
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9ff31124-c2e8-33df-be1e-44262bd49208.roa
File: 9ff31124-c2e8-33df-be1e-44262bd49208.roa (raw, json)
Hash identifier: UOTBKpWxyDHnz22+6r5MLVIlTze1kY4s6c33a9Fz8Bc=
Subject key identifier: 9A:E2:26:76:EE:A8:C6:D9:79:29:DF:44:9D:73:88:C7:5F:1D:1E:B9
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584B9B3CFA727DEA2D9612513000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9ff31124-c2e8-33df-be1e-44262bd49208.roa
Signing time: Wed 22 Oct 2025 13:00:38 +0000
ROA not before: Wed 22 Oct 2025 13:00:38 +0000
ROA not after: Tue 20 Jan 2026 14:00:38 +0000
asID: 62044
IP address blocks: 165.225.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9b:3c:fa:72:7d:ea:2d:96:12:51:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Oct 22 13:00:38 2025 GMT
Not After : Jan 20 14:00:38 2026 GMT
Subject: CN=e2e20d55-3998-4a0d-9520-509f5e96a552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:ba:42:45:38:56:6d:60:0d:82:42:b6:db:
bf:c7:ad:0c:17:d4:87:46:66:e6:07:8f:03:40:9c:
9e:41:26:7f:f6:08:b2:bc:62:af:14:a1:5a:f8:f5:
db:cb:72:fc:a4:35:f4:1c:d2:ba:82:cf:e0:a0:a9:
2d:65:9e:3c:cd:b0:00:4a:d9:7a:a2:83:d1:16:c3:
26:5a:56:b6:06:80:97:69:7f:f6:75:51:67:8e:0b:
3d:32:98:9f:98:eb:83:7d:7e:e2:12:e6:b9:e8:5b:
11:46:49:b9:e4:c3:b6:c4:c8:92:76:55:d0:dc:81:
b8:40:cf:74:e3:f2:1b:fb:c3:8d:40:a0:75:4c:52:
ca:aa:c6:c0:35:8a:12:db:e4:42:b1:d3:e6:36:05:
3e:a7:81:48:9a:15:03:16:ce:a6:ea:37:ea:75:c0:
f2:2a:5a:8a:6e:02:ba:0a:1d:94:f2:4f:ee:82:1b:
20:03:cb:98:18:98:2b:1b:f4:75:99:9f:61:00:a8:
1a:10:fc:80:d3:3b:11:74:ab:7f:d7:69:83:06:b9:
3f:b5:54:9e:4f:51:06:a2:c6:66:c7:a3:6d:69:76:
fa:c6:bf:9d:6d:78:e4:31:53:74:25:06:c0:5f:f5:
00:dd:c7:3e:f6:19:73:24:03:83:85:be:34:a7:60:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:26:76:EE:A8:C6:D9:79:29:DF:44:9D:73:88:C7:5F:1D:1E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9ff31124-c2e8-33df-be1e-44262bd49208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
165.225.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:8d:d2:6e:22:26:db:8c:a3:a7:07:e6:32:75:9e:28:60:f2:
71:4e:d6:25:e6:e8:95:a9:ec:f8:28:2b:9d:c2:12:8d:ba:4d:
e8:82:e7:37:21:3f:c8:fd:59:e8:1f:92:cc:f5:ff:15:ad:19:
ec:c7:82:2b:cd:32:e9:36:bf:1e:82:03:48:0b:eb:c1:ab:25:
09:77:9d:f2:63:85:bf:03:e2:47:8e:10:5a:74:a8:d1:8e:0c:
ed:bf:96:5d:fd:97:aa:cd:fa:5e:fc:f2:61:cb:63:37:63:60:
e6:df:e6:c7:3c:58:ed:13:ea:d6:8c:58:e2:83:b8:f8:a8:15:
ad:a0:71:5b:8b:e0:51:cd:5b:e3:2c:0a:e0:3c:f4:a3:98:43:
42:cc:0b:9d:f7:6d:87:83:8c:f9:b7:0b:2b:78:f5:b4:71:44:
5a:84:e2:4d:ab:75:41:9e:2e:3f:c5:bc:5f:a6:63:5a:2d:9d:
c3:94:1a:8d:c4:b7:ef:b8:88:f4:68:a4:f8:ca:9c:59:2a:86:
f5:69:11:af:f2:8c:ca:67:9f:7d:b7:16:c8:a6:05:c2:e1:21:
41:04:53:e1:bd:8d:a4:26:b5:f2:b6:d3:06:68:d8:96:39:59:
a1:08:2d:92:42:3f:30:ce:05:28:fe:eb:fc:7c:ba:5a:06:f0:
7f:d2:15:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPpyfeotlhJRMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
ZTJlMjBkNTUtMzk5OC00YTBkLTk1MjAtNTA5ZjVlOTZhNTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloe6QkU4Vm1gDYJCttu/x60MF9SHRmbmB48D
QJyeQSZ/9giyvGKvFKFa+PXby3L8pDX0HNK6gs/goKktZZ48zbAAStl6ooPRFsMm
Wla2BoCXaX/2dVFnjgs9MpifmOuDfX7iEua56FsRRkm55MO2xMiSdlXQ3IG4QM90
4/Ib+8ONQKB1TFLKqsbANYoS2+RCsdPmNgU+p4FImhUDFs6m6jfqdcDyKlqKbgK6
Ch2U8k/ughsgA8uYGJgrG/R1mZ9hAKgaEPyA0zsRdKt/12mDBrk/tVSeT1EGosZm
x6NtaXb6xr+dbXjkMVN0JQbAX/UA3cc+9hlzJAODhb40p2DxvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJriJnbuqMbZeSnfRJ1ziMdfHR65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOWZmMzExMjQtYzJlOC0z
M2RmLWJlMWUtNDQyNjJiZDQ5MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeFsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+N0m4iJtuMo6cH5jJ1nihg8nFO1iXm6JWp7PgoK53CEo26TeiC5zch
P8j9Wegfksz1/xWtGezHgivNMuk2vx6CA0gL68GrJQl3nfJjhb8D4keOEFp0qNGO
DO2/ll39l6rN+l788mHLYzdjYObf5sc8WO0T6taMWOKDuPioFa2gcVuL4FHNW+Ms
CuA89KOYQ0LMC533bYeDjPm3Cyt49bRxRFqE4k2rdUGeLj/FvF+mY1otncOUGo3E
t++4iPRopPjKnFkqhvVpEa/yjMpnn323FsimBcLhIUEEU+G9jaQmtfK20wZo2JY5
WaEILZJCPzDOBSj+6/x8uloG8H/SFSw=
-----END CERTIFICATE-----
Generated at Thu Oct 23 08:25:39 2025 by rpki-client