
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
File: a87435cf-a6f2-3201-8a93-631966f582c4.roa (raw, json)
Hash identifier: /5xW2snqwot1kxGMOlbbh4iXxi06leunu93s8eHIk/w=
Subject key identifier: 5A:CA:CA:2D:C7:2E:9A:30:81:FB:1E:30:E2:F4:A3:2F:5D:9F:44:E5
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584B99D77D6C29F50D891DF12160
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 16509
IP address blocks: 134.224.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:7d:6c:29:f5:0d:89:1d:f1:21:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=04ab0205-fae1-4ac3-8a58-9de99aa140b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9d:14:0e:aa:4d:be:94:5a:36:30:e2:27:4e:
95:15:1a:f2:d1:a1:5c:7b:08:f7:59:2d:fa:0f:f8:
a4:ab:8b:24:19:19:b3:86:4a:77:ab:11:27:31:29:
00:6a:62:dc:e2:9c:0c:b8:c1:95:2d:d7:07:5a:3a:
f1:fc:8c:65:4c:64:f4:4e:48:29:10:ab:78:4d:88:
e3:c4:c4:d8:bd:65:42:a6:c8:6b:83:ba:89:14:03:
61:04:95:d5:fa:99:66:b5:26:61:c4:39:1b:92:f2:
2d:68:a7:91:e2:31:61:d1:e5:f5:13:58:78:be:0d:
8a:fb:00:53:7d:dc:60:33:8c:d3:37:45:6c:f5:d5:
4d:ed:aa:8b:73:94:9f:7b:58:81:df:e1:d1:17:49:
21:82:7a:b6:66:f6:87:f8:77:59:5f:6d:00:26:9f:
ea:c6:4b:6f:84:d2:7a:1b:8f:17:aa:09:a9:0c:e4:
8c:f5:fe:b3:85:94:2b:92:f5:92:af:c1:5d:72:3a:
dc:4c:e9:6e:1e:2a:eb:a0:f0:9b:0f:22:9a:eb:62:
59:3f:0e:a4:ad:df:14:16:21:af:ba:4b:5a:f6:3b:
18:4a:70:ef:7f:6f:f8:e0:cd:ca:c2:5b:1d:7c:0c:
d8:29:e0:36:b5:01:ec:eb:f8:8b:70:d2:7d:3a:a9:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CA:CA:2D:C7:2E:9A:30:81:FB:1E:30:E2:F4:A3:2F:5D:9F:44:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
134.224.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:b0:d3:da:ff:51:44:ef:b6:38:1b:16:f1:74:8e:40:75:7e:
93:c3:f1:2f:7c:95:81:85:26:4a:a2:6d:26:f3:81:60:99:11:
7a:4b:46:5c:92:0a:55:00:ea:eb:26:17:dd:96:2b:8c:f5:2d:
10:90:1b:a3:08:bd:5b:c8:c9:bd:42:98:fb:c0:3e:aa:80:61:
84:b8:7b:39:bc:c7:9f:58:ce:30:c6:0b:c9:90:cb:97:a6:fc:
19:dd:ef:55:a6:59:fe:ec:79:b4:29:00:c7:67:a4:3d:a4:8c:
4b:57:43:1d:08:b6:ce:31:d2:f3:b3:f6:27:8d:b6:27:cd:b9:
2d:92:e4:52:c2:ac:80:81:3b:23:e9:f8:d1:9f:8a:c2:d2:70:
4c:3e:ae:71:d1:42:0a:9c:74:f2:16:7c:65:cb:b8:b0:8e:e6:
c8:6f:1d:36:96:ae:82:b7:c4:40:3b:c9:1c:d6:89:b4:66:fd:
b7:da:4c:15:b6:ac:d0:43:1f:df:2c:9e:a1:2c:b6:60:e8:2d:
2d:c3:f3:b2:0a:49:f3:74:24:00:02:a9:7f:7b:97:e0:bf:23:
dc:c0:ba:41:98:c8:f8:75:6e:4a:4d:ce:59:69:01:68:a3:09:
3d:ca:12:9a:6a:d4:97:e1:a3:b1:d9:41:47:81:85:80:3a:20:
b5:b9:cb:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ131sKfUNiR3xIWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
MDRhYjAyMDUtZmFlMS00YWMzLThhNTgtOWRlOTlhYTE0MGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Z0UDqpNvpRaNjDiJ06VFRry0aFcewj3WS36
D/ikq4skGRmzhkp3qxEnMSkAamLc4pwMuMGVLdcHWjrx/IxlTGT0TkgpEKt4TYjj
xMTYvWVCpshrg7qJFANhBJXV+plmtSZhxDkbkvItaKeR4jFh0eX1E1h4vg2K+wBT
fdxgM4zTN0Vs9dVN7aqLc5Sfe1iB3+HRF0khgnq2ZvaH+HdZX20AJp/qxktvhNJ6
G48XqgmpDOSM9f6zhZQrkvWSr8FdcjrcTOluHirroPCbDyKa62JZPw6krd8UFiGv
ukta9jsYSnDvf2/44M3KwlsdfAzYKeA2tQHs6/iLcNJ9OqlEPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFrKyi3HLpowgfseMOL0oy9dn0TlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTg3NDM1Y2YtYTZmMi0z
MjAxLThhOTMtNjMxOTY2ZjU4MmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhuBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaw09r/UUTvtjgbFvF0jkB1fpPD8S98lYGFJkqibSbzgWCZEXpLRlyS
ClUA6usmF92WK4z1LRCQG6MIvVvIyb1CmPvAPqqAYYS4ezm8x59YzjDGC8mQy5em
/Bnd71WmWf7sebQpAMdnpD2kjEtXQx0Its4x0vOz9ieNtifNuS2S5FLCrICBOyPp
+NGfisLScEw+rnHRQgqcdPIWfGXLuLCO5shvHTaWroK3xEA7yRzWibRm/bfaTBW2
rNBDH98snqEstmDoLS3D87IKSfN0JAACqX97l+C/I9zAukGYyPh1bkpNzllpAWij
CT3KEppq1Jfho7HZQUeBhYA6ILW5y70=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:50 2025 by rpki-client