
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/47e9af1c-ccf8-32ff-88f5-0f518cbcce71.roa
File: 47e9af1c-ccf8-32ff-88f5-0f518cbcce71.roa (raw, json)
Hash identifier: xyJ0Uv3Tzk47CcQTFRjURXRjr77LhqBL7OHXFcBGzRE=
Subject key identifier: B2:2C:9A:CD:82:02:A4:4F:F4:1D:37:CE:59:43:CB:F8:E8:15:D4:AA
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA0D24044D87714DE4399FBE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/47e9af1c-ccf8-32ff-88f5-0f518cbcce71.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 206.226.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:40:44:d8:77:14:de:43:99:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=a47fe2fb-e597-41d4-a00b-deaa3caaab95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:1c:1e:18:ec:b5:71:77:5d:6b:23:94:8e:
9a:17:86:39:6d:2d:0a:d3:c6:72:e1:40:5e:53:ad:
e1:92:61:77:d9:c9:35:8a:45:86:60:35:85:2d:fe:
73:45:92:e0:6f:68:20:4e:eb:83:5a:78:65:84:1d:
6e:da:9c:9f:3c:65:7c:b5:26:de:e0:f4:87:06:85:
e2:a1:f2:26:55:8a:23:37:75:70:51:24:52:05:bb:
10:95:7e:f2:d9:c1:14:c6:83:cf:98:29:1f:1d:37:
f4:1d:63:96:0b:d6:02:13:fa:7e:50:7d:dd:30:b8:
be:24:5b:a7:f7:53:8d:b7:e2:20:13:7d:e5:3a:ae:
d0:20:c9:ef:27:5b:70:9a:3a:23:62:cd:3d:3c:71:
ec:0e:a9:24:08:56:ec:03:31:63:fe:59:2c:b0:66:
42:0c:03:c8:b6:f5:b2:ad:38:29:bd:4e:f8:f7:df:
dd:c6:0d:86:78:5b:ff:33:de:71:d8:b2:bf:78:2c:
b3:5d:83:ff:b6:55:dc:8b:5c:5a:73:40:bf:63:c3:
08:b5:2a:a2:7f:ee:01:04:88:e7:b3:cd:93:b0:c5:
98:53:1c:d9:42:15:12:8d:d0:3e:0b:1c:bb:00:d1:
69:d4:a0:db:24:67:eb:a1:c7:2e:84:d8:51:bf:37:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:9A:CD:82:02:A4:4F:F4:1D:37:CE:59:43:CB:F8:E8:15:D4:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/47e9af1c-ccf8-32ff-88f5-0f518cbcce71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
206.226.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:1c:71:b5:5e:35:36:00:07:f4:3b:5a:24:d3:75:24:e5:a7:
63:c5:74:38:0b:44:b7:de:a4:6d:02:09:62:8d:29:74:6d:d0:
1e:ae:ef:6b:a4:73:79:33:29:02:85:4c:6f:7a:9d:7f:06:a0:
07:d5:5a:01:98:48:c2:8e:ad:41:15:aa:ff:be:64:f6:ba:93:
26:2e:15:2a:3e:31:ab:cd:14:9e:80:94:15:39:a9:4e:3f:f2:
7d:35:44:7a:c1:cd:6b:6c:14:3a:8b:11:f8:f9:ab:e1:27:6a:
8f:8c:ab:ba:53:d6:51:ac:d5:f1:7b:d0:6d:7d:9f:92:ae:07:
90:6f:7b:51:fd:ae:42:24:d2:6f:fa:14:30:1e:17:3d:01:11:
ae:89:41:6f:6a:b5:00:ac:84:39:34:77:9c:3e:cd:fb:42:17:
28:0d:d2:0c:8d:e8:c4:8e:d1:66:61:72:db:46:6f:a8:1b:22:
5f:8a:81:ed:f6:52:f8:bf:09:64:60:03:81:d8:1d:b9:08:71:
45:db:b6:f1:60:10:a0:77:a7:2b:c6:b5:7c:82:b2:12:19:8b:
5b:21:e2:00:65:09:d9:af:95:1b:7e:e3:f4:c6:54:ad:00:34:
7d:cc:6d:d9:5e:c5:be:b7:98:b5:73:8c:42:8f:91:e3:61:96:
26:6e:b1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:16:36 2025 by rpki-client