
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
File: 31237730-031c-3a34-8009-f2ad063f0d88.roa (raw, json)
Hash identifier: bVBjTdi3nhfTKHZkgmmN0msvVgGQvY/1AFjK+dA9Y7s=
Subject key identifier: B7:17:98:7C:D3:65:58:05:A5:23:7D:7A:86:BC:6B:F4:F4:CD:F5:7D
Certificate issuer: /CN=85154141-f81d-4a16-94db-ba21a7f28a12
Certificate serial: 010D0C9F4328584ADD66824E82A174695B156E80
Authority key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
Signing time: Fri 15 Aug 2025 13:00:41 +0000
ROA not before: Fri 15 Aug 2025 13:00:41 +0000
ROA not after: Thu 13 Nov 2025 14:00:41 +0000
asID: 53464
IP address blocks: 64.20.212.0/22 maxlen: 24
216.38.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:dd:66:82:4e:82:a1:74:69:5b:15:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85154141-f81d-4a16-94db-ba21a7f28a12
Validity
Not Before: Aug 15 13:00:41 2025 GMT
Not After : Nov 13 14:00:41 2025 GMT
Subject: CN=6d32a557-0b93-4faf-8e52-86546280d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:03:1e:d7:fa:8e:5c:ba:92:32:bf:8c:ec:
30:19:24:2b:d3:e3:70:91:5e:4e:82:a4:9e:2d:61:
26:02:b0:c3:1c:97:ba:ff:b3:52:2e:9f:1c:95:ed:
ea:87:b1:2d:3c:ad:4a:5a:88:f7:ba:03:3c:aa:0d:
69:de:bc:2f:0b:f0:71:c7:2f:54:13:24:6e:80:96:
54:9f:b9:6f:e9:6b:7d:be:f8:70:6d:34:9f:72:bf:
f4:ef:7f:75:6e:38:dd:55:74:f3:47:41:a6:50:dd:
7d:89:ec:00:b3:2d:94:f3:43:a7:ff:e0:f8:67:cc:
4d:58:b8:6b:d6:f8:a3:e4:0c:54:02:29:38:28:cf:
ab:16:c3:1f:b0:2b:8c:6c:2b:57:64:e1:fd:a2:43:
7a:b7:44:68:7c:61:95:ac:5b:53:60:d4:45:5a:26:
7c:40:8e:94:79:d5:36:92:10:2d:f8:e8:43:39:49:
c7:db:b3:cd:0e:83:c2:c5:ae:74:ff:db:33:fb:54:
2b:67:9c:d0:cc:c8:2a:42:80:9b:6f:ab:53:98:7e:
24:79:09:4a:5a:78:43:84:6d:79:f8:b5:4e:e5:20:
57:ba:ca:7f:81:fb:7d:70:fd:81:84:bb:53:48:00:
9c:46:0a:af:b3:88:27:4e:a1:99:cb:91:a9:67:14:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:98:7C:D3:65:58:05:A5:23:7D:7A:86:BC:6B:F4:F4:CD:F5:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl
X509v3 Authority Key Identifier:
keyid:48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.212.0/22
216.38.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:5c:f8:c3:7d:66:d8:20:d0:9d:ed:b5:df:b4:3c:52:70:0b:
d9:34:d1:cc:21:e2:6c:42:70:b6:f7:66:30:15:61:bc:40:df:
7b:a8:2f:ab:61:12:f7:97:8b:f0:52:b9:02:b8:a8:36:28:8b:
c2:70:81:bf:74:cf:cc:2e:4a:ce:76:a8:b2:02:b1:39:74:41:
e8:0c:0c:4f:2d:b2:33:94:33:6c:96:24:78:51:05:3b:81:18:
af:fb:c6:38:3a:e0:d4:a9:72:80:31:d8:51:77:ed:11:7b:ba:
e2:bf:01:b6:9b:00:5e:d2:1f:61:57:91:6b:2e:d6:b5:ce:be:
d6:6f:9e:ff:bd:6d:0e:60:f9:aa:87:0b:d3:5d:16:dc:57:d9:
f6:0f:32:ab:d2:9b:c5:43:c7:ff:3e:b7:95:65:52:84:1f:35:
1c:96:dc:3a:e3:16:a9:96:83:4d:46:1c:2d:ca:2b:21:19:b7:
ae:07:d2:b5:cf:29:02:ca:4b:3e:55:f4:b6:ae:ec:51:fa:2a:
05:63:6f:47:6d:d9:27:63:94:c3:c1:60:6c:b9:57:f9:08:58:
b3:4d:b7:5e:1e:4b:83:80:87:94:aa:4c:e8:2c:df:19:98:17:
b7:a1:85:04:c1:5b:cc:c6:eb:07:ad:17:c1:de:85:71:e4:0d:
dd:c3:71:62
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErdZoJOgqF0aVsVboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxNTQxNDEtZjgxZC00YTE2LTk0ZGItYmEyMWE3ZjI4
YTEyMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
NmQzMmE1NTctMGI5My00ZmFmLThlNTItODY1NDYyODBkODgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zgDHtf6jly6kjK/jOwwGSQr0+NwkV5OgqSe
LWEmArDDHJe6/7NSLp8cle3qh7EtPK1KWoj3ugM8qg1p3rwvC/Bxxy9UEyRugJZU
n7lv6Wt9vvhwbTSfcr/07391bjjdVXTzR0GmUN19iewAsy2U80On/+D4Z8xNWLhr
1vij5AxUAik4KM+rFsMfsCuMbCtXZOH9okN6t0RofGGVrFtTYNRFWiZ8QI6UedU2
khAt+OhDOUnH27PNDoPCxa50/9sz+1QrZ5zQzMgqQoCbb6tTmH4keQlKWnhDhG15
+LVO5SBXusp/gft9cP2BhLtTSACcRgqvs4gnTqGZy5GpZxT/XwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLcXmHzTZVgFpSN9eoa8a/T0zfV9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NTE1
NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIxYTdmMjhhMTIvMzEyMzc3MzAtMDMxYy0z
YTM0LTgwMDktZjJhZDA2M2YwZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODUxNTQxNDEtZjgxZC00YTE2LTk0
ZGItYmEyMWE3ZjI4YTEyLzg1MTU0MTQxLWY4MWQtNGExNi05NGRiLWJhMjFhN2Yy
OGExMi5jcmwwHwYDVR0jBBgwFoAUSJaQm6A/PV+UOEHu+QZOSWRDO+wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84NTE1NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIx
YTdmMjhhMTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQBTUAwQC
2CbgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFBc+MN9Ztgg0J3ttd+0PFJwC9k00cwh4mxCcLb3ZjAVYbxA
33uoL6thEveXi/BSuQK4qDYoi8Jwgb90z8wuSs52qLICsTl0QegMDE8tsjOUM2yW
JHhRBTuBGK/7xjg64NSpcoAx2FF37RF7uuK/AbabAF7SH2FXkWsu1rXOvtZvnv+9
bQ5g+aqHC9NdFtxX2fYPMqvSm8VDx/8+t5VlUoQfNRyW3DrjFqmWg01GHC3KKyEZ
t64H0rXPKQLKSz5V9Lau7FH6KgVjb0dt2SdjlMPBYGy5V/kIWLNNt14eS4OAh5Sq
TOgs3xmYF7ehhQTBW8zG6wetF8HehXHkDd3DcWI=
-----END CERTIFICATE-----
Generated at Mon Nov 3 04:36:14 2025 by rpki-client