
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/998007a9-861a-3535-a624-dfaaedcb3269.roa
File: 998007a9-861a-3535-a624-dfaaedcb3269.roa (raw, json)
Hash identifier: 0s+gavEof/oCyh8++5E5+6awH9Y22bjlWL8H6UNVhjg=
Subject key identifier: 2C:C9:6D:9E:2C:75:70:33:6B:34:1C:4E:76:04:8F:67:87:E5:AB:A1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BABFD31EEEE991BFE5CD81880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/998007a9-861a-3535-a624-dfaaedcb3269.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.69.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:31:ee:ee:99:1b:fe:5c:d8:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=8164babe-f548-4f7d-94da-851e80ad32c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:1b:28:0e:8a:35:21:fa:12:aa:5e:32:b6:
e3:b7:d4:13:bc:c6:ab:dc:51:0c:4c:5d:a2:02:ff:
1b:d7:3d:05:5a:a6:3b:de:c5:1f:ea:5e:9e:05:a1:
f2:48:29:3b:18:fa:72:2b:f4:90:14:16:42:1b:29:
d2:94:d2:6d:21:f5:48:4e:b2:2c:7b:45:e3:dd:7b:
32:82:a0:75:77:02:07:46:68:c5:a5:f4:87:75:03:
57:42:71:6e:17:07:2d:5d:76:1a:42:29:49:f4:d4:
f1:fe:ae:a6:07:a5:be:68:5c:01:a9:af:af:b4:a6:
bf:2e:2f:ec:31:b2:12:47:92:6c:5b:c0:55:91:c6:
05:9a:fa:26:eb:d3:14:2e:67:12:f4:27:38:3f:e1:
39:2b:aa:41:39:9b:b9:cd:18:8e:00:db:f2:de:c4:
82:ff:cb:83:3c:1f:a7:c9:b5:de:b6:2f:c8:b8:c7:
8c:53:84:83:ad:85:0c:5a:4a:85:e5:10:6e:53:de:
c4:c7:a5:ec:e6:d6:e3:cd:a4:29:1b:2e:e5:4d:96:
1c:f5:d9:b7:3e:8d:00:77:df:c9:43:fa:07:71:51:
a1:10:ae:ea:b7:5c:02:e0:6c:47:e9:b9:cf:95:37:
9f:bb:df:d7:da:90:7b:af:11:e2:35:cb:72:09:40:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C9:6D:9E:2C:75:70:33:6B:34:1C:4E:76:04:8F:67:87:E5:AB:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/998007a9-861a-3535-a624-dfaaedcb3269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:4a:3c:db:b8:e2:df:73:42:05:4b:fc:74:35:a5:a5:b5:ad:
60:ab:46:79:69:28:8c:27:4a:38:91:3a:89:1c:38:57:2a:ab:
25:dd:77:9b:d9:0f:f3:af:fa:5c:6d:ff:cd:4c:52:9c:f9:57:
9b:b1:93:39:4d:5a:59:8f:01:13:ef:1b:a4:83:6f:b3:76:98:
e7:fb:c8:23:28:d9:5a:c0:84:67:d4:e2:44:e6:20:92:47:d0:
1e:72:05:da:3d:29:f7:de:6a:56:25:5c:c8:7f:54:af:75:2b:
37:ed:50:31:53:ce:29:bb:77:5c:1b:ad:b7:fa:ae:15:4d:e5:
e9:61:e2:e7:d4:75:60:ca:a1:2d:20:d3:70:85:71:b1:db:83:
26:3f:7e:72:9c:79:39:d0:e1:fc:39:d9:4d:4f:c3:44:00:a1:
11:8d:75:50:5c:38:77:c8:5b:5e:04:54:2b:6d:37:38:f4:f6:
68:49:78:17:27:f2:e8:fa:80:28:45:b2:99:9e:93:7b:cb:f8:
9c:c3:34:b1:08:f5:5d:65:ff:11:22:1b:25:c3:f8:c5:16:cd:
88:60:7a:49:75:5a:e4:d7:d3:b1:64:9f:cb:7a:e9:03:f7:6f:
7f:ee:47:1a:27:07:c1:c2:32:ca:75:b5:e5:b5:ed:1e:39:a5:
fb:27:81:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/THu7pkb/lzYGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
ODE2NGJhYmUtZjU0OC00ZjdkLTk0ZGEtODUxZTgwYWQzMmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3cbKA6KNSH6EqpeMrbjt9QTvMar3FEMTF2i
Av8b1z0FWqY73sUf6l6eBaHySCk7GPpyK/SQFBZCGynSlNJtIfVITrIse0Xj3Xsy
gqB1dwIHRmjFpfSHdQNXQnFuFwctXXYaQilJ9NTx/q6mB6W+aFwBqa+vtKa/Li/s
MbISR5JsW8BVkcYFmvom69MULmcS9Cc4P+E5K6pBOZu5zRiOANvy3sSC/8uDPB+n
ybXeti/IuMeMU4SDrYUMWkqF5RBuU97Ex6Xs5tbjzaQpGy7lTZYc9dm3Po0Ad9/J
Q/oHcVGhEK7qt1wC4GxH6bnPlTefu9/X2pB7rxHiNctyCUAwxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzJbZ4sdXAzazQcTnYEj2eH5auhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTk4MDA3YTktODYxYS0z
NTM1LWE2MjQtZGZhYWVkY2IzMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5KPNu44t9zQgVL/HQ1paW1rWCrRnlpKIwnSjiROokcOFcqqyXdd5vZ
D/Ov+lxt/81MUpz5V5uxkzlNWlmPARPvG6SDb7N2mOf7yCMo2VrAhGfU4kTmIJJH
0B5yBdo9KffealYlXMh/VK91KzftUDFTzim7d1wbrbf6rhVN5elh4ufUdWDKoS0g
03CFcbHbgyY/fnKceTnQ4fw52U1Pw0QAoRGNdVBcOHfIW14EVCttNzj09mhJeBcn
8uj6gChFspmek3vL+JzDNLEI9V1l/xEiGyXD+MUWzYhgekl1WuTX07Fkn8t66QP3
b3/uRxonB8HCMsp1teW17R45pfsngX8=
-----END CERTIFICATE-----
Generated at Sat Nov 1 12:34:30 2025 by rpki-client