
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1cb972a-829e-361f-a2e0-9112a7813d46.roa
File: d1cb972a-829e-361f-a2e0-9112a7813d46.roa (raw, json)
Hash identifier: Yykoa8FbGtcB4hFgHg3yQ/kW2o+rWfUJKbP0homDAUQ=
Subject key identifier: 4B:B5:4A:8E:DF:0D:F6:3F:21:3C:CF:9D:D1:9C:3E:C7:30:55:74:EC
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B583CB2D0BDE177D5AA9FDC80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1cb972a-829e-361f-a2e0-9112a7813d46.roa
Signing time: Sun 28 Sep 2025 13:00:41 +0000
ROA not before: Sun 28 Sep 2025 13:00:41 +0000
ROA not after: Sat 27 Dec 2025 14:00:41 +0000
asID: 36619
IP address blocks: 198.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:58:3c:b2:d0:bd:e1:77:d5:aa:9f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 28 13:00:41 2025 GMT
Not After : Dec 27 14:00:41 2025 GMT
Subject: CN=6509025c-9ff8-4bfd-acf6-f944ed7df91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:1f:39:23:15:32:d6:4e:64:be:6b:11:1c:
5a:23:9f:a8:1f:a5:6f:d6:cf:8b:98:45:e2:26:f0:
ed:59:92:35:65:16:fe:7c:8e:b8:8b:f7:ef:33:1e:
73:07:97:2c:04:c8:8e:05:e5:ca:2c:61:98:81:28:
6b:4f:3c:90:c5:39:4d:0b:a1:88:84:fb:69:be:64:
a4:4b:0e:67:64:b8:73:11:cf:42:24:65:01:9b:bc:
87:9b:53:2a:7b:3f:45:4f:3f:ca:3c:bc:75:eb:2d:
27:11:4f:06:08:08:0a:83:9a:3a:eb:dc:1f:6e:e0:
c5:7e:82:e7:8b:b0:7b:ea:81:bd:6b:84:97:6b:9c:
64:04:3c:6c:79:f2:fa:2b:07:4a:c6:37:8a:e5:24:
9e:87:54:2f:70:64:c4:7a:b7:03:bb:17:35:d3:da:
72:04:87:9b:20:57:45:2f:21:b5:d2:0b:1a:38:5d:
c4:a0:5f:cb:ff:0d:bb:d7:11:9a:09:f0:02:c1:10:
74:20:ae:47:d3:75:bd:22:a8:9b:c5:bf:d5:bd:e5:
12:e5:44:37:44:da:a0:d3:1c:94:51:c2:ad:a1:6a:
1c:fe:11:43:3a:df:52:84:1b:3d:c8:f4:ef:0b:b5:
47:88:05:e7:a2:c3:c0:88:65:44:18:c6:16:7c:08:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:4A:8E:DF:0D:F6:3F:21:3C:CF:9D:D1:9C:3E:C7:30:55:74:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1cb972a-829e-361f-a2e0-9112a7813d46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:b0:9a:bb:b0:48:bf:d1:94:93:fa:03:6d:2d:73:65:bf:97:
65:dd:72:3d:53:96:ee:4b:2e:20:f9:45:4b:3f:89:8a:52:7c:
8f:7b:84:07:61:0c:53:c4:d0:a3:db:31:b6:cd:c7:0d:6f:c0:
a6:6c:12:5d:be:23:ac:d6:d0:93:09:b9:71:53:91:e6:6b:df:
25:24:70:ea:8b:c3:22:6a:8a:c2:92:51:3f:65:cb:a6:2e:db:
e8:81:e7:5c:cf:5f:65:54:5e:4a:63:70:46:21:3f:ec:46:2d:
94:83:2a:d7:81:af:d5:9b:d5:f5:9d:8a:a2:5d:48:b3:7a:5a:
05:20:96:5d:0e:7b:04:0f:ea:3c:ef:8c:d6:24:f9:8f:10:27:
65:74:ef:ae:53:71:8c:d3:2e:ba:a6:91:bc:c2:5f:c7:35:1b:
26:8e:c9:cf:03:25:b7:40:d5:60:2b:bf:f2:4d:8b:52:05:6a:
4e:85:f9:27:42:87:c5:cb:01:90:eb:22:b2:b2:b9:41:2a:35:
3a:fe:30:b5:ae:2d:b0:26:c5:ff:a3:ca:b3:d3:90:da:94:b6:
9a:a2:d7:ab:eb:03:61:2d:e5:a7:74:04:a8:99:db:b8:2d:1d:
39:3d:bd:32:d4:4d:5b:0c:00:22:01:1e:b7:3a:46:10:7d:ea:
48:e9:21:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLLQveF31aqf3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NjUwOTAyNWMtOWZmOC00YmZkLWFjZjYtZjk0NGVkN2RmOTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eMfOSMVMtZOZL5rERxaI5+oH6Vv1s+LmEXi
JvDtWZI1ZRb+fI64i/fvMx5zB5csBMiOBeXKLGGYgShrTzyQxTlNC6GIhPtpvmSk
Sw5nZLhzEc9CJGUBm7yHm1Mqez9FTz/KPLx16y0nEU8GCAgKg5o669wfbuDFfoLn
i7B76oG9a4SXa5xkBDxsefL6KwdKxjeK5SSeh1QvcGTEercDuxc109pyBIebIFdF
LyG10gsaOF3EoF/L/w271xGaCfACwRB0IK5H03W9Iqibxb/VveUS5UQ3RNqg0xyU
UcKtoWoc/hFDOt9ShBs9yPTvC7VHiAXnosPAiGVEGMYWfAix9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEu1So7fDfY/ITzPndGcPscwVXTsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFjYjk3MmEtODI5ZS0z
NjFmLWEyZTAtOTExMmE3ODEzZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+wmruwSL/RlJP6A20tc2W/l2Xdcj1Tlu5LLiD5RUs/iYpSfI97hAdh
DFPE0KPbMbbNxw1vwKZsEl2+I6zW0JMJuXFTkeZr3yUkcOqLwyJqisKSUT9ly6Yu
2+iB51zPX2VUXkpjcEYhP+xGLZSDKteBr9Wb1fWdiqJdSLN6WgUgll0OewQP6jzv
jNYk+Y8QJ2V0765TcYzTLrqmkbzCX8c1GyaOyc8DJbdA1WArv/JNi1IFak6F+SdC
h8XLAZDrIrKyuUEqNTr+MLWuLbAmxf+jyrPTkNqUtpqi16vrA2Et5ad0BKiZ27gt
HTk9vTLUTVsMACIBHrc6RhB96kjpIWk=
-----END CERTIFICATE-----
Generated at Wed Oct 29 20:25:12 2025 by rpki-client