
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa
File: 5173c91e-d697-3bbc-b247-976d5b9dd576.roa (raw, json)
Hash identifier: ks3+Q+2m+ot+i8obY/j9qIPtoSeEL/2fVV+7Za7UElg=
Subject key identifier: 26:A3:C3:D3:E5:22:04:7E:2F:0A:E0:8F:A7:77:1A:46:59:BF:58:C8
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F4328584BA7CD193549504FE0B6B3F140
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 0
IP address blocks: 169.145.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cd:19:35:49:50:4f:e0:b6:b3:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=5a25bf80-de22-48f4-afb9-8952aa9d8933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:6d:65:6a:b8:28:41:64:12:d4:6b:ee:e3:
af:0e:cc:61:1d:e0:b2:1d:4f:1d:d9:17:36:8c:f0:
c1:42:2c:d2:8c:a7:a4:12:38:c8:ea:6c:64:76:72:
49:4d:41:99:6f:c2:fb:94:06:5d:54:90:15:68:e3:
97:3e:b1:9e:ad:db:c6:ae:75:8b:aa:39:05:98:7f:
59:37:b2:27:77:0d:a9:78:64:ac:b2:17:1a:18:1d:
df:d8:fb:37:c0:1f:b4:0a:e6:0a:21:9c:97:b0:db:
61:d9:08:6e:74:a2:d0:96:61:9b:30:f4:44:1c:0a:
71:6a:9c:5d:d8:04:ff:2a:8c:58:8c:d6:7e:4c:17:
ae:10:80:c1:33:c7:61:b4:e9:e6:db:93:80:1f:49:
e5:5d:ed:35:1b:5a:c4:c4:80:e5:6e:17:e6:b0:05:
a2:ad:59:03:65:91:75:7a:10:8a:c9:92:cd:67:38:
c4:1b:51:09:dc:c8:d2:b9:23:f6:7d:a2:94:66:72:
2e:ae:1f:ce:71:28:21:8e:e5:3e:0e:9a:14:a0:73:
6b:9d:61:01:5d:d7:11:f4:2c:e3:f2:e9:20:4c:85:
3d:b4:98:24:c9:22:fb:8b:bb:54:95:fe:66:17:b3:
06:40:59:b4:4d:2d:c7:24:e9:42:bf:6c:66:9c:71:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:C3:D3:E5:22:04:7E:2F:0A:E0:8F:A7:77:1A:46:59:BF:58:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:19:98:c4:6a:bd:76:64:75:c2:2b:16:31:aa:dd:bd:2d:fb:
8c:85:e0:72:fa:27:7d:be:0c:17:bc:b4:6e:57:97:da:35:42:
94:a5:bd:c4:86:52:44:b7:9c:67:4d:0a:aa:63:cc:7e:d3:13:
3f:6e:24:ba:fd:c0:22:de:69:33:42:b9:07:96:ac:0d:a0:45:
bb:d7:2a:f9:cd:e8:26:fe:16:92:2d:79:5c:19:05:94:5e:d9:
02:18:c4:d8:01:4f:f1:e0:91:b7:58:b5:ec:87:4d:fd:7b:e9:
cc:85:d1:9a:e6:96:85:0e:0e:ea:e0:54:3b:d0:50:fc:c5:d6:
b8:cf:95:43:9c:4d:db:7c:78:89:f5:e8:4d:22:c1:03:21:b2:
8b:c9:37:31:91:a0:f2:83:56:ac:98:41:d7:37:57:85:3f:55:
87:d7:64:79:e5:dd:3b:78:12:94:43:f0:5b:26:74:f7:6f:4f:
9e:d6:1c:35:b2:0b:89:9b:7d:db:26:11:3f:7f:6c:c2:c5:64:
f2:f6:fd:ab:ab:c2:ec:6a:dd:fd:e2:75:53:5e:a7:b3:0d:00:
ae:58:5d:f3:b5:01:0f:4d:4d:38:93:ec:d6:2b:4d:cc:30:74:
12:8f:dd:ba:08:51:77:6f:99:91:88:2d:fd:16:31:6b:16:18:
97:19:91:14
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEunzRk1SVBP4Laz8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
NWEyNWJmODAtZGUyMi00OGY0LWFmYjktODk1MmFhOWQ4OTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZtZWq4KEFkEtRr7uOvDsxhHeCyHU8d2Rc2
jPDBQizSjKekEjjI6mxkdnJJTUGZb8L7lAZdVJAVaOOXPrGerdvGrnWLqjkFmH9Z
N7Indw2peGSsshcaGB3f2Ps3wB+0CuYKIZyXsNth2QhudKLQlmGbMPREHApxapxd
2AT/KoxYjNZ+TBeuEIDBM8dhtOnm25OAH0nlXe01G1rExIDlbhfmsAWirVkDZZF1
ehCKyZLNZzjEG1EJ3MjSuSP2faKUZnIurh/OcSghjuU+DpoUoHNrnWEBXdcR9Czj
8ukgTIU9tJgkySL7i7tUlf5mF7MGQFm0TS3HJOlCv2xmnHHrGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCajw9PlIgR+Lwrgj6d3GkZZv1jIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvNTE3M2M5MWUtZDY5Ny0z
YmJjLWIyNDctOTc2ZDViOWRkNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqZEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbhmYxGq9dmR1wisWMardvS37jIXgcvonfb4MF7y0bleX2jVClKW9xIZS
RLecZ00KqmPMftMTP24kuv3AIt5pM0K5B5asDaBFu9cq+c3oJv4Wki15XBkFlF7Z
AhjE2AFP8eCRt1i17IdN/XvpzIXRmuaWhQ4O6uBUO9BQ/MXWuM+VQ5xN23x4ifXo
TSLBAyGyi8k3MZGg8oNWrJhB1zdXhT9Vh9dkeeXdO3gSlEPwWyZ0929PntYcNbIL
iZt92yYRP39swsVk8vb9q6vC7Grd/eJ1U16nsw0Arlhd87UBD01NOJPs1itNzDB0
Eo/dughRd2+ZkYgt/RYxaxYYlxmRFA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:46:37 2025 by rpki-client