
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/207e5e7a-256c-3abd-b77c-8241b79acf26.roa
File: 207e5e7a-256c-3abd-b77c-8241b79acf26.roa (raw, json)
Hash identifier: nhBz5bceZAlRIzzI0zgNAh2Crv8hp7RAIWFAPr9nW64=
Subject key identifier: B1:24:D7:3D:0F:DC:2B:D2:EE:DC:1C:55:B0:A9:5B:81:8D:5C:9B:6A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA0D25834BF7B6788123D3698
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/207e5e7a-256c-3abd-b77c-8241b79acf26.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 192.119.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:58:34:bf:7b:67:88:12:3d:36:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=6934abe8-919b-40e3-8350-c7e0bef2bd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:de:e4:03:98:d9:30:5e:79:15:3c:27:0b:
4b:eb:9e:86:7e:60:5d:13:ac:a2:54:93:8e:63:ec:
a2:bc:dd:42:5d:e7:e1:9e:b1:0c:dd:6a:c6:81:52:
12:b3:4a:16:86:4b:ce:36:85:22:53:ad:cc:55:ab:
a3:ae:4d:0b:99:17:9e:3e:1d:1d:dd:03:99:ec:c8:
66:4d:18:af:72:58:63:f7:33:e2:c8:07:ed:bc:21:
da:7e:f9:46:59:d7:88:19:e4:ab:f9:c0:9a:55:9e:
da:ca:e4:33:0d:67:3e:c3:6c:31:17:68:5c:ca:6c:
5a:ab:e3:1a:8f:e1:21:3d:b1:58:a3:97:de:da:9e:
33:dd:54:90:f9:e1:3a:7d:17:07:39:f6:11:c5:6e:
b2:2f:d9:32:2f:1c:90:9c:0e:d7:e3:33:77:2a:a4:
ea:56:94:4f:82:82:31:d9:78:fc:c1:4d:ff:3d:01:
26:79:ef:09:3b:51:ba:45:ec:39:d3:38:ba:a7:53:
94:73:8f:42:35:b3:50:0b:bd:53:da:41:ed:ca:3a:
04:99:4f:e7:d2:77:4a:75:ee:c0:0f:17:ca:99:63:
da:e5:20:80:76:ed:2d:30:9c:1c:4f:a0:6f:60:02:
2a:97:fb:b2:ba:b5:c1:6e:75:7e:62:68:fb:6b:c1:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:D7:3D:0F:DC:2B:D2:EE:DC:1C:55:B0:A9:5B:81:8D:5C:9B:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/207e5e7a-256c-3abd-b77c-8241b79acf26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:bd:4b:cf:6b:47:91:c6:91:47:e4:52:10:66:73:08:95:d7:
5d:e4:03:97:31:f8:16:27:18:c1:f3:a0:c1:7b:61:3c:dc:19:
dc:26:fd:7b:4f:f6:8d:05:b6:4f:d9:46:71:61:3c:56:30:6f:
e6:af:57:bc:56:f2:65:bc:4e:eb:95:c8:ce:3a:96:a3:af:fe:
fb:16:41:84:b2:d1:56:c3:e2:d7:17:fb:cf:0b:32:f2:1b:c1:
4f:df:16:38:b7:f9:51:55:01:a0:c4:15:b4:93:0c:ec:83:59:
8d:23:e7:09:8e:f0:60:f2:8b:00:2b:5d:2d:9d:fc:fe:b2:cb:
24:da:ae:93:c0:4a:17:0d:d2:5c:c3:52:ef:61:66:69:8c:1c:
4e:3e:74:58:f2:ec:c2:08:99:ad:01:70:5a:56:1d:b6:bb:56:
cc:e5:20:9b:b3:4d:0c:0f:5d:bc:cf:3b:b3:be:30:9f:d8:ca:
9e:b3:81:0d:30:f2:15:9e:bc:3d:73:e9:13:f6:bf:a9:ea:88:
88:bf:47:dc:04:dd:f8:9b:d5:58:74:13:74:12:3e:c7:c6:1c:
7c:2b:f4:62:4a:34:ee:a3:82:37:38:5c:08:e4:c6:78:e3:2f:
bd:14:6d:3e:f1:d1:b7:8c:81:c3:9f:8e:0b:04:c0:c5:ec:70:
fd:9c:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:23:24 2025 by rpki-client