
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a7ff9f8-8ac0-370a-9994-4e4c407adbfb.roa
File: 7a7ff9f8-8ac0-370a-9994-4e4c407adbfb.roa (raw, json)
Hash identifier: ZQw3E7aUD0F9K3WvijeyVPWN3uVvJ/AXeB90FhAXpws=
Subject key identifier: 66:86:86:FE:28:A1:31:36:A6:E7:9C:30:F2:03:5E:90:BF:FA:36:97
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BB45D43EA0CE0624429251E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a7ff9f8-8ac0-370a-9994-4e4c407adbfb.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8d:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:43:ea:0c:e0:62:44:29:25:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=71fe0583-daa8-4830-a77f-98a2f34caedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:e8:b1:f9:07:ce:12:8b:6c:f7:49:cd:81:
10:00:e2:90:20:20:69:34:f2:f4:7c:7d:de:ff:86:
28:32:87:85:42:a3:7e:2d:04:6c:46:91:5d:79:d0:
ad:c4:a1:0c:46:c2:75:20:15:af:6f:68:ab:a1:a8:
d2:1c:0d:d7:38:b7:f3:01:66:6f:56:9e:55:18:17:
a8:ee:e8:6e:f0:67:9d:fe:c3:58:e8:62:3a:1d:ad:
20:2a:10:7a:4b:60:5c:77:64:71:41:9b:6c:3a:3b:
ae:7e:9f:ce:40:b0:51:66:c7:aa:87:3b:3c:57:93:
f5:5a:e8:63:0f:61:f0:2c:3f:25:74:ea:0b:d8:e5:
73:2f:de:15:2d:74:ec:2b:3a:c9:37:70:bb:38:62:
7c:e4:f9:32:16:ab:4a:c7:af:22:3a:eb:f1:66:0a:
8d:10:54:b1:86:59:03:1a:34:a0:7d:d4:63:91:9a:
bc:69:08:33:09:d1:59:84:5f:5e:44:05:1b:5b:ef:
e8:20:ea:b6:e0:66:73:28:c6:cb:e3:3a:a6:d9:47:
d2:4b:5f:9d:84:0d:d1:93:de:6d:cf:7d:62:67:49:
42:99:a2:a8:2a:f8:18:8b:3a:2e:1d:d4:0f:2b:d2:
3c:0e:7a:0d:ad:81:52:88:4e:77:da:b5:f5:2f:ba:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:86:FE:28:A1:31:36:A6:E7:9C:30:F2:03:5E:90:BF:FA:36:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a7ff9f8-8ac0-370a-9994-4e4c407adbfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:4b:9b:4a:79:16:d2:a9:33:9d:9b:af:46:86:4e:85:2b:e6:
5c:58:62:48:41:4d:20:4e:af:e8:4c:1a:5d:e3:60:06:7d:16:
2f:75:ed:ba:2e:97:81:8e:95:0d:b0:1d:fc:b8:1d:75:cd:20:
e3:3a:0e:6f:e7:e6:1e:04:c8:21:2a:ea:ca:ad:d9:95:b0:39:
16:c8:6f:0e:53:2d:8e:20:ee:a1:e0:9d:85:f9:18:94:da:0d:
68:b5:a8:17:09:38:24:79:70:16:ed:7a:32:c0:7a:e9:83:1b:
1c:ea:21:76:0e:93:f7:e7:f9:49:e9:06:e4:b7:b5:d7:8d:af:
c2:8e:99:c2:93:d2:82:a9:df:53:16:21:3e:ee:0f:c1:fc:b7:
3b:50:45:e3:94:7d:b9:60:19:8f:8a:ad:5c:b6:1f:7c:78:0c:
2d:d7:94:bf:97:77:69:b3:e7:0c:f3:14:82:ef:a9:88:e7:44:
6e:19:34:d1:5b:fd:7e:5e:bf:06:0e:61:30:62:3e:a9:94:88:
17:29:78:c5:eb:24:a5:89:99:d8:e0:88:fd:09:a2:59:b7:d9:
5d:85:b6:9d:f0:4a:15:8f:12:9e:3b:6e:8e:46:64:c5:a9:d1:
75:06:a4:ec:11:b1:e0:57:b2:31:58:39:97:77:a3:bd:c0:56:
73:fc:af:67
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XUPqDOBiRCklHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
NzFmZTA1ODMtZGFhOC00ODMwLWE3N2YtOThhMmYzNGNhZWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaHosfkHzhKLbPdJzYEQAOKQICBpNPL0fH3e
/4YoMoeFQqN+LQRsRpFdedCtxKEMRsJ1IBWvb2iroajSHA3XOLfzAWZvVp5VGBeo
7uhu8Ged/sNY6GI6Ha0gKhB6S2Bcd2RxQZtsOjuufp/OQLBRZseqhzs8V5P1Wuhj
D2HwLD8ldOoL2OVzL94VLXTsKzrJN3C7OGJ85PkyFqtKx68iOuvxZgqNEFSxhlkD
GjSgfdRjkZq8aQgzCdFZhF9eRAUbW+/oIOq24GZzKMbL4zqm2UfSS1+dhA3Rk95t
z31iZ0lCmaKoKvgYizouHdQPK9I8DnoNrYFSiE532rX1L7pWpQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGaGhv4ooTE2puecMPIDXpC/+jaXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2E3ZmY5ZjgtOGFjMC0z
NzBhLTk5OTQtNGU0YzQwN2FkYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujQgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVUubSnkW0qkznZuvRoZOhSvmXFhiSEFNIE6v6EwaXeNgBn0WL3Xt
ui6XgY6VDbAd/Lgddc0g4zoOb+fmHgTIISrqyq3ZlbA5FshvDlMtjiDuoeCdhfkY
lNoNaLWoFwk4JHlwFu16MsB66YMbHOohdg6T9+f5SekG5Le1142vwo6ZwpPSgqnf
UxYhPu4Pwfy3O1BF45R9uWAZj4qtXLYffHgMLdeUv5d3abPnDPMUgu+piOdEbhk0
0Vv9fl6/Bg5hMGI+qZSIFyl4xeskpYmZ2OCI/QmiWbfZXYW2nfBKFY8SnjtujkZk
xanRdQak7BGx4FeyMVg5l3ejvcBWc/yvZw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:57:12 2025 by rpki-client