
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa
File: ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa (raw, json)
Hash identifier: +NrVBvWbEY/Z+PllYX8wsmhxbLi2m90aIJ7fFqAH7HM=
Subject key identifier: 37:A2:57:70:46:2D:A1:8D:43:A7:D3:A9:97:86:3D:67:CF:76:C9:65
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B67973D23CDADF7A7EE05AD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa
Signing time: Sat 04 Oct 2025 01:00:33 +0000
ROA not before: Sat 04 Oct 2025 01:00:33 +0000
ROA not after: Fri 02 Jan 2026 02:00:33 +0000
asID: 30036
IP address blocks: 173.19.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:67:97:3d:23:cd:ad:f7:a7:ee:05:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 4 01:00:33 2025 GMT
Not After : Jan 2 02:00:33 2026 GMT
Subject: CN=cd4dea64-1aa7-4aa8-a0be-47450a8f232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:ca:14:a4:4e:6d:e9:e3:c4:03:a5:41:42:
81:7f:7b:0d:da:07:13:51:13:24:de:4a:c5:ec:c2:
7a:ec:d4:a8:39:99:40:3d:73:36:d5:78:5c:50:14:
84:6a:20:2d:30:1d:c2:09:8a:48:95:1b:87:21:70:
8b:00:85:fb:4e:0f:d9:c2:56:fb:b2:8c:97:ea:78:
fd:53:4d:ea:4d:84:37:bc:94:1c:51:e7:4f:49:a2:
2a:41:1b:2e:82:73:ad:07:75:b5:60:08:cb:6a:ac:
5a:23:de:9d:4a:bf:4e:e5:f7:93:da:0c:36:c3:de:
02:fd:cc:97:c5:0a:b2:c0:a1:a6:26:db:06:e5:03:
11:e0:7c:6d:af:ac:73:a4:62:24:58:7d:78:09:f1:
00:de:0a:75:cd:b8:81:10:6e:83:70:50:92:eb:13:
7a:2c:60:e6:08:59:f1:ff:f8:8d:1b:88:aa:60:b5:
77:dd:01:b4:b9:45:f6:97:f7:e3:26:40:52:c4:72:
a0:47:84:e1:50:d8:f8:94:28:51:ef:17:d8:6b:65:
ee:aa:1f:0c:ba:5d:bf:10:0a:9a:6b:35:94:ad:00:
f0:85:31:de:2c:0e:5c:aa:bc:47:d0:5c:5c:18:96:
6f:b3:40:c8:fc:00:a9:b3:46:9f:fd:a3:d5:c4:5e:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:57:70:46:2D:A1:8D:43:A7:D3:A9:97:86:3D:67:CF:76:C9:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:2f:69:6b:15:16:ab:21:7f:9a:bd:30:62:eb:58:23:9a:fd:
c3:aa:4b:27:e9:0c:73:0f:7b:d7:04:8b:5a:41:84:2b:99:53:
ee:1f:ae:3e:61:b9:3b:8c:71:fc:01:f4:f6:fa:54:02:59:a5:
55:71:b1:11:bd:d2:ea:af:c9:55:ec:71:d9:70:df:34:3d:e0:
fd:69:39:04:98:5f:66:5c:fb:2c:3d:65:8c:58:2b:e6:8f:16:
1f:d9:08:c0:11:dd:5f:fd:9b:e6:9d:b9:cf:82:78:6a:09:03:
ee:95:4f:56:6c:fb:9d:4b:e9:59:5e:9c:f6:c5:0c:e1:97:16:
7a:b6:79:22:c0:07:28:57:94:2f:70:c8:e6:36:a5:82:1f:f4:
64:a4:a0:4f:de:a6:43:3b:24:12:4e:37:4d:2a:f9:4e:fb:bc:
b5:a6:39:3e:b9:e3:ec:95:4e:d6:7a:30:cd:6c:53:54:00:8c:
1f:d3:86:6a:a1:54:de:ed:45:54:0f:5b:08:01:9c:61:f7:b9:
45:09:0e:4e:d0:00:7c:02:08:d5:4e:1f:e7:c9:a5:fa:99:fc:
14:dd:84:cc:f0:30:4f:03:7d:ef:1d:4a:9e:e5:16:d2:f2:18:
ad:54:b3:e3:09:2d:2a:a9:12:26:1e:b7:a1:b3:58:7d:7e:69:
16:1b:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:06 2025 by rpki-client