
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
File: 469dd2df-4576-34bd-923d-489a11adb222.roa (raw, json)
Hash identifier: LB55e/hx6G8L88FspgUblvNIPMXRK3BUN8MC8iR8Ml0=
Subject key identifier: 00:E6:28:87:DB:82:8A:B3:DC:1A:45:63:AA:4C:DA:2C:74:A8:DC:83
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584B99D77CD94215AF04175B0400
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 1280
IP address blocks: 149.20.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:7c:d9:42:15:af:04:17:5b:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=333624d8-32a6-457f-a4f8-2f6195dfbd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:6f:2c:ee:f6:1d:c3:ff:6d:33:56:92:68:
e2:db:50:e2:e1:3e:70:53:ff:33:c8:11:50:90:45:
2b:5b:98:02:27:2f:4c:4e:2b:9b:16:a7:34:7d:47:
02:36:f7:f0:e2:ba:44:05:df:f4:ff:46:21:05:50:
5a:8e:bb:ad:f7:18:8c:e5:d8:61:b4:71:f3:61:ea:
5d:d7:2a:42:d2:48:4d:b0:74:11:22:61:13:a5:24:
0b:6a:ea:54:fc:f5:19:08:de:e1:74:63:e8:9e:76:
0f:72:70:42:05:01:80:21:37:a7:46:ef:de:02:d6:
59:d3:12:2c:9c:72:1a:54:9e:8d:06:e6:0b:9b:80:
be:c0:d7:63:2d:d8:1d:93:bc:71:92:cc:b3:37:30:
f0:64:3b:35:61:cd:96:a5:65:a6:ba:8a:55:b9:75:
3a:79:d0:83:bd:8a:ae:95:03:97:75:b4:52:11:c4:
19:a3:74:bd:73:9e:7a:03:5b:7c:c5:92:37:70:30:
c2:ef:56:00:76:0f:a1:ad:41:5e:59:5b:5e:c2:3e:
7b:49:0c:6d:75:7d:55:9e:16:b8:d9:10:5c:d4:9f:
9d:5e:b2:76:32:67:81:99:8d:3e:79:d2:3a:c3:99:
f3:a4:bd:7c:d8:8a:68:63:3b:aa:93:d5:9d:5d:50:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E6:28:87:DB:82:8A:B3:DC:1A:45:63:AA:4C:DA:2C:74:A8:DC:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:f8:1c:ae:4a:97:2e:dc:5c:9c:69:f3:a1:4c:22:80:c1:a5:
6e:08:f5:de:ba:34:09:9d:51:25:36:b7:6b:3d:6d:0d:6a:2e:
02:3b:06:61:a9:c9:d0:44:a6:3c:54:f0:8b:e7:77:75:48:c7:
30:d1:3b:dc:db:53:e0:97:13:97:d6:4d:b0:81:d1:31:40:db:
78:2d:95:fc:0a:63:57:3e:90:a4:eb:97:ab:6c:6c:30:c8:3f:
f8:ee:27:e6:6a:ab:9b:7b:b7:0b:87:75:c1:d9:99:8d:56:33:
81:93:85:e9:4d:f0:b4:56:e4:3b:87:70:bb:e8:99:e1:7e:8b:
9b:40:3e:42:34:49:3c:f7:f8:9c:af:26:1b:9d:fa:83:4a:78:
86:cd:22:0c:a5:19:2c:da:d6:d3:a8:49:f0:10:ad:90:52:8e:
13:55:ad:53:65:f5:b2:dc:7f:6a:37:9f:01:bc:0f:57:f8:62:
79:58:b4:00:9a:b7:2d:14:1c:a7:ea:b8:f2:97:5b:9b:56:42:
2a:c6:28:16:b8:3e:ab:f0:88:82:0c:74:55:1e:04:e4:cd:28:
97:67:f9:f9:35:ba:1a:cc:1b:b3:46:7c:dc:67:42:54:fc:b6:
f8:b0:0f:ad:d1:4d:68:f8:2d:c2:40:1f:b1:6a:99:07:62:c0:
b5:52:be:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13zZQhWvBBdbBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
MzMzNjI0ZDgtMzJhNi00NTdmLWE0ZjgtMmY2MTk1ZGZiZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnxvLO72HcP/bTNWkmji21Di4T5wU/8zyBFQ
kEUrW5gCJy9MTiubFqc0fUcCNvfw4rpEBd/0/0YhBVBajrut9xiM5dhhtHHzYepd
1ypC0khNsHQRImETpSQLaupU/PUZCN7hdGPonnYPcnBCBQGAITenRu/eAtZZ0xIs
nHIaVJ6NBuYLm4C+wNdjLdgdk7xxksyzNzDwZDs1Yc2WpWWmuopVuXU6edCDvYqu
lQOXdbRSEcQZo3S9c556A1t8xZI3cDDC71YAdg+hrUFeWVtewj57SQxtdX1Vnha4
2RBc1J+dXrJ2MmeBmY0+edI6w5nzpL182IpoYzuqk9WdXVBZwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADmKIfbgoqz3BpFY6pM2ix0qNyDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDY5ZGQyZGYtNDU3Ni0z
NGJkLTkyM2QtNDg5YTExYWRiMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRRaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHz4HK5Kly7cXJxp86FMIoDBpW4I9d66NAmdUSU2t2s9bQ1qLgI7BmGp
ydBEpjxU8Ivnd3VIxzDRO9zbU+CXE5fWTbCB0TFA23gtlfwKY1c+kKTrl6tsbDDI
P/juJ+Zqq5t7twuHdcHZmY1WM4GThelN8LRW5DuHcLvomeF+i5tAPkI0STz3+Jyv
Jhud+oNKeIbNIgylGSza1tOoSfAQrZBSjhNVrVNl9bLcf2o3nwG8D1f4YnlYtACa
ty0UHKfquPKXW5tWQirGKBa4PqvwiIIMdFUeBOTNKJdn+fk1uhrMG7NGfNxnQlT8
tviwD63RTWj4LcJAH7FqmQdiwLVSvt4=
-----END CERTIFICATE-----
Generated at Sun Oct 26 01:49:51 2025 by rpki-client