
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67435ad4-ea3b-3545-b2c3-2952586111e2.roa
File: 67435ad4-ea3b-3545-b2c3-2952586111e2.roa (raw, json)
Hash identifier: R7SEw9mCKcUIv5nrGLgiokGOFThmxBrI2AriFF5tMjE=
Subject key identifier: 2F:8D:66:9A:29:B4:D3:7B:A6:A3:9F:D9:B5:F0:7C:6A:30:97:3D:74
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BBCDAE0FA73316568449DB7C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67435ad4-ea3b-3545-b2c3-2952586111e2.roa
Signing time: Mon 03 Nov 2025 14:00:38 +0000
ROA not before: Mon 03 Nov 2025 14:00:38 +0000
ROA not after: Sun 01 Feb 2026 14:00:38 +0000
asID: 30036
IP address blocks: 45.59.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bc:da:e0:fa:73:31:65:68:44:9d:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Nov 3 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2026 GMT
Subject: CN=a9e4acdf-e9c2-4fe8-b139-05db22b0c2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:2b:3e:0d:e1:2d:8b:e1:12:cd:47:e3:84:
0c:21:30:0b:9e:66:80:d0:72:0a:9b:bf:86:ad:b7:
64:13:5b:36:29:63:54:08:73:5e:27:d9:11:bb:b1:
e2:3b:df:fd:9b:ea:a8:1b:87:59:7d:1d:f0:a5:95:
27:e6:85:76:2e:83:fe:50:80:dd:c0:4a:aa:38:bf:
7e:63:c1:47:8c:f8:74:96:83:83:13:39:7f:d7:95:
79:fc:db:7a:af:20:bc:99:c1:29:6c:f6:b3:c7:70:
1a:3c:46:3c:6e:80:4e:88:a2:dd:3a:54:42:c1:ee:
4c:85:37:97:33:d3:6d:2f:7a:53:5b:68:96:40:c2:
a5:e4:c1:5a:b1:22:2d:e5:5d:54:f7:87:3c:31:68:
30:98:21:e0:68:9d:a6:45:3b:ae:69:30:0c:ba:fb:
33:72:56:88:75:24:21:21:a5:85:76:09:80:56:6b:
d5:d8:4d:ea:16:04:3e:f6:2d:56:28:8e:ba:06:fc:
86:9d:f0:ad:c5:66:0a:b7:d7:90:28:83:e3:5c:fb:
64:e4:23:3b:da:13:cd:b2:76:f8:0a:b7:df:85:7c:
c2:a5:a8:7c:ee:ce:57:8d:5f:d5:31:eb:34:47:73:
35:d7:3b:65:bc:e4:e5:1e:94:ff:1b:d8:eb:70:15:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:66:9A:29:B4:D3:7B:A6:A3:9F:D9:B5:F0:7C:6A:30:97:3D:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67435ad4-ea3b-3545-b2c3-2952586111e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:2c:cd:76:0c:7f:1a:ae:09:04:8e:1f:bb:36:91:b2:7e:ae:
35:fc:c3:e4:cb:fa:b7:aa:3d:35:0e:e4:94:8b:a8:35:7a:8a:
9d:c0:87:35:68:46:7e:b7:09:37:85:7d:e7:0f:8c:1b:e6:4a:
b0:ee:9b:0a:e5:4d:87:a4:06:a3:68:da:dc:3b:78:8d:cb:a8:
76:4e:f8:ef:f7:d0:91:c5:13:7e:3c:10:3b:0d:a1:3e:d3:e7:
c7:5c:4f:13:da:71:5b:b9:0f:f1:92:2e:b8:81:51:7b:ea:c6:
dc:26:6e:da:73:85:e7:46:22:c7:89:08:72:aa:60:65:d9:b1:
01:cc:b8:c9:ad:37:a7:70:c8:f9:c0:5b:98:64:28:c2:ab:a7:
f3:9e:49:46:7c:fd:ff:6b:7b:78:9e:e3:f2:ba:01:ac:9a:a9:
30:8a:16:20:d6:ff:69:56:1f:d4:bf:8a:1a:a3:4c:de:e9:c3:
22:00:06:ee:ad:f4:11:00:e6:80:93:1f:49:ff:04:d6:45:f4:
6b:d9:78:5c:78:96:a0:4f:39:6e:46:f0:bc:ec:e2:8e:ab:fe:
9d:f8:b7:3d:ad:a7:3f:e1:fd:23:02:e8:31:37:eb:e1:e2:48:
91:d5:45:dc:6a:84:fa:8f:3a:1a:66:97:57:2d:98:24:ff:e7:
8e:5a:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:15:29 2025 by rpki-client