
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa
File: 56068d5f-3e33-348e-92b0-c270a8e69fb3.roa (raw, json)
Hash identifier: +8l4C8lQsOWRRI2o1HjPqnlBFRiCuvI5Z/F+q2gi2N0=
Subject key identifier: 64:72:11:93:D9:B3:24:1B:BB:72:B6:0C:D0:AE:38:79:28:C9:3A:A4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA7CD03A3F6AA96197D221910
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 108.162.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cd:03:a3:f6:aa:96:19:7d:22:19:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=8ea72722-a36b-414f-838c-88987ff86ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:5e:42:70:04:0f:34:3e:99:02:fa:7d:8d:
fe:b7:e1:db:7a:b8:ef:10:96:92:21:f5:ba:83:85:
4e:f6:8e:24:d1:74:d4:80:4e:5a:03:d9:3a:27:bb:
69:b1:ec:d1:e2:f4:a3:c5:c1:6d:72:74:0b:b7:59:
f0:9d:c8:79:5d:3d:10:8b:41:96:4d:bd:fc:1f:73:
00:53:0f:c0:18:97:d0:b8:8b:8c:52:bb:74:15:50:
d3:8e:b6:0a:3d:de:82:a9:ed:64:da:83:35:81:26:
55:e6:7c:6c:fb:57:a1:41:be:0a:57:32:dc:7c:47:
bb:14:38:c5:a9:e9:b2:76:fe:e8:15:e4:45:46:84:
3d:e6:fe:0e:f4:ee:69:f2:41:fa:47:50:37:1e:5d:
d6:28:51:b0:68:bc:60:56:47:c5:db:5d:0a:2b:fb:
91:66:ee:8a:48:6e:b5:00:74:22:c7:71:55:dc:71:
91:28:64:bf:99:2f:b8:ad:fa:11:a4:94:af:d4:b3:
c7:4d:4f:b9:e2:79:1f:5d:8b:a5:af:02:8e:76:a0:
04:06:72:1f:2b:6c:9a:6c:b0:75:ed:d2:46:ca:b3:
85:ad:01:b5:c5:35:e4:0e:44:82:4b:c4:50:fc:61:
af:c8:53:c2:81:b9:7b:90:a1:fc:60:63:f7:26:8e:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:11:93:D9:B3:24:1B:BB:72:B6:0C:D0:AE:38:79:28:C9:3A:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:7a:a4:91:1d:b4:d1:4e:63:6f:d1:66:fc:e9:bb:8c:93:21:
dd:ad:68:6a:b2:3c:34:12:88:42:c9:6e:33:e2:ef:0b:ef:48:
ec:b4:d1:20:a9:71:c6:93:38:d1:42:88:ea:44:39:aa:69:7b:
e4:95:b3:ff:42:48:df:fb:a3:10:b0:af:45:e8:54:8f:ce:56:
16:e3:46:cd:2a:5f:e9:54:57:09:1a:fc:2f:7e:5a:4b:f3:72:
7b:3f:b4:05:f5:59:1c:9b:d6:83:ef:d0:49:9f:a2:9a:4b:33:
b6:e6:d1:e7:d9:63:e0:ee:25:92:c9:2a:f6:69:b9:02:db:f4:
42:4d:2d:cf:3b:68:a5:90:3c:84:32:11:75:62:e4:31:e1:9e:
97:9c:ce:00:a1:dc:ce:78:53:ea:dd:2e:48:63:17:9e:e2:d5:
f3:bf:3c:43:fc:7b:7a:a9:bb:8a:e2:cd:5f:d8:f2:08:5e:ea:
96:ad:31:7f:ea:4c:04:65:8a:8f:32:d5:db:ea:f8:61:bb:d6:
ae:d4:f0:73:18:7f:82:c2:35:62:3b:74:0b:f0:4d:91:3f:93:
84:3d:46:45:ad:38:ea:ad:bf:0f:76:b1:60:bb:42:49:15:4c:
18:40:00:69:62:dc:f6:43:b3:0a:73:e3:fd:59:ec:50:29:eb:
3c:4e:24:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQOj9qqWGX0iGRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
OGVhNzI3MjItYTM2Yi00MTRmLTgzOGMtODg5ODdmZjg2ZGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrNeQnAEDzQ+mQL6fY3+t+HberjvEJaSIfW6
g4VO9o4k0XTUgE5aA9k6J7tpsezR4vSjxcFtcnQLt1nwnch5XT0Qi0GWTb38H3MA
Uw/AGJfQuIuMUrt0FVDTjrYKPd6Cqe1k2oM1gSZV5nxs+1ehQb4KVzLcfEe7FDjF
qemydv7oFeRFRoQ95v4O9O5p8kH6R1A3Hl3WKFGwaLxgVkfF210KK/uRZu6KSG61
AHQix3FV3HGRKGS/mS+4rfoRpJSv1LPHTU+54nkfXYulrwKOdqAEBnIfK2yabLB1
7dJGyrOFrQG1xTXkDkSCS8RQ/GGvyFPCgbl7kKH8YGP3Jo68VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGRyEZPZsyQbu3K2DNCuOHkoyTqkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTYwNjhkNWYtM2UzMy0z
NDhlLTkyYjAtYzI3MGE4ZTY5ZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB16pJEdtNFOY2/RZvzpu4yTId2taGqyPDQSiELJbjPi7wvvSOy00SCp
ccaTONFCiOpEOappe+SVs/9CSN/7oxCwr0XoVI/OVhbjRs0qX+lUVwka/C9+Wkvz
cns/tAX1WRyb1oPv0EmfoppLM7bm0efZY+DuJZLJKvZpuQLb9EJNLc87aKWQPIQy
EXVi5DHhnpeczgCh3M54U+rdLkhjF57i1fO/PEP8e3qpu4rizV/Y8ghe6patMX/q
TARlio8y1dvq+GG71q7U8HMYf4LCNWI7dAvwTZE/k4Q9RkWtOOqtvw92sWC7QkkV
TBhAAGli3PZDswpz4/1Z7FAp6zxOJII=
-----END CERTIFICATE-----
Generated at Sat Nov 1 12:32:44 2025 by rpki-client