
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57abded1-f663-3e15-b3da-fdb4dd0afde8.roa
File: 57abded1-f663-3e15-b3da-fdb4dd0afde8.roa (raw, json)
Hash identifier: 89tFgwNEvL8GDoWNl4FbNHfm84MgJ56X95X9cmjHMWg=
Subject key identifier: 16:96:20:28:99:15:48:9A:11:9B:19:FF:0F:24:91:83:80:B7:49:D8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BC05F03FA72D690CB39458B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57abded1-f663-3e15-b3da-fdb4dd0afde8.roa
Signing time: Tue 04 Nov 2025 20:14:21 +0000
ROA not before: Tue 04 Nov 2025 20:14:21 +0000
ROA not after: Mon 02 Feb 2026 20:14:21 +0000
asID: 30036
IP address blocks: 2604:2e8f:a800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c0:5f:03:fa:72:d6:90:cb:39:45:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Nov 4 20:14:21 2025 GMT
Not After : Feb 2 20:14:21 2026 GMT
Subject: CN=7dfb1063-3cb5-4f3f-8052-10d06336c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:d1:8b:39:df:c8:c8:b6:b5:5d:7b:c1:5f:
e4:e5:71:b6:51:9d:43:58:68:7d:fe:6d:99:1f:81:
7e:16:81:47:99:ff:41:7a:f7:bd:72:bb:44:71:c3:
00:26:61:b2:ed:47:fd:97:3b:9b:fb:6d:2c:7b:83:
fb:94:3a:bf:17:ea:66:0e:a4:71:c1:6f:c0:ba:60:
b5:86:3b:c9:b4:d7:66:74:65:82:d5:d2:d2:9f:59:
c6:3a:31:a1:6a:8b:31:2f:a9:04:79:28:68:db:d1:
24:b4:97:13:0e:33:35:17:a4:e9:07:22:4d:b4:ef:
0d:fb:51:cd:d2:7d:ab:92:0c:51:a4:c1:6e:17:49:
8d:9a:61:bd:08:3f:7f:19:2e:f4:93:a4:68:ac:1d:
bc:84:18:66:2a:d4:a0:97:93:23:49:ba:af:48:51:
ff:61:b4:c5:e2:8f:fd:85:8b:90:c7:85:46:15:ca:
a3:01:ac:1c:7b:26:df:57:55:50:bb:8c:7a:2b:b4:
77:e6:9d:91:9d:11:a9:c0:1b:44:34:70:09:f1:c3:
0d:8a:fa:dc:11:61:21:28:4c:38:8e:c5:96:89:60:
45:45:bf:be:d7:db:0a:64:50:07:27:11:d7:d4:64:
e4:48:d0:f0:00:c0:c7:1a:27:3c:34:8d:8e:f4:43:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:20:28:99:15:48:9A:11:9B:19:FF:0F:24:91:83:80:B7:49:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57abded1-f663-3e15-b3da-fdb4dd0afde8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:a800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:b7:5c:72:aa:32:2e:82:c7:0c:b8:b9:06:27:af:11:d6:f1:
6f:f8:70:8a:dd:0d:98:d9:08:17:89:b9:64:79:2c:51:91:21:
23:2a:c7:ef:82:0a:c4:a7:f5:85:b9:c4:95:0b:04:4e:7a:1d:
2f:c4:55:10:64:6f:01:54:61:8b:68:56:db:17:49:6e:3c:39:
fd:92:b6:76:5d:14:96:fd:27:bc:e8:2c:b2:26:fe:e3:d5:9d:
c0:33:dc:fb:a1:c7:d4:f4:c0:73:07:ba:01:da:ab:28:09:8c:
04:01:c4:92:be:11:62:51:73:37:17:1d:08:eb:36:7d:14:cf:
e1:bf:4e:3e:f6:cb:38:98:26:54:ba:11:d6:74:2a:54:ac:dd:
54:e6:07:e3:1d:24:86:d6:61:9a:e2:71:84:87:fd:dd:3b:a0:
d3:e5:26:c9:47:a7:06:a1:5c:5b:f0:eb:57:50:e9:93:d6:33:
6a:64:f8:8a:29:77:d9:ee:fd:07:2f:91:31:d7:b8:62:1c:9b:
74:5f:d1:cb:dd:1e:e2:52:5a:4d:17:51:b6:85:fb:0a:e8:9e:
e5:42:75:b1:11:28:e6:f3:fd:95:d1:ea:b1:19:69:d0:2d:4b:
e5:d9:61:3b:cd:c8:d8:3c:a1:48:3f:97:dc:9c:d7:08:c5:b6:
ce:d7:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:38:35 2025 by rpki-client