
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa
File: ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa (raw, json)
Hash identifier: Y9mFL2+P2q+YbFZOAbD8lWFsTX82jHCBbFS14koWYpg=
Subject key identifier: 1D:A6:37:AF:24:93:EE:56:3E:C8:A2:D2:D7:6E:F6:90:FD:46:2A:09
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B56D73D6402E400013E9B8540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa
Signing time: Sun 28 Sep 2025 01:00:33 +0000
ROA not before: Sun 28 Sep 2025 01:00:33 +0000
ROA not after: Sat 27 Dec 2025 02:00:33 +0000
asID: 30036
IP address blocks: 150.195.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:56:d7:3d:64:02:e4:00:01:3e:9b:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 28 01:00:33 2025 GMT
Not After : Dec 27 02:00:33 2025 GMT
Subject: CN=648dc76d-0418-43dc-8bcf-4888b46eb586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:a7:ae:0c:13:2a:5c:9a:27:64:d5:ef:25:
42:2e:9b:a6:6d:73:68:27:ff:f1:d6:38:ff:01:20:
71:b8:f5:e1:f5:63:be:32:d1:ca:95:07:40:f7:f0:
cf:d0:5c:2f:01:5a:ff:b7:9a:ca:8a:2a:a4:7c:9e:
de:26:e6:81:e5:54:a6:e7:b5:85:7e:a8:71:50:1c:
50:cf:5d:be:6b:b9:bf:6d:9f:c5:02:7d:0f:3d:dd:
b7:32:52:56:5b:91:2f:29:4b:79:45:f7:92:93:f3:
77:44:f9:cb:1b:e6:ff:32:69:7d:2c:72:d6:35:e8:
c0:c3:ef:67:75:5f:2b:03:1f:aa:fd:23:e5:7e:a1:
b0:d6:de:15:68:69:d7:e8:e1:11:7c:91:02:41:f2:
e3:30:fd:78:51:90:62:0e:0f:08:0f:55:d4:d5:54:
64:73:8a:f9:31:ca:b7:33:8d:1b:00:40:7f:c2:b4:
97:fe:3e:a3:dc:3a:b5:83:4c:e6:3b:fd:1e:e1:95:
b0:8c:a0:2f:6d:91:f5:c9:a7:90:68:c6:8b:f2:a2:
22:dc:25:81:98:8f:42:ad:35:a1:69:b5:e2:c5:63:
42:23:be:89:f1:f1:ca:8c:e0:66:4e:b7:12:ff:64:
02:63:a4:16:d5:d2:dd:aa:75:f8:57:98:4b:76:4d:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A6:37:AF:24:93:EE:56:3E:C8:A2:D2:D7:6E:F6:90:FD:46:2A:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:a5:cb:ed:6b:98:cf:ca:d0:3f:0a:68:e0:38:2e:72:01:f8:
47:bb:bb:51:e1:42:76:d7:94:80:b9:5b:31:1c:60:1b:d1:39:
ba:10:3f:8b:f0:19:59:11:95:e6:dd:43:34:cd:75:93:98:b8:
e9:06:b8:c2:a2:be:0c:79:df:45:a2:c8:67:f0:33:d1:07:ea:
61:22:5c:23:2e:c0:52:88:18:9a:a1:03:5f:30:ad:45:04:d9:
93:70:e5:02:ca:24:c5:50:9c:8b:38:a1:10:f8:48:12:67:4e:
d0:b7:01:19:b3:d5:9a:3c:8e:0a:1b:5a:df:44:f7:fd:26:75:
0b:b9:41:6d:c5:ef:0e:45:bc:e8:d7:e9:29:4d:e4:b5:de:92:
16:e9:47:d5:c1:57:66:84:23:4d:cb:62:f3:23:9c:eb:e6:f7:
f2:48:33:8f:0d:7c:53:0d:94:59:be:28:d1:2e:61:ea:99:d8:
2d:c3:60:bf:d4:29:e5:d7:19:02:30:ec:09:7e:65:57:b2:b5:
33:44:3f:18:d2:4d:8f:1f:d2:64:3c:ab:82:d3:e6:04:50:79:
be:06:22:00:15:b3:34:87:ab:cb:0e:10:32:1a:0a:35:c3:9b:
ec:3d:8b:88:73:58:84:57:bd:e2:4b:e3:0a:32:e9:bf:80:ad:
06:66:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:33:02 2025 by rpki-client