
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/d9d2edf2-a2b8-340a-871f-8915988ad447.roa
File: d9d2edf2-a2b8-340a-871f-8915988ad447.roa (raw, json)
Hash identifier: /LL/mTy/nIufMFYmm3AxYNcuajsaXtsV7OcJOUw3nRg=
Subject key identifier: 8D:81:5D:BF:73:3D:40:5C:56:1A:84:30:7A:7A:DE:55:3E:BA:54:1E
Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac
Certificate serial: 010D0C9F4328584B987236434703B4627824A100
Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/d9d2edf2-a2b8-340a-871f-8915988ad447.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 23316
IP address blocks: 206.72.64.0/19 maxlen: 24
216.240.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:36:43:47:03:b4:62:78:24:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=2b6364c9-a701-411c-b275-f34f2f7db05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:ad:ae:f4:9a:69:3a:fd:2b:f8:4f:da:06:
bd:ed:a7:a5:9e:f1:11:09:f1:30:b6:38:69:8d:77:
4d:a3:61:80:1a:83:94:de:be:bf:af:62:68:e9:7c:
da:03:de:60:08:b3:4b:da:7f:a5:4d:59:e7:51:d6:
66:dc:a6:73:f0:ff:19:f9:a6:25:09:b0:1d:01:73:
8a:aa:90:31:cf:1f:58:5d:34:2e:7a:03:d3:28:8c:
3f:9d:0e:07:76:bf:cc:d0:21:69:3b:5f:b8:c2:ae:
0f:b4:43:66:80:d0:d0:05:d7:8b:6c:9d:7a:74:6b:
83:69:7d:6f:07:7b:11:97:b5:a3:a7:d6:36:60:42:
64:ba:8c:27:3c:75:2f:8a:cc:da:d3:b0:28:66:bb:
78:2a:1e:63:4d:14:5e:6f:37:41:46:47:bb:7e:ce:
9d:b4:27:3d:4a:08:83:3d:c9:c8:af:49:56:27:74:
a6:0a:8a:62:27:99:fa:81:7e:c9:8a:8a:30:60:7e:
b7:70:a2:13:78:46:89:81:a7:98:c5:05:97:f9:0a:
26:fa:ef:2c:46:e2:6a:ad:06:13:bc:91:10:b0:4f:
63:bd:51:fb:f3:61:c1:0e:c3:ab:59:af:aa:58:8f:
19:42:ac:51:29:43:70:5d:37:d5:d0:ab:3d:24:46:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:5D:BF:73:3D:40:5C:56:1A:84:30:7A:7A:DE:55:3E:BA:54:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/d9d2edf2-a2b8-340a-871f-8915988ad447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl
X509v3 Authority Key Identifier:
keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer
sbgp-ipAddrBlock: critical
IPv4:
206.72.64.0/19
216.240.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:88:7b:31:1b:4c:fa:e9:35:cd:84:3f:89:ec:b2:d1:10:44:
f8:27:51:fb:5b:a5:90:55:f6:dd:37:91:54:19:0a:4e:4b:db:
27:8f:fe:ce:a7:c1:d1:b8:91:68:ca:ec:02:24:d5:89:4d:2d:
02:c4:bb:c0:4d:9e:6f:fd:89:bb:b5:58:f8:f6:f8:f8:9c:73:
04:4d:11:c1:38:1c:e8:f9:de:dd:59:94:ad:44:33:0b:3b:40:
ff:be:fd:2c:e3:a4:e7:20:1b:52:ce:f2:02:24:24:4d:38:5a:
f2:b7:9e:a0:21:1d:d2:69:b7:2b:d9:db:1f:c3:8e:7b:25:e2:
de:dc:50:df:80:2c:6c:e9:c8:37:61:12:cd:0e:2a:29:ec:50:
a2:65:21:68:04:96:ec:54:c0:06:91:1e:83:99:0a:b6:6c:f7:
0d:59:c6:e8:e7:35:31:39:77:b7:0c:16:bc:a1:1d:ac:04:09:
6f:0c:08:ba:f0:8c:a2:bc:7b:0b:bb:41:a3:72:90:e5:8f:e1:
c4:80:0d:1a:ba:3f:14:53:82:7f:d5:4d:47:c9:e5:45:b9:0d:
b2:79:9f:5b:30:c4:93:47:b4:d2:cb:65:7c:29:66:d6:95:c5:
82:09:19:76:ba:13:55:5c:f3:6b:57:66:1d:41:cf:4a:f5:48:
c8:37:ae:24
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuYcjZDRwO0YngkoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk
Y2FjMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk
MmI2MzY0YzktYTcwMS00MTFjLWIyNzUtZjM0ZjJmN2RiMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs52trvSaaTr9K/hP2ga97aelnvERCfEwtjhp
jXdNo2GAGoOU3r6/r2Jo6XzaA95gCLNL2n+lTVnnUdZm3KZz8P8Z+aYlCbAdAXOK
qpAxzx9YXTQuegPTKIw/nQ4Hdr/M0CFpO1+4wq4PtENmgNDQBdeLbJ16dGuDaX1v
B3sRl7Wjp9Y2YEJkuownPHUvisza07AoZrt4Kh5jTRRebzdBRke7fs6dtCc9SgiD
PcnIr0lWJ3SmCopiJ5n6gX7JioowYH63cKITeEaJgaeYxQWX+Qom+u8sRuJqrQYT
vJEQsE9jvVH782HBDsOrWa+qWI8ZQqxRKUNwXTfV0Ks9JEbfrwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFI2BXb9zPUBcVhqEMHp63lU+ulQeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1
ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvZDlkMmVkZjItYTJiOC0z
NDBhLTg3MWYtODkxNTk4OGFkNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0
OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl
ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw
ZWM1ZWRjYWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFzkhAAwQF
2PAgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALaIezEbTPrpNc2EP4nsstEQRPgnUftbpZBV9t03kVQZCk5L
2yeP/s6nwdG4kWjK7AIk1YlNLQLEu8BNnm/9ibu1WPj2+PiccwRNEcE4HOj53t1Z
lK1EMws7QP++/SzjpOcgG1LO8gIkJE04WvK3nqAhHdJptyvZ2x/Djnsl4t7cUN+A
LGzpyDdhEs0OKinsUKJlIWgEluxUwAaRHoOZCrZs9w1ZxujnNTE5d7cMFryhHawE
CW8MCLrwjKK8ewu7QaNykOWP4cSADRq6PxRTgn/VTUfJ5UW5DbJ5n1swxJNHtNLL
ZXwpZtaVxYIJGXa6E1Vc82tXZh1Bz0r1SMg3riQ=
-----END CERTIFICATE-----
Generated at Wed Oct 29 11:11:35 2025 by rpki-client