
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/7afefba0-3caa-3b07-80ce-d673dc138967.roa
File: 7afefba0-3caa-3b07-80ce-d673dc138967.roa (raw, json)
Hash identifier: IGCHOwSy+B2ST+x6Bb+PkFY6MxH6hQip1ckD5/3KxYk=
Subject key identifier: F9:84:F6:9E:FD:EC:7B:02:0F:13:05:FE:5C:89:90:B4:54:B5:38:47
Certificate issuer: /CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
Certificate serial: 010D0C9F4328584BAD624DDBC4304A0791F8C400
Authority key identifier: B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/7afefba0-3caa-3b07-80ce-d673dc138967.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 46392
IP address blocks: 216.215.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:4d:db:c4:30:4a:07:91:f8:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=ebd8de21-11fd-4074-b806-bccd1f071ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:0a:b9:50:9a:52:83:6a:49:c4:cf:d6:62:
cd:28:4c:ea:f6:35:b9:29:20:dc:76:47:3f:eb:2d:
40:c7:39:5c:ee:21:3c:d1:c4:55:c8:51:a0:bf:39:
59:5f:b2:a2:5f:79:0b:93:12:b0:f5:02:9e:01:8b:
d7:e9:5e:38:50:ef:7e:66:bf:f5:12:de:87:53:63:
ca:aa:c9:86:ca:e5:aa:25:38:65:be:2c:c7:cc:69:
a2:70:17:23:e1:6c:ef:8f:33:f1:e7:70:40:71:39:
42:fa:27:2d:d5:c0:af:41:56:07:9c:a9:d2:61:be:
02:54:f8:8d:b3:1c:9f:5b:58:06:28:7c:82:41:1b:
e0:ca:e9:51:ef:b6:a4:29:f1:9f:77:96:51:e7:f6:
01:e2:c4:ee:8b:90:d8:a7:99:58:8c:54:51:23:5d:
d1:be:ac:ef:6c:b9:03:b9:c7:ff:59:6b:f8:8e:49:
f8:57:8d:b9:a7:6d:90:f9:42:09:42:5c:cd:32:7f:
76:07:94:1c:a2:91:7c:6e:ff:6f:dc:3e:ca:c8:7e:
85:d7:87:a8:a5:d5:43:93:47:f4:87:b0:2e:f8:23:
06:19:e4:83:eb:2f:e5:7a:56:18:93:6f:9b:18:69:
27:b8:ee:d2:11:bd:3b:c0:b1:1d:92:7a:c7:78:3e:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:F6:9E:FD:EC:7B:02:0F:13:05:FE:5C:89:90:B4:54:B5:38:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/7afefba0-3caa-3b07-80ce-d673dc138967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl
X509v3 Authority Key Identifier:
keyid:B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.215.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:88:6c:2c:3d:06:f8:fb:ca:ac:1e:37:dc:2f:42:bb:7f:82:
d6:a1:90:52:97:90:99:13:08:7e:ff:74:f5:ee:af:22:ab:96:
05:34:e3:4c:dc:b1:20:5f:a6:95:f3:3e:ae:a8:d7:cf:59:97:
6f:ea:37:c0:bc:d8:9c:7a:c8:1c:be:07:39:6e:0b:fd:e2:9e:
fe:df:5d:44:50:93:ce:0f:5e:3d:5b:0b:44:a8:ed:0c:a0:44:
31:04:9b:bc:35:0a:92:ea:2c:0f:ac:bf:a4:f5:b5:a7:6a:9c:
be:de:17:28:93:9f:2e:44:9f:13:70:51:51:d2:ca:ef:25:71:
82:fa:8b:c3:a5:61:04:55:50:67:d5:59:81:82:35:d0:79:bb:
ea:77:26:67:fa:dd:5a:ac:31:91:7b:ef:d4:2b:3a:4f:9f:9a:
58:44:44:d7:2b:69:ba:99:d4:71:9e:1b:4f:3f:fa:96:b2:33:
9a:a9:c9:b5:a6:5b:14:d6:1d:a0:57:24:4d:2e:c6:ca:99:f4:
37:7e:5b:6d:62:4a:f0:8b:93:03:09:51:21:2f:e7:1d:9a:fa:
9e:35:39:ba:db:13:31:64:2f:c6:da:65:37:33:2f:36:0d:da:
14:b7:18:30:b9:2c:3c:87:48:5f:8a:b6:97:95:ff:f0:4f:4b:
69:16:3d:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYk3bxDBKB5H4xAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjliNzRjNGItNGYzNy00NTk4LWFkMDktYTAwM2EyZTEx
ZmQzMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZWJkOGRlMjEtMTFmZC00MDc0LWI4MDYtYmNjZDFmMDcxZWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitQKuVCaUoNqScTP1mLNKEzq9jW5KSDcdkc/
6y1Axzlc7iE80cRVyFGgvzlZX7KiX3kLkxKw9QKeAYvX6V44UO9+Zr/1Et6HU2PK
qsmGyuWqJThlvizHzGmicBcj4WzvjzPx53BAcTlC+ict1cCvQVYHnKnSYb4CVPiN
sxyfW1gGKHyCQRvgyulR77akKfGfd5ZR5/YB4sTui5DYp5lYjFRRI13RvqzvbLkD
ucf/WWv4jkn4V425p22Q+UIJQlzNMn92B5QcopF8bv9v3D7KyH6F14eopdVDk0f0
h7Au+CMGGeSD6y/lelYYk2+bGGknuO7SEb07wLEdknrHeD48MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmE9p797HsCDxMF/lyJkLRUtThHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOWI3
NGM0Yi00ZjM3LTQ1OTgtYWQwOS1hMDAzYTJlMTFmZDMvN2FmZWZiYTAtM2NhYS0z
YjA3LTgwY2UtZDY3M2RjMTM4OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjliNzRjNGItNGYzNy00NTk4LWFk
MDktYTAwM2EyZTExZmQzLzI5Yjc0YzRiLTRmMzctNDU5OC1hZDA5LWEwMDNhMmUx
MWZkMy5jcmwwHwYDVR0jBBgwFoAUtWIEdiCn3eRA+faUkH8FtJwa7IswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOWI3NGM0Yi00ZjM3LTQ1OTgtYWQwOS1hMDAz
YTJlMTFmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nc+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeIbCw9Bvj7yqweN9wvQrt/gtahkFKXkJkTCH7/dPXuryKrlgU040zc
sSBfppXzPq6o189Zl2/qN8C82Jx6yBy+BzluC/3inv7fXURQk84PXj1bC0So7Qyg
RDEEm7w1CpLqLA+sv6T1tadqnL7eFyiTny5EnxNwUVHSyu8lcYL6i8OlYQRVUGfV
WYGCNdB5u+p3Jmf63VqsMZF779QrOk+fmlhERNcrabqZ1HGeG08/+payM5qpybWm
WxTWHaBXJE0uxsqZ9Dd+W21iSvCLkwMJUSEv5x2a+p41ObrbEzFkL8baZTczLzYN
2hS3GDC5LDyHSF+KtpeV//BPS2kWPTc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:35:13 2025 by rpki-client