
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa
File: be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa (raw, json)
Hash identifier: l8MhSqrPTgI73Kb1/kWquSditCCwV0b5zff2GqYS8T8=
Subject key identifier: 84:45:00:AB:FA:66:BC:90:70:39:3D:B1:F1:5A:44:17:E7:C8:F5:02
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584AFC0DC1AADB76B0148A08CBA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa
Signing time: Tue 26 Aug 2025 12:32:11 +0000
ROA not before: Tue 26 Aug 2025 12:32:11 +0000
ROA not after: Mon 24 Nov 2025 13:32:11 +0000
asID: 397196
IP address blocks: 192.54.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fc:0d:c1:aa:db:76:b0:14:8a:08:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 12:32:11 2025 GMT
Not After : Nov 24 13:32:11 2025 GMT
Subject: CN=6151e52e-58e0-4e74-9b81-1c683d2c7a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:d7:d6:da:62:4b:40:6e:bd:69:69:03:b6:
f3:54:16:69:46:64:06:33:17:fd:49:3d:97:83:af:
b7:2f:4e:2b:df:a1:8b:ea:5f:65:4f:96:65:2e:6e:
09:5b:3a:26:c6:93:58:34:d4:c9:ca:b7:bc:42:dc:
65:97:b0:6e:92:41:2d:d5:14:b7:03:83:4f:e5:65:
96:33:08:20:ad:86:4e:e8:2e:c2:6e:85:12:7a:f5:
4e:ff:65:8f:cd:31:55:17:cd:a5:24:60:1f:b4:63:
63:5c:f6:76:a7:3a:19:38:c2:b1:ee:00:ee:d7:ed:
4f:b5:76:48:0c:44:83:16:7c:6a:cd:34:76:a6:79:
ef:48:0a:3d:e1:2a:a4:2d:f7:ab:62:d6:4d:f8:86:
6a:a0:54:bd:fe:0c:2d:bd:03:1a:3f:be:fe:6b:05:
6d:47:b3:79:e8:5b:5a:38:99:e2:9d:30:4c:b9:19:
4b:61:ae:b8:b0:ea:db:93:12:7c:b2:e1:e2:ac:b8:
ef:49:25:b9:70:a4:77:04:c5:e2:a7:ee:b2:7b:c2:
e5:eb:45:e6:5b:58:3b:64:d3:46:fe:9f:4e:b4:18:
61:e1:a5:c8:d8:3d:ce:7d:f4:5d:39:07:aa:3d:43:
da:aa:bc:b9:0e:86:95:dc:30:dd:4b:82:25:37:dc:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:00:AB:FA:66:BC:90:70:39:3D:B1:F1:5A:44:17:E7:C8:F5:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.54.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ef:88:d9:97:d4:11:34:60:d4:19:f6:50:3f:00:e3:c2:76:
e6:7e:9e:dc:d3:0f:dd:14:52:36:18:1c:86:51:64:4b:6e:d7:
74:de:b0:25:80:80:50:5c:fc:2c:2c:40:f1:a1:00:79:73:7e:
49:8a:67:9e:9f:ca:7b:1b:db:39:3a:b6:de:9c:07:40:e0:d6:
8f:02:b6:4c:ef:a5:92:52:c9:6e:ff:c4:4d:08:cd:29:a0:cd:
9d:f1:ff:c5:a5:be:6e:8f:37:cb:75:1c:24:95:cd:83:f7:16:
72:aa:1a:7f:c0:67:0d:ab:98:12:ff:72:ce:04:a0:0a:ae:59:
b1:53:d2:6b:c1:76:18:fb:28:0b:16:9e:6c:d2:a3:a8:c0:c8:
1e:9b:61:c8:70:9e:58:66:78:5f:3e:5c:ed:8f:4c:e1:7b:5b:
a6:a8:8d:92:c3:1e:47:a2:05:49:e9:79:d1:73:a0:88:66:54:
98:41:85:dc:fa:2b:5b:ba:36:95:29:6f:30:b5:8e:fd:e0:88:
ec:ca:c3:b1:94:aa:b6:59:7c:a0:5e:88:3b:92:59:16:c0:b0:
42:98:0a:89:93:ac:b7:a0:ac:05:68:df:19:51:c0:f4:69:15:
b0:ff:bc:08:4f:11:cb:88:15:6e:cc:6c:e0:86:2e:04:b9:23:
fe:4a:63:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcGq23awFIoIy6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNjEyMzIxMVoXDTI1MTEyNDEzMzIxMVowLzEtMCsGA1UEAxMk
NjE1MWU1MmUtNThlMC00ZTc0LTliODEtMWM2ODNkMmM3YTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssvX1tpiS0BuvWlpA7bzVBZpRmQGMxf9ST2X
g6+3L04r36GL6l9lT5ZlLm4JWzomxpNYNNTJyre8Qtxll7BukkEt1RS3A4NP5WWW
MwggrYZO6C7CboUSevVO/2WPzTFVF82lJGAftGNjXPZ2pzoZOMKx7gDu1+1PtXZI
DESDFnxqzTR2pnnvSAo94SqkLferYtZN+IZqoFS9/gwtvQMaP77+awVtR7N56Fta
OJninTBMuRlLYa64sOrbkxJ8suHirLjvSSW5cKR3BMXip+6ye8Ll60XmW1g7ZNNG
/p9OtBhh4aXI2D3OffRdOQeqPUPaqry5DoaV3DDdS4IlN9wLbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRFAKv6ZryQcDk9sfFaRBfnyPUCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmUxN2QyY2QtNmUyNy0z
MzEzLTljYzQtNzUyMmNlYjg2OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7viNmX1BE0YNQZ9lA/AOPCduZ+ntzTD90UUjYYHIZRZEtu13TesCWA
gFBc/CwsQPGhAHlzfkmKZ56fynsb2zk6tt6cB0Dg1o8CtkzvpZJSyW7/xE0IzSmg
zZ3x/8Wlvm6PN8t1HCSVzYP3FnKqGn/AZw2rmBL/cs4EoAquWbFT0mvBdhj7KAsW
nmzSo6jAyB6bYchwnlhmeF8+XO2PTOF7W6aojZLDHkeiBUnpedFzoIhmVJhBhdz6
K1u6NpUpbzC1jv3giOzKw7GUqrZZfKBeiDuSWRbAsEKYComTrLegrAVo3xlRwPRp
FbD/vAhPEcuIFW7MbOCGLgS5I/5KY+0=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:22 2025 by rpki-client