
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa
File: 8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa (raw, json)
Hash identifier: 5XEcbT2TJGCVg3K1sc3p5RkWBMubLeB8WyeUfogmE2w=
Subject key identifier: C4:14:6F:73:B9:FE:DC:04:17:05:83:51:B8:99:FD:9B:D8:4E:7B:DC
Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial: 010D0C9F4328584B970CEA514301A5D9F15CB480
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 14445
IP address blocks: 45.42.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:ea:51:43:01:a5:d9:f1:5c:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=85fb5006-b297-471d-a917-8847554bb871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:8d:dc:98:6a:9a:c4:90:0f:32:41:08:c4:
6e:70:0e:89:4c:c0:f6:02:9d:f9:c2:5b:df:bf:21:
f4:e3:46:61:df:68:98:7f:1b:5a:92:a7:b2:ec:8c:
43:e9:29:cf:de:5a:79:55:69:f2:5f:f4:ec:fa:7a:
ff:ca:54:28:38:24:3e:fc:d3:57:8b:03:73:58:ab:
48:b3:2f:92:9c:e6:0d:ac:0b:9b:e7:23:b4:59:39:
23:a7:1b:f0:9d:e8:4a:65:59:10:a5:d5:32:75:f9:
e9:38:a0:a9:7e:aa:9e:01:59:49:12:42:be:11:4f:
9c:53:16:ab:8f:46:d1:8a:4d:53:6e:16:de:99:41:
05:51:3b:6d:4f:d2:45:f6:b2:fe:fb:6e:98:a7:01:
54:40:15:30:41:04:72:f1:6f:80:8a:22:93:39:9c:
c2:6e:63:3a:f0:29:42:e2:e5:0c:c6:50:7c:cd:f5:
16:78:52:e2:0b:a9:2e:2c:c3:8c:52:1f:71:41:54:
41:fe:fb:11:2b:5f:3e:94:ef:de:7f:9b:6d:ed:e4:
8e:04:c8:ae:b1:e6:74:5e:31:e3:5c:09:53:19:b7:
33:b8:9d:c6:98:8e:c4:fd:b9:13:85:5b:2e:c4:56:
b7:0d:5d:17:99:09:48:3a:51:02:5c:24:79:cd:ba:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:6F:73:B9:FE:DC:04:17:05:83:51:B8:99:FD:9B:D8:4E:7B:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
X509v3 Authority Key Identifier:
keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:9e:e7:67:25:fb:84:81:4e:4b:b9:5c:9f:c2:96:bb:b8:80:
69:c4:dd:65:f1:b6:d4:21:b3:6c:ea:e7:e1:35:93:b8:3b:0d:
f3:94:24:fc:da:7d:36:07:77:74:c7:98:bc:0e:e4:dc:67:23:
31:01:15:5a:d4:de:c7:e9:53:58:b3:01:17:95:81:b8:85:b1:
21:90:c8:89:a5:6b:24:7b:0e:75:26:18:0f:32:9f:c4:74:13:
71:1d:74:52:e2:3a:c9:80:df:18:4d:97:73:08:92:99:a7:2e:
92:78:7b:f6:b3:7b:3e:e1:3b:28:10:00:33:d9:4c:6b:99:90:
88:46:0a:cc:87:70:3b:31:9e:27:59:7a:0a:02:10:34:05:27:
06:4f:8c:81:31:c3:95:38:fe:22:7b:f7:7f:45:10:c4:f9:74:
5a:bd:37:7e:d0:6f:f2:ba:5e:d5:80:b5:df:04:55:7a:3d:41:
b5:e4:f4:a8:f0:e7:c4:42:cf:5b:89:4c:e8:8f:92:6e:b0:ff:
48:e9:ce:5c:32:8b:af:00:af:5a:1b:e3:db:28:a3:87:58:9f:
8e:0a:50:d0:c4:dd:d5:5a:52:2f:16:04:4d:e5:bd:bf:0c:60:
01:fb:26:09:b0:80:50:b2:3a:91:7f:0c:a0:bd:3a:df:b7:87:
24:d5:ab:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOpRQwGl2fFctIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
ODVmYjUwMDYtYjI5Ny00NzFkLWE5MTctODg0NzU1NGJiODcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcON3JhqmsSQDzJBCMRucA6JTMD2Ap35wlvf
vyH040Zh32iYfxtakqey7IxD6SnP3lp5VWnyX/Ts+nr/ylQoOCQ+/NNXiwNzWKtI
sy+SnOYNrAub5yO0WTkjpxvwnehKZVkQpdUydfnpOKCpfqqeAVlJEkK+EU+cUxar
j0bRik1TbhbemUEFUTttT9JF9rL++26YpwFUQBUwQQRy8W+AiiKTOZzCbmM68ClC
4uUMxlB8zfUWeFLiC6kuLMOMUh9xQVRB/vsRK18+lO/ef5tt7eSOBMiuseZ0XjHj
XAlTGbczuJ3GmI7E/bkThVsuxFa3DV0XmQlIOlECXCR5zbpliwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQUb3O5/twEFwWDUbiZ/ZvYTnvcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvOGU5YmYxZjgtNWZjYS0z
NzE3LTllNmMtNmJkZDA0N2VmMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACee52cl+4SBTku5XJ/Clru4gGnE3WXxttQhs2zq5+E1k7g7DfOUJPza
fTYHd3THmLwO5NxnIzEBFVrU3sfpU1izAReVgbiFsSGQyImlayR7DnUmGA8yn8R0
E3EddFLiOsmA3xhNl3MIkpmnLpJ4e/azez7hOygQADPZTGuZkIhGCsyHcDsxnidZ
egoCEDQFJwZPjIExw5U4/iJ7939FEMT5dFq9N37Qb/K6XtWAtd8EVXo9QbXk9Kjw
58RCz1uJTOiPkm6w/0jpzlwyi68Ar1ob49soo4dYn44KUNDE3dVaUi8WBE3lvb8M
YAH7JgmwgFCyOpF/DKC9Ot+3hyTVq+g=
-----END CERTIFICATE-----
Generated at Wed Oct 29 03:56:55 2025 by rpki-client