
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58989827-5598-3052-974b-008e2ebd2a81.roa
File: 58989827-5598-3052-974b-008e2ebd2a81.roa (raw, json)
Hash identifier: aQzEclI1Ky4aTSX64qxUXqwHuhAbHqKAdnJtpjHQGqE=
Subject key identifier: 60:C9:3B:F9:1A:E6:AE:EA:6E:17:73:76:37:E1:42:BA:DD:61:DD:AF
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BB1925CA44023469FDF1CCA00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58989827-5598-3052-974b-008e2ebd2a81.roa
Signing time: Thu 30 Oct 2025 13:00:38 +0000
ROA not before: Thu 30 Oct 2025 13:00:38 +0000
ROA not after: Wed 28 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 108.178.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:92:5c:a4:40:23:46:9f:df:1c:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 30 13:00:38 2025 GMT
Not After : Jan 28 14:00:38 2026 GMT
Subject: CN=bd6672d0-9c02-4879-85e0-0e37c6bca08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:06:33:e3:b7:dd:80:3b:78:e6:88:ca:c5:03:
93:51:72:7a:62:ab:76:6d:4e:61:e0:60:2c:45:0f:
6f:73:06:f8:ad:f2:b3:d6:96:7c:34:c0:f1:20:f2:
b3:8c:a3:93:56:bb:e9:1c:97:a4:da:c8:2a:e5:43:
a4:66:1f:1f:cb:75:16:eb:bc:0f:fd:27:62:3d:98:
b9:bc:09:ba:a5:72:8f:a2:b8:a0:31:cf:67:0a:f6:
28:04:3a:71:27:31:4f:23:4b:42:d6:8c:c1:8c:9d:
56:38:8a:31:83:9a:82:21:e1:f3:11:a8:ed:22:ea:
36:62:4f:41:8b:40:9b:37:95:95:ec:1d:e7:05:7e:
92:b9:ca:6d:af:34:ed:9c:d6:f6:7c:73:74:29:7e:
a0:df:13:40:03:26:16:c6:92:93:39:23:03:fa:ce:
a7:e7:7d:08:44:93:82:9c:08:a6:6c:b4:70:dd:13:
e2:1c:8f:9d:6a:66:64:dd:78:90:4a:57:3c:6f:95:
a0:59:c5:4a:e0:55:77:42:9b:fb:44:82:6f:70:57:
48:f3:89:c9:a1:d8:18:3a:76:9d:b5:48:68:af:51:
c1:88:ef:ac:62:84:0b:dc:c7:32:1e:ac:0b:fb:90:
f6:bc:52:2f:f5:17:d2:aa:54:bd:f8:06:d4:c7:d2:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C9:3B:F9:1A:E6:AE:EA:6E:17:73:76:37:E1:42:BA:DD:61:DD:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58989827-5598-3052-974b-008e2ebd2a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:98:41:19:eb:99:55:c4:10:f3:bc:8f:cb:f3:9d:97:22:25:
c0:4f:85:d0:b0:91:eb:3e:cc:6a:93:63:57:25:6b:51:9f:6d:
25:ad:d8:2e:fc:bc:e0:09:f7:51:77:98:31:49:44:99:93:ff:
80:cd:27:01:99:22:93:6f:d1:31:1a:ab:d7:d6:0e:c3:c4:f3:
b1:97:bd:f9:d4:f8:67:36:68:bd:11:0e:21:ba:0a:07:23:ce:
90:ed:31:d4:9c:fd:0f:9e:e2:c5:32:81:98:69:09:13:eb:99:
08:96:94:e7:e2:35:9e:a0:4c:d2:6c:90:22:85:09:5b:49:29:
c2:3d:a7:03:1f:65:58:19:35:96:8c:c3:c4:a4:a7:ce:ac:c6:
94:18:95:34:78:89:62:57:e1:bd:ab:79:f8:d0:96:9c:36:9b:
67:f6:62:13:d2:16:95:26:c8:d8:3b:0f:1c:23:22:89:69:cc:
2f:92:aa:14:a5:34:1a:3f:74:e8:63:3d:b0:08:cc:5e:ef:a3:
86:e8:58:96:03:48:3a:b4:27:4e:73:c1:eb:a7:2b:8c:55:b3:
fe:af:c9:0d:d1:bb:03:df:2e:2e:9b:13:49:94:e1:0c:60:88:
18:10:65:5c:5c:e6:13:6d:cd:75:66:92:18:b9:a5:75:91:0d:
e2:af:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:37 2025 by rpki-client