36:0b:b2:97:a3:da:a7:ad:71:5c:0d:3f:7b:74:
3a:e8:3a:6e:9d:f3:2b:b0:a5:fa:17:e4:dc:f9:35:3e:f2:9a:
c3:a2:ac:8b:f6:63:d9:98:21:c6:e0:5b:2b:25:65:a2:85:dc:
b0:05:e3:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2Lq7qOrimFygcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
MjZkM2RhMDgtMWE0ZS00ZTU1LWExMTctY2FhZmU4YWZiMmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zYNsAFClEj0SoHH8cuc0+bLRlJNqo/DQEVi
tGgBoHptw6BRSlXm/MGqKqyCylju3GJPVxxDt75jXBQ8yy4D4tb1j9foNwstXryn
8FpO4QCg1JktYDr08GDZngerC5WwQ54yKns+cZTukjFeRifj8MgyA0zhSbHREbUx
8QUzkR4j9kYOLqt3jPjVA+paS9ph2+Z7awyoNfy8hp+7Bx+sKRCIm7uUuQIwvM87
ykXT6BrDmGbpKRCI0NdLury0B8xi2ZyEmCNeJH5uqb1gcN5LDCS+9unJNDrGcGA6
LF8bWfIJrNQ55HGfy/pkwgdwNoW4e/9rzNzmryo9+h5rbppe2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUn3RuZTsgT141LWVGQzsl3zF/BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMTk4NmIzNmEtNTNjNS0z
NDQ4LTk2YmItM2QxNmFhMzIxYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSAjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALnwd4vWafYJ1+JrDkeL1/4Y03qFwFXNrr3RpP2DMeUy3wqkAebfDuqL
1jVqiVh+0u4G1i8bjoiaQHEuLcb1xZuILlXz6JtFMfrrCdei5BhzOC3jrkbGib1d
Vd+6FALvnBJRSBZbE8lwMQ9Mcxm2Wb+a2DUKOYbhwQZ227Es2vmaZbXTYUhoDuw2
8fbme9XWmvyc7SxBdZlS54Sf/XctFe1Y0P40ZqHIejM7BuG1i6lnEBESbtKs0rVk
gE2IGjMZIJzo2j5FPDQpzSk2C7KXo9qnrXFcDT97dDroOm6d8yuwpfoX5Nz5NT7y
msOirIv2Y9mYIcbgWyslZaKF3LAF49A=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:53 2025 by rpki-client