
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa
File: ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa (raw, json)
Hash identifier: CEZZIEhgoYDOhFa8fXtVXamJxQlzZchZiHs8sKo8BU8=
Subject key identifier: 66:24:82:6D:03:5B:B4:AA:65:42:2D:11:85:96:65:EC:43:1F:11:67
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B7F52378562378585097FE780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 396581
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:37:85:62:37:85:85:09:7f:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=339728f3-553b-4bb8-a873-35ed59fec4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:ec:f3:e4:da:0e:41:7b:31:8f:32:e6:88:
3c:22:0d:a7:7c:74:76:ad:37:38:f5:bb:4c:bc:dc:
ed:37:5c:56:c6:57:ce:fa:5b:48:6b:ae:fc:1f:89:
77:39:f9:84:3d:96:3b:d5:a3:5f:95:54:9c:3f:7f:
5a:77:0b:46:18:3f:e6:75:07:29:2b:8b:ca:0e:9d:
1f:0e:a2:6e:2a:3e:53:d1:42:4b:7e:0b:5f:e3:b8:
f4:dc:c2:3b:31:ec:1f:88:76:22:05:ea:c1:7c:cf:
5e:48:7e:4c:49:63:b9:08:e1:fd:1a:b5:52:28:3c:
14:d5:4d:48:65:45:75:c6:b1:83:ed:c8:32:d3:14:
35:19:39:8c:ab:19:bb:25:73:e9:22:da:0d:06:c3:
4c:66:cf:86:4d:95:f5:26:ff:84:71:02:62:5f:9b:
73:6a:8c:e5:5c:65:f1:ba:d6:38:58:a2:e9:01:a9:
1b:da:b3:9d:79:6f:c4:93:c8:80:dc:3c:68:18:aa:
15:a7:47:8d:5f:12:e6:70:95:22:a8:57:46:31:54:
3e:4e:28:da:df:50:57:fd:fb:08:85:3a:61:85:5c:
96:09:1c:4d:ce:1e:9c:e6:69:87:13:08:7f:31:84:
8c:df:50:bc:c3:43:f5:b5:f9:aa:17:d3:e1:29:20:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:82:6D:03:5B:B4:AA:65:42:2D:11:85:96:65:EC:43:1F:11:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:0e:47:ac:e1:38:3c:b0:01:74:24:78:56:2d:8a:4d:af:e1:
a9:d9:78:2f:f7:45:ea:58:59:be:4a:e7:9a:a9:af:c4:3a:5e:
b1:f1:22:15:61:1e:ab:4b:43:94:85:fc:a3:ef:b7:f1:b2:5e:
eb:da:bd:6c:2c:b1:cb:ab:71:61:5b:46:9f:93:0c:93:99:92:
67:72:1f:ff:0c:32:30:f9:ed:a2:3b:94:41:e8:23:db:3a:e3:
eb:26:2b:90:19:99:b7:79:e0:7b:56:4c:44:55:d3:bc:85:15:
42:18:22:c5:48:26:55:34:cd:ce:fd:b9:d2:17:7e:21:47:1a:
ec:91:d2:58:e7:5a:ad:e0:5d:6b:30:d5:c5:83:ce:a7:4a:4c:
16:ff:88:c6:db:b1:87:98:06:e0:01:2f:b2:b0:5a:32:60:77:
05:3a:cd:2a:25:91:4d:c0:e4:10:5c:20:39:ff:1a:2c:76:5c:
78:63:e7:57:58:69:c3:f2:20:49:d1:fb:59:85:41:f7:67:2f:
07:df:06:53:18:37:85:6a:bb:06:1e:39:0b:33:e3:74:79:14:
f7:f8:0d:be:4d:29:00:1c:cf:46:14:aa:07:f6:ba:9f:8b:ec:
d9:f2:94:5b:09:29:d5:67:86:b0:b8:f8:d7:65:2e:59:bd:3b:
77:da:31:35
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjeFYjeFhQl/54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
MzM5NzI4ZjMtNTUzYi00YmI4LWE4NzMtMzVlZDU5ZmVjNGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1fs8+TaDkF7MY8y5og8Ig2nfHR2rTc49btM
vNztN1xWxlfO+ltIa678H4l3OfmEPZY71aNflVScP39adwtGGD/mdQcpK4vKDp0f
DqJuKj5T0UJLfgtf47j03MI7MewfiHYiBerBfM9eSH5MSWO5COH9GrVSKDwU1U1I
ZUV1xrGD7cgy0xQ1GTmMqxm7JXPpItoNBsNMZs+GTZX1Jv+EcQJiX5tzaozlXGXx
utY4WKLpAakb2rOdeW/Ek8iA3DxoGKoVp0eNXxLmcJUiqFdGMVQ+Tija31BX/fsI
hTphhVyWCRxNzh6c5mmHEwh/MYSM31C8w0P1tfmqF9PhKSAoIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGYkgm0DW7SqZUItEYWWZexDHxFnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI5YzcyNTktZDczMi0z
NTZhLThjYzItYjVlYWRmYzg3OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAIDkes4Tg8sAF0JHhWLYpNr+Gp2Xgv90XqWFm+Sueaqa/EOl6x8SIV
YR6rS0OUhfyj77fxsl7r2r1sLLHLq3FhW0afkwyTmZJnch//DDIw+e2iO5RB6CPb
OuPrJiuQGZm3eeB7VkxEVdO8hRVCGCLFSCZVNM3O/bnSF34hRxrskdJY51qt4F1r
MNXFg86nSkwW/4jG27GHmAbgAS+ysFoyYHcFOs0qJZFNwOQQXCA5/xosdlx4Y+dX
WGnD8iBJ0ftZhUH3Zy8H3wZTGDeFarsGHjkLM+N0eRT3+A2+TSkAHM9GFKoH9rqf
i+zZ8pRbCSnVZ4awuPjXZS5ZvTt32jE1
-----END CERTIFICATE-----
Generated at Thu Oct 30 03:23:25 2025 by rpki-client