
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527ada82-6418-3ef3-af24-8711a84438b1.roa
File: 527ada82-6418-3ef3-af24-8711a84438b1.roa (raw, json)
Hash identifier: R4YO/CWfHuEcDPEq9cafwubMs+RTsAxF2XTBDkqv4Vc=
Subject key identifier: 3C:1A:51:04:45:24:C5:C3:87:51:5C:41:2E:AF:7E:63:7B:86:30:4F
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584BB108EDB25613200E1A58E200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527ada82-6418-3ef3-af24-8711a84438b1.roa
Signing time: Thu 30 Oct 2025 08:23:46 +0000
ROA not before: Thu 30 Oct 2025 08:23:46 +0000
ROA not after: Wed 28 Jan 2026 09:23:46 +0000
asID: 205886
IP address blocks: 216.132.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:08:ed:b2:56:13:20:0e:1a:58:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 30 08:23:46 2025 GMT
Not After : Jan 28 09:23:46 2026 GMT
Subject: CN=8796cca8-995b-4322-bd9e-448d8cfe4f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:06:14:0d:49:38:c3:2a:9e:5f:6b:e5:48:
22:0c:66:ab:00:e8:e0:fc:49:a9:06:98:4e:69:10:
59:ea:58:77:62:88:44:2a:67:34:bc:8b:9d:e0:49:
17:b7:f0:58:1f:57:5f:71:28:5d:40:33:98:21:8d:
e2:48:e3:70:64:2e:b6:cc:7d:60:f9:6a:07:7f:92:
57:9a:01:62:52:70:1c:21:2c:5e:2c:69:f4:57:bc:
24:5a:47:61:18:5d:7b:c4:21:6b:f2:a4:a9:c7:a3:
45:2e:d7:ff:31:6a:47:af:6d:f8:05:1c:fc:95:71:
5a:bc:7f:77:a1:38:c4:4e:61:59:75:01:cf:d8:bf:
10:3a:df:56:20:6e:60:7b:11:35:ad:ec:83:0c:06:
51:68:82:de:90:97:94:2a:73:67:b3:fa:48:38:c3:
7c:bf:1b:cf:93:b9:6e:75:8b:02:30:8b:d5:82:18:
a6:03:7c:67:b5:08:82:94:ac:41:74:1a:16:8e:5c:
58:68:cf:30:0c:ee:28:b1:ca:eb:64:60:59:c9:55:
c7:bb:ad:5a:64:cb:9a:fc:3c:ee:17:e0:89:a8:5b:
01:e7:f2:62:11:64:4c:20:cf:d8:ab:6e:85:7c:9b:
e8:56:ed:14:d5:70:4e:8e:d0:e5:ea:a0:5f:24:69:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:51:04:45:24:C5:C3:87:51:5C:41:2E:AF:7E:63:7B:86:30:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527ada82-6418-3ef3-af24-8711a84438b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:9e:3c:39:8e:0e:b6:93:ec:e0:1d:ba:c0:90:31:c8:a4:60:
25:87:e2:d5:68:d3:04:b3:ff:12:4c:75:c6:52:e6:cb:2c:e9:
a7:69:c4:0a:70:4c:2f:64:01:d5:ea:db:bf:1c:2b:a3:d3:1b:
8d:59:c8:d2:9d:30:0f:38:32:f0:cd:37:9c:f7:94:68:42:16:
96:f3:33:91:66:61:5a:e5:89:44:6e:7a:4a:46:b1:6e:45:0c:
fb:f0:ae:22:bd:a7:4e:56:69:52:5c:a6:25:60:b3:5e:ef:54:
99:cb:f2:a4:05:74:72:00:a6:c5:4c:7f:ba:eb:5e:8b:2b:d0:
a6:77:f1:51:ef:3b:ba:da:7f:ae:1a:67:5f:64:b0:51:b4:c7:
a2:5d:d7:fa:6c:4d:63:8c:b0:42:59:f6:2e:4f:96:12:3c:96:
7c:a5:82:1c:3a:9f:df:01:12:e3:9e:ce:db:51:77:07:fc:f4:
0f:01:af:c3:03:4d:93:48:30:97:58:27:48:d4:79:6b:59:6f:
d4:36:59:ec:66:ee:1a:64:81:6e:29:cc:1c:d7:30:c5:aa:c2:
fd:f1:1f:01:27:bf:e8:e7:f4:6a:6f:b8:32:07:db:74:aa:5f:
75:97:23:ba:07:8a:65:c0:3a:a2:d4:b9:94:83:08:56:f6:c5:
c7:36:c1:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxCO2yVhMgDhpY4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTAzMDA4MjM0NloXDTI2MDEyODA5MjM0NlowLzEtMCsGA1UEAxMk
ODc5NmNjYTgtOTk1Yi00MzIyLWJkOWUtNDQ4ZDhjZmU0ZjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTAGFA1JOMMqnl9r5UgiDGarAOjg/EmpBphO
aRBZ6lh3YohEKmc0vIud4EkXt/BYH1dfcShdQDOYIY3iSONwZC62zH1g+WoHf5JX
mgFiUnAcISxeLGn0V7wkWkdhGF17xCFr8qSpx6NFLtf/MWpHr234BRz8lXFavH93
oTjETmFZdQHP2L8QOt9WIG5gexE1reyDDAZRaILekJeUKnNns/pIOMN8vxvPk7lu
dYsCMIvVghimA3xntQiClKxBdBoWjlxYaM8wDO4oscrrZGBZyVXHu61aZMua/Dzu
F+CJqFsB5/JiEWRMIM/Yq26FfJvoVu0U1XBOjtDl6qBfJGlmNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwaUQRFJMXDh1FcQS6vfmN7hjBPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTI3YWRhODItNjQxOC0z
ZWYzLWFmMjQtODcxMWE4NDQzOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+ePDmODraT7OAdusCQMcikYCWH4tVo0wSz/xJMdcZS5sss6adpxApw
TC9kAdXq278cK6PTG41ZyNKdMA84MvDNN5z3lGhCFpbzM5FmYVrliURuekpGsW5F
DPvwriK9p05WaVJcpiVgs17vVJnL8qQFdHIApsVMf7rrXosr0KZ38VHvO7raf64a
Z19ksFG0x6Jd1/psTWOMsEJZ9i5PlhI8lnylghw6n98BEuOezttRdwf89A8Br8MD
TZNIMJdYJ0jUeWtZb9Q2Wexm7hpkgW4pzBzXMMWqwv3xHwEnv+jn9GpvuDIH23Sq
X3WXI7oHimXAOqLUuZSDCFb2xcc2wXM=
-----END CERTIFICATE-----
Generated at Sat Nov 1 08:31:06 2025 by rpki-client