
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa
File: 1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa (raw, json)
Hash identifier: SUj/hR3bgiRXnAcK8AbNV6KquAl1lwddSzmtb1m/ym8=
Subject key identifier: 1E:E0:7E:57:DD:AB:CA:DF:9E:8B:0A:D7:8D:6B:93:0B:46:11:60:0C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BB192853AAF1FD81B4BC348C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa
Signing time: Thu 30 Oct 2025 13:00:38 +0000
ROA not before: Thu 30 Oct 2025 13:00:38 +0000
ROA not after: Wed 28 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 2604:2e8f:8000::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:92:85:3a:af:1f:d8:1b:4b:c3:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 30 13:00:38 2025 GMT
Not After : Jan 28 14:00:38 2026 GMT
Subject: CN=45b2b81d-7c14-4e96-8247-b457188e147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:6b:14:79:e0:e4:5e:1c:45:48:87:64:a9:
70:aa:6d:de:f4:13:65:27:5f:05:a1:9c:87:65:cf:
b9:e2:90:65:79:47:be:11:5a:3d:fe:14:76:d4:30:
fc:2e:31:d9:55:0d:df:6b:7a:3f:e4:9b:81:cc:0f:
17:6b:0d:02:c9:49:cd:ed:2c:1e:aa:b0:14:f4:de:
93:b5:c3:e2:26:4b:8b:a5:ab:2f:9d:6f:c8:a9:a5:
f9:1f:07:86:83:17:98:1c:76:af:4e:f1:75:4c:3b:
c2:ef:08:60:42:5c:5a:d9:60:74:3d:cf:33:1b:77:
c1:98:b6:9a:57:d7:a5:94:af:a0:59:ea:65:8b:f2:
9f:82:11:00:db:78:19:94:83:f9:93:57:3d:7f:0d:
56:74:61:17:1a:00:07:b5:af:eb:1d:42:e5:aa:8e:
38:ba:75:90:b4:7d:3e:06:f9:62:2a:07:1f:3e:8d:
b1:b3:93:70:fb:09:e9:9a:0a:2c:83:52:e6:96:10:
1f:d6:a8:23:c6:5e:be:d9:07:e3:d7:43:19:6b:05:
0d:12:cd:56:8c:a7:39:a5:02:3d:bb:35:90:a0:ac:
e6:bf:d6:5d:6c:14:87:52:4b:f7:4e:96:1d:c5:dc:
5d:5f:8a:9d:c6:cc:fb:62:d3:f0:f8:45:88:12:de:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:7E:57:DD:AB:CA:DF:9E:8B:0A:D7:8D:6B:93:0B:46:11:60:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:8000::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ea:d7:b1:6c:79:5f:8c:73:f5:35:d4:11:b2:93:09:a9:ce:
8a:f4:35:2c:fa:39:0a:26:f8:3a:e4:da:20:da:b2:af:1b:db:
8d:0b:19:e2:b3:69:15:4f:c0:50:f3:73:90:30:86:49:4d:14:
aa:4d:a6:d0:d7:62:ea:5d:46:76:61:bb:45:14:b1:a7:58:01:
33:95:b6:fe:75:13:c5:3e:f5:cd:0f:0d:d5:94:1e:88:d5:ad:
82:0d:36:6c:dd:a3:e6:2e:de:b2:81:fb:e6:37:7d:91:cf:2b:
fd:1c:ee:01:b1:28:8d:51:93:a6:75:21:fd:1a:c3:87:c9:72:
8b:21:e3:18:5a:28:a6:f5:11:49:e4:00:9d:f8:52:9e:56:3b:
55:37:c5:e6:0e:da:66:2f:56:fb:77:27:44:ad:19:0c:9d:7c:
16:84:c1:89:e9:bf:82:1f:f7:6d:f5:92:07:37:f7:88:df:dc:
3a:4e:ad:f4:87:c1:ca:3f:f4:96:46:df:a2:4a:13:d5:b0:07:
bf:45:6b:c4:8f:1b:53:a0:07:24:bc:e1:83:f5:47:f3:3c:13:
3d:f1:7e:e4:a0:15:92:f2:d0:b7:30:97:15:83:de:ae:11:66:
32:77:69:35:df:a6:85:15:e5:53:84:14:ab:19:1d:7f:88:ae:
41:98:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:25:51 2025 by rpki-client