
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/caa8c0c9-1db4-3cd6-b9eb-f227c7cfa014.roa
File: caa8c0c9-1db4-3cd6-b9eb-f227c7cfa014.roa (raw, json)
Hash identifier: C4rJ+q22wuCpcuOPmkWhFgBlHXPGylEj5Lw1qpFWpp0=
Subject key identifier: F4:64:0A:82:FF:16:18:A2:C3:D7:81:03:07:22:00:7B:C4:4F:07:F7
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F4328584B95A78E4E4295D8457C73B180
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/caa8c0c9-1db4-3cd6-b9eb-f227c7cfa014.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 14618
IP address blocks: 2001:4f8:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:8e:4e:42:95:d8:45:7c:73:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=7fdbf67c-94a4-4057-99fa-58d62c41e7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:6b:05:11:19:9e:81:df:b8:da:3d:42:dc:
b8:0a:11:06:2d:6d:e8:c2:13:43:6b:5e:44:d0:47:
97:27:92:e0:7d:a2:5b:21:13:cf:45:9a:44:47:29:
a8:20:6a:bd:02:a8:5e:cc:8e:20:38:76:14:27:19:
76:26:16:59:4a:b1:7a:96:d7:da:20:95:7c:a3:fb:
bd:22:03:9a:ea:e9:fa:33:53:a0:1b:11:f1:5e:4f:
1a:01:29:2b:a2:a0:7f:a5:78:ee:ef:32:cc:a8:7c:
69:72:07:35:9a:b6:4e:a4:eb:b9:59:58:60:f4:c7:
cd:60:eb:c4:a3:5d:7b:89:c6:56:18:6a:b8:15:00:
bd:01:70:1e:bb:65:73:2c:83:5b:27:63:40:ba:8f:
f9:a3:01:b0:c4:a0:d5:47:cc:d1:88:92:73:39:7a:
61:e9:e9:0b:c4:b0:46:58:3f:2e:10:6c:54:65:54:
ea:88:34:56:bb:3f:95:52:11:97:f5:5d:02:10:11:
48:9d:54:94:40:2f:dc:a2:f0:5d:4f:ce:66:5d:19:
d1:2a:c8:25:24:b5:82:55:8d:d6:11:47:12:18:4c:
46:c6:98:bc:17:58:70:5f:bc:b8:3e:1e:56:ea:e4:
3d:13:70:a7:ad:84:9a:b2:f7:57:4e:cc:18:55:04:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:0A:82:FF:16:18:A2:C3:D7:81:03:07:22:00:7B:C4:4F:07:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/caa8c0c9-1db4-3cd6-b9eb-f227c7cfa014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4f8:11::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:e3:6a:29:3c:66:5f:47:c2:98:60:4c:fd:91:fc:ee:f7:7f:
24:ad:65:fa:30:4e:c6:0e:eb:49:45:8c:97:6b:ae:70:b3:77:
13:a1:93:3c:a2:50:11:c5:5b:59:4c:7a:fe:27:29:b9:2b:4d:
69:a7:a9:89:f5:6d:bb:54:af:37:5f:c1:ee:81:1b:fd:fd:5b:
fc:eb:31:82:60:a4:fa:ba:e3:93:77:c4:6b:12:8d:3c:15:05:
ba:be:01:05:78:e7:70:1d:30:a8:07:75:d2:0e:ab:06:31:34:
db:f9:da:d4:5f:77:27:ed:d8:80:e6:0f:1f:a0:7c:e7:22:54:
02:47:6e:3f:3e:8e:be:8a:61:e5:c9:93:06:dc:fe:14:71:2e:
64:cf:95:9a:45:9d:51:cc:ed:51:52:70:d9:cd:19:63:cc:38:
bc:4b:07:dd:41:1c:50:ad:ba:f2:0b:b7:1a:7b:98:81:82:80:
2e:b8:0f:85:9e:11:31:ce:de:9c:61:f1:7e:79:4f:06:16:ce:
a2:46:2e:4a:4a:b4:a5:d1:3c:60:cc:1d:b4:94:83:7c:ba:49:
ed:6a:01:6c:27:17:6d:57:2e:7a:a6:f0:49:17:9c:8e:ac:ba:
c8:57:a5:1a:d1:2a:6e:a3:02:9b:a7:85:51:a4:0f:11:33:04:
86:fc:54:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVp45OQpXYRXxzsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
N2ZkYmY2N2MtOTRhNC00MDU3LTk5ZmEtNThkNjJjNDFlN2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRprBREZnoHfuNo9Qty4ChEGLW3owhNDa15E
0EeXJ5LgfaJbIRPPRZpERymoIGq9AqhezI4gOHYUJxl2JhZZSrF6ltfaIJV8o/u9
IgOa6un6M1OgGxHxXk8aASkroqB/pXju7zLMqHxpcgc1mrZOpOu5WVhg9MfNYOvE
o117icZWGGq4FQC9AXAeu2VzLINbJ2NAuo/5owGwxKDVR8zRiJJzOXph6ekLxLBG
WD8uEGxUZVTqiDRWuz+VUhGX9V0CEBFInVSUQC/covBdT85mXRnRKsglJLWCVY3W
EUcSGExGxpi8F1hwX7y4Ph5W6uQ9E3CnrYSasvdXTswYVQTzIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPRkCoL/Fhiiw9eBAwciAHvETwf3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvY2FhOGMwYzktMWRiNC0z
Y2Q2LWI5ZWItZjIyN2M3Y2ZhMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEE+AAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABnjaik8Zl9HwphgTP2R/O73fyStZfowTsYO60lFjJdrrnCzdxOh
kzyiUBHFW1lMev4nKbkrTWmnqYn1bbtUrzdfwe6BG/39W/zrMYJgpPq645N3xGsS
jTwVBbq+AQV453AdMKgHddIOqwYxNNv52tRfdyft2IDmDx+gfOciVAJHbj8+jr6K
YeXJkwbc/hRxLmTPlZpFnVHM7VFScNnNGWPMOLxLB91BHFCtuvILtxp7mIGCgC64
D4WeETHO3pxh8X55TwYWzqJGLkpKtKXRPGDMHbSUg3y6Se1qAWwnF21XLnqm8EkX
nI6sushXpRrRKm6jApunhVGkDxEzBIb8VDk=
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:56 2025 by rpki-client