
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/832cf838-5a6e-3253-935e-ddfeb98d24dc.roa
File: 832cf838-5a6e-3253-935e-ddfeb98d24dc.roa (raw, json)
Hash identifier: 7S75Rk502b8B1ZnsNjqAd06+mz3QbUePVqsL3WuzCN8=
Subject key identifier: B0:C0:5A:0F:27:8F:69:E8:F8:1F:83:7A:09:DF:85:F8:EB:C6:96:00
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584B9E07910F28F4961F05F18BC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/832cf838-5a6e-3253-935e-ddfeb98d24dc.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 63.142.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:91:0f:28:f4:96:1f:05:f1:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=8b4f9a03-d3d3-4064-808a-acf227098d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:72:aa:66:d4:0b:04:34:76:ea:4a:34:af:
a1:54:04:04:84:d2:0f:e4:8b:8f:00:88:09:81:de:
ae:a4:0a:02:3d:80:17:16:78:74:d7:5f:60:c7:77:
91:88:96:ce:58:d6:3b:7b:1a:ad:e7:b5:26:c4:47:
60:9f:dc:88:db:91:e2:de:15:2b:b0:3f:b8:e3:a4:
5a:78:9e:75:60:51:ea:5c:d3:47:b5:18:4b:f9:4a:
3a:9c:2d:4a:9c:7b:fc:51:0a:c8:78:f4:6f:a1:82:
b4:81:dc:4c:53:28:f1:31:0d:11:81:9e:f7:87:4c:
d8:b1:ad:39:ec:9f:08:8b:d8:ce:ca:f3:db:a5:90:
5d:27:2d:58:21:8b:46:c2:0f:ae:aa:e1:42:c4:95:
96:52:8d:f8:c7:62:69:72:27:f2:c6:da:63:d9:c6:
a8:7a:92:5f:bf:c2:f5:06:7f:52:c2:20:74:53:65:
b6:04:5c:73:fa:18:87:3c:fe:c6:19:dd:ef:ae:45:
85:e5:61:46:23:c4:67:a9:fd:57:68:59:c5:54:00:
ef:e9:97:6d:ff:c9:c6:ce:6e:74:44:79:13:87:64:
bd:aa:b7:76:30:8e:0a:a0:13:3c:56:0d:9b:ac:10:
9c:6a:22:c5:51:5d:a6:34:00:86:6f:e2:8a:56:b4:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C0:5A:0F:27:8F:69:E8:F8:1F:83:7A:09:DF:85:F8:EB:C6:96:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/832cf838-5a6e-3253-935e-ddfeb98d24dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
63.142.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ce:dc:55:be:ef:44:6e:df:42:71:d2:d6:bd:17:b2:d7:2c:
7e:65:5b:6d:2f:c7:5c:74:d3:c4:76:98:26:d7:e7:62:a0:99:
cb:77:ea:df:7e:17:9f:02:a1:9f:43:b0:82:8f:54:55:44:24:
15:5a:1c:95:ec:fd:6f:d6:01:a2:a1:d0:c6:05:c7:f0:d3:0f:
49:1d:c7:88:3e:d3:96:ea:c1:61:d1:e2:29:4f:23:d3:ad:92:
a0:b0:11:a9:f5:9b:6c:ef:54:f0:ca:0b:9c:6a:0a:a8:c0:56:
77:78:ed:76:c1:7f:74:1a:d1:22:6f:b2:de:de:36:4f:b6:87:
3a:57:48:58:9c:f2:48:6f:f8:9a:fd:4c:fc:44:6e:45:f7:01:
a8:8e:c0:92:50:02:df:ae:aa:25:0e:fd:0b:c8:c5:93:b9:e6:
5f:58:b4:5f:bd:f6:a5:23:ce:5f:8e:dd:4d:2a:56:bc:30:e3:
18:7a:bf:26:8c:85:cb:7d:ba:cd:22:69:f8:19:2f:44:32:9c:
6c:ae:27:d3:84:40:1a:2a:58:69:5a:e4:8c:3d:12:d0:e5:a3:
89:bc:0f:a3:f7:27:8e:44:06:a9:9d:67:b6:7f:30:ef:78:a2:
f2:b3:63:61:2e:67:f3:50:f3:4d:10:2b:53:9f:89:ca:0c:72:
3d:ac:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:37:21 2025 by rpki-client