
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
File: 248a1fbf-b60e-3527-b32d-4b51452afa6f.roa (raw, json)
Hash identifier: tdWTyzgIqTD0uPGBPlh0FRqres4+DYbFCq7y0QLquC4=
Subject key identifier: 22:89:87:8F:7D:44:BE:C8:E8:74:77:36:A3:48:7D:A5:11:92:33:8D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA39CF14F7819443BABDAAE20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 104.201.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9c:f1:4f:78:19:44:3b:ab:da:ae:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=f1c89a07-318b-42ee-9d87-4c8c22856202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:42:98:5e:90:fa:84:52:3d:01:9a:7c:5e:4e:
c1:61:21:e0:7d:38:ce:a9:81:0e:94:31:33:ad:08:
45:46:7a:32:3b:73:36:04:be:18:34:46:d3:c7:92:
38:ca:e0:84:61:3a:ac:37:e7:0e:c3:e3:97:57:6b:
db:f6:c0:3d:83:ee:94:55:91:f6:0d:73:ae:5a:aa:
7c:06:f6:2d:b1:ca:90:70:36:5f:cc:64:ad:a8:67:
cd:6a:95:ee:05:77:ec:2d:1d:61:fa:74:0f:c6:5f:
45:80:d4:4a:3a:8e:a5:01:bf:9b:eb:df:76:58:22:
d0:56:ae:e7:cc:18:44:23:d9:cb:58:b3:08:0b:fc:
62:0b:e9:e9:2b:67:9c:dd:ca:cd:5f:e2:8a:f7:50:
84:fe:65:87:53:a8:a0:e5:9d:31:de:ab:5f:b9:7f:
a5:4e:2d:02:ad:b1:24:cd:70:87:1f:db:1a:79:d3:
29:99:3c:b6:b3:8b:ea:f4:61:68:fc:9f:4d:97:08:
60:a1:a4:60:a7:31:d2:08:9d:c8:73:cb:35:c2:bd:
d5:dc:19:08:d7:c7:cb:3f:4d:40:d9:31:15:35:34:
90:92:f0:e0:1c:db:a2:ef:dd:19:f4:58:f6:f9:3e:
b9:55:c5:05:24:30:63:72:ad:9d:ad:29:0a:38:00:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:87:8F:7D:44:BE:C8:E8:74:77:36:A3:48:7D:A5:11:92:33:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:6e:ec:de:ed:84:c9:08:aa:f0:1b:53:ab:9b:a7:26:4f:0f:
f1:ac:13:99:6d:ab:55:38:d9:ee:cb:75:42:13:5a:91:58:41:
ca:98:19:2a:70:b0:6c:4e:03:6e:87:e4:15:87:7d:df:0e:91:
c4:91:f0:24:de:d9:84:2d:c8:46:84:67:04:94:e4:f3:59:00:
fd:6e:60:d7:f1:85:6b:fe:09:b0:bc:3f:53:a7:ce:ac:b9:41:
4a:fd:89:f6:7a:b3:c0:ca:22:91:cc:fc:fe:2e:8d:b2:35:53:
85:a2:28:66:5e:66:f3:c0:2b:88:ed:a3:52:40:1e:8c:0f:03:
a7:57:9c:7c:6a:cd:be:22:77:bc:ca:c3:c0:87:81:fe:af:97:
0a:1d:cd:3a:ff:a9:85:0a:d5:79:b6:b1:9c:4e:93:83:b0:d9:
2c:89:48:d1:6b:5c:c8:91:55:fe:ca:38:07:8e:ad:11:32:94:
ac:ff:51:02:c9:91:5b:09:ca:db:6e:bd:3a:02:2b:e0:34:86:
46:11:bb:39:c6:65:02:7f:ba:53:aa:1d:77:9f:26:34:73:ab:
93:87:33:85:7c:2a:fe:2b:e3:af:6e:11:c2:18:3e:ab:d1:ea:
de:10:d3:14:67:de:4f:16:ed:e2:d0:54:a3:d7:32:7f:8f:07:
66:24:dd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:10 2025 by rpki-client