
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa
File: 3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa (raw, json)
Hash identifier: 3cHp4NaPdT6N+1NVelKEew1kQqxXa+n+ujxHZ3iO5Vs=
Subject key identifier: A7:09:7B:37:4E:28:12:80:05:9F:31:5D:49:C0:A3:73:4B:77:0B:F2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA23785ED66A059181F903BC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa
Signing time: Sat 25 Oct 2025 01:00:31 +0000
ROA not before: Sat 25 Oct 2025 01:00:31 +0000
ROA not after: Fri 23 Jan 2026 02:00:31 +0000
asID: 30036
IP address blocks: 2604:2e8d:d800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a2:37:85:ed:66:a0:59:18:1f:90:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 25 01:00:31 2025 GMT
Not After : Jan 23 02:00:31 2026 GMT
Subject: CN=dd2573cb-7b4b-47ff-9608-cf2de7d2de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:0f:d3:2d:da:d9:ea:09:4e:b1:f1:f8:8b:
37:ed:89:a9:d8:98:ad:06:98:19:ec:3b:96:ed:16:
a7:fa:b1:c2:11:aa:36:cd:3f:f8:23:81:c3:ad:14:
f4:78:9a:fd:78:aa:35:4d:e1:b6:20:89:7d:81:c9:
d4:5e:50:e2:f0:81:1d:89:c7:b6:ce:e5:82:32:de:
60:19:e7:12:73:47:65:de:fe:43:f0:db:50:55:e7:
81:ac:fa:e5:d1:77:92:38:50:dd:df:e0:bd:49:3e:
f6:e8:ed:93:82:b1:3c:5c:cb:d7:78:34:2b:fa:d7:
f6:27:94:f8:67:fc:6e:5d:4f:13:3f:5c:aa:cf:4e:
ca:12:a6:ce:4f:4d:c9:cd:b6:9d:df:39:f1:d9:dc:
d7:92:d2:25:8d:c4:81:1f:88:20:47:09:8b:a0:52:
c9:7c:38:a5:5d:59:88:65:d7:f5:ba:c9:ed:db:b9:
23:03:08:d3:24:e5:3f:b5:5f:f1:af:61:32:db:dd:
0f:6d:a6:ed:b4:fc:8f:0f:91:39:5a:21:b1:ff:23:
6e:a7:9a:1f:13:aa:44:6a:8b:43:cb:00:06:61:b8:
b1:9a:a3:71:2e:6b:55:e5:ee:87:7f:4e:49:99:99:
e0:b0:f2:22:37:bd:3d:40:d6:b9:e7:5b:fd:fc:76:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:7B:37:4E:28:12:80:05:9F:31:5D:49:C0:A3:73:4B:77:0B:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:d800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d5:4e:b1:87:c8:d8:43:57:6b:ce:1e:5f:45:b7:c5:df:5b:
07:09:53:96:f8:4c:84:d6:41:f9:38:6c:f5:6a:42:1e:c9:00:
b9:73:c3:98:a5:24:96:fa:3d:ff:8a:c2:0b:0e:6e:1b:e5:26:
b7:a4:4d:0e:35:46:e9:3d:46:ef:c1:a2:e8:3c:da:f3:f7:75:
24:43:10:f4:6c:73:c9:24:90:c1:5e:81:58:70:2d:38:23:0c:
30:35:d6:4f:d4:73:66:2b:ae:d9:ba:a3:ad:85:41:b9:2c:ef:
85:0b:ae:b4:f2:70:f5:79:33:8e:44:39:74:c8:12:41:6e:ef:
34:2b:27:b7:59:de:41:ab:11:67:21:84:66:b1:34:d5:83:8f:
c6:39:a3:c2:1c:58:89:90:27:8b:71:38:a8:60:57:43:76:1f:
10:df:ba:fc:39:31:1a:a0:02:d6:cb:f5:bd:e3:82:0f:8e:c2:
e9:b2:46:df:3d:63:45:14:45:ab:73:2d:d5:a4:7d:59:3d:fe:
ea:22:0b:ed:ca:4d:80:dd:77:ac:09:c6:df:c4:4b:7b:59:09:
1c:f1:c9:94:d0:fc:a6:86:d3:28:a1:3b:d5:ee:d6:63:f1:37:
d8:6c:71:cf:43:5d:d0:dd:3e:1f:6f:27:68:d0:d6:b9:05:8e:
d7:3e:c2:b8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN4XtZqBZGB+QO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk
ZGQyNTczY2ItN2I0Yi00N2ZmLTk2MDgtY2YyZGU3ZDJkZTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk0P0y3a2eoJTrHx+Is37Ymp2JitBpgZ7DuW
7Ran+rHCEao2zT/4I4HDrRT0eJr9eKo1TeG2IIl9gcnUXlDi8IEdice2zuWCMt5g
GecSc0dl3v5D8NtQVeeBrPrl0XeSOFDd3+C9ST726O2TgrE8XMvXeDQr+tf2J5T4
Z/xuXU8TP1yqz07KEqbOT03Jzbad3znx2dzXktIljcSBH4ggRwmLoFLJfDilXVmI
Zdf1usnt27kjAwjTJOU/tV/xr2Ey290PbabttPyPD5E5WiGx/yNup5ofE6pEaotD
ywAGYbixmqNxLmtV5e6Hf05JmZngsPIiN709QNa551v9/HYAEwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKcJezdOKBKABZ8xXUnAo3NLdwvyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2EwY2RhNTktOTZjNS0z
MDc0LWFmZGYtMTU0M2ExMWEwYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujdgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdNVOsYfI2ENXa84eX0W3xd9bBwlTlvhMhNZB+Ths9WpCHskAuXPD
mKUklvo9/4rCCw5uG+Umt6RNDjVG6T1G78Gi6Dza8/d1JEMQ9GxzySSQwV6BWHAt
OCMMMDXWT9RzZiuu2bqjrYVBuSzvhQuutPJw9XkzjkQ5dMgSQW7vNCsnt1neQasR
ZyGEZrE01YOPxjmjwhxYiZAni3E4qGBXQ3YfEN+6/DkxGqAC1sv1veOCD47C6bJG
3z1jRRRFq3Mt1aR9WT3+6iIL7cpNgN13rAnG38RLe1kJHPHJlND8pobTKKE71e7W
Y/E32Gxxz0Nd0N0+H28naNDWuQWO1z7CuA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:56:02 2025 by rpki-client