
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
File: 609a7fa3-affc-3a0d-bb17-c6722250efd0.roa (raw, json)
Hash identifier: DrRGHiowZ1tpiWDYHpTjARTQzTwdi4/+YR5pyoQVX9k=
Subject key identifier: 21:52:D2:A9:0D:96:18:AF:AC:2B:F0:5D:6B:6F:ED:61:35:BD:5E:93
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BB45D444BA780C55ADB6A9F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8c:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:44:4b:a7:80:c5:5a:db:6a:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=24a8bf4e-2a38-4332-bbd4-640d63e26b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:ac:2e:74:e1:14:d2:f7:24:dd:71:eb:aa:
20:ae:82:98:b5:0c:2e:5b:99:03:d4:25:86:62:91:
b0:4c:44:41:ca:9b:d0:56:bf:bd:dd:72:af:0e:59:
c0:5f:8c:f3:3a:2d:31:bf:79:4b:6f:78:d4:83:ff:
fb:66:a5:f5:17:a6:d4:a8:3d:79:b8:99:27:98:20:
89:2b:8e:12:84:b0:92:9d:80:09:4a:b8:84:4f:a5:
38:82:8b:d3:5f:6a:31:e2:58:80:d1:a8:0e:56:34:
ef:73:84:bf:d7:87:20:5d:a4:dd:92:3e:d5:96:fa:
42:61:40:c6:fc:4e:dd:14:c8:47:0f:3f:07:d3:40:
ca:e5:f7:5f:4c:e5:38:b5:3d:67:00:f1:fc:cf:f4:
f8:91:a8:6c:d3:7c:3b:54:ca:5c:ab:8b:64:0a:e8:
15:02:09:28:75:34:bf:97:4a:d9:32:8f:db:f8:5b:
e1:ba:cc:af:2b:50:ec:f6:7b:6d:7e:e1:d0:46:e7:
04:19:a0:51:59:14:cd:49:84:2a:e3:7e:ee:05:3c:
e5:f8:29:d9:03:a1:be:fa:47:6f:64:46:f8:e5:9e:
1b:b0:7c:fb:a3:44:47:5c:be:56:b3:15:d5:dc:81:
04:c8:76:83:56:00:4b:c9:1e:60:b5:98:1e:a4:8f:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:D2:A9:0D:96:18:AF:AC:2B:F0:5D:6B:6F:ED:61:35:BD:5E:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:8800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:5a:74:d2:37:d1:31:fb:15:0c:0d:d5:bf:1a:c9:e2:c3:a5:
29:b6:92:78:1d:a9:f1:2a:49:5c:81:d7:eb:bd:73:16:94:73:
ff:12:8b:74:d3:db:3a:f7:01:ce:a0:e2:c1:f7:a0:08:63:10:
fd:a7:79:90:d9:96:75:3a:ef:62:7b:03:71:4b:f9:b1:00:b7:
af:67:5a:37:42:5f:e2:8c:67:1d:39:a1:5c:d1:40:cc:4c:7b:
7c:b1:3a:26:a0:8e:47:3f:55:92:b5:f8:52:8b:03:f5:2e:90:
3b:1f:71:be:23:da:ff:be:b7:c5:a2:b0:00:60:33:9c:85:fc:
4d:01:a7:45:c6:74:fa:1e:58:05:19:25:10:cc:44:cc:4a:5d:
4d:c8:43:fe:e9:6a:a6:67:00:a8:8a:e8:52:17:cc:22:fe:84:
bb:53:8b:b1:c6:17:28:ed:c4:46:c0:51:73:4f:e2:93:23:65:
95:17:e0:de:a3:fc:50:52:f2:33:37:34:b5:e8:0b:a2:d2:f9:
ac:da:9f:3e:1d:48:11:6b:83:06:d0:93:23:0c:6f:8b:55:af:
35:32:2e:2b:46:78:11:75:c9:08:68:9f:db:6a:06:6a:68:54:
da:d2:84:48:7d:0a:52:b4:f2:d9:85:26:2e:31:e3:23:a2:c4:
00:8d:cb:9c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XURLp4DFWttqn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
MjRhOGJmNGUtMmEzOC00MzMyLWJiZDQtNjQwZDYzZTI2YjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG2sLnThFNL3JN1x66ogroKYtQwuW5kD1CWG
YpGwTERBypvQVr+93XKvDlnAX4zzOi0xv3lLb3jUg//7ZqX1F6bUqD15uJknmCCJ
K44ShLCSnYAJSriET6U4govTX2ox4liA0agOVjTvc4S/14cgXaTdkj7VlvpCYUDG
/E7dFMhHDz8H00DK5fdfTOU4tT1nAPH8z/T4kahs03w7VMpcq4tkCugVAgkodTS/
l0rZMo/b+FvhusyvK1Ds9nttfuHQRucEGaBRWRTNSYQq437uBTzl+CnZA6G++kdv
ZEb45Z4bsHz7o0RHXL5WsxXV3IEEyHaDVgBLyR5gtZgepI8/+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCFS0qkNlhivrCvwXWtv7WE1vV6TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjA5YTdmYTMtYWZmYy0z
YTBkLWJiMTctYzY3MjIyNTBlZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujIgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAY1p00jfRMfsVDA3VvxrJ4sOlKbaSeB2p8SpJXIHX671zFpRz/xKL
dNPbOvcBzqDiwfegCGMQ/ad5kNmWdTrvYnsDcUv5sQC3r2daN0Jf4oxnHTmhXNFA
zEx7fLE6JqCORz9VkrX4UosD9S6QOx9xviPa/763xaKwAGAznIX8TQGnRcZ0+h5Y
BRklEMxEzEpdTchD/ulqpmcAqIroUhfMIv6Eu1OLscYXKO3ERsBRc0/ikyNllRfg
3qP8UFLyMzc0tegLotL5rNqfPh1IEWuDBtCTIwxvi1WvNTIuK0Z4EXXJCGif22oG
amhU2tKESH0KUrTy2YUmLjHjI6LEAI3LnA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:25:55 2025 by rpki-client