
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90502b83-521d-302e-9013-fa4078bdf306.roa
File: 90502b83-521d-302e-9013-fa4078bdf306.roa (raw, json)
Hash identifier: PfG+/GO1B24BWTOXhaQLz3qcBdKJ1blCgy8zd4XBLe8=
Subject key identifier: 95:B6:DE:97:88:EF:72:12:45:5A:68:F2:BF:89:7C:28:70:CB:89:91
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BB45D40E13471651BF0A458A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90502b83-521d-302e-9013-fa4078bdf306.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8c:2400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:40:e1:34:71:65:1b:f0:a4:58:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=aa7c4a47-ba07-4307-b4c7-82fca84ebf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:7d:1c:bb:8b:6d:cc:a8:fc:70:3d:ba:23:
d9:ea:e0:6b:b1:4a:d1:ec:d2:21:d2:db:74:9b:9c:
62:f2:c2:fe:01:6a:36:24:ee:e8:ca:25:7d:c4:be:
77:c3:13:37:67:3b:a7:9c:6a:05:66:61:cd:a3:b8:
fa:4f:63:9e:56:f5:b8:5b:dd:d6:45:a6:ba:25:6f:
0b:0f:6a:6e:dd:83:86:63:a7:87:47:29:7b:a3:15:
43:90:49:81:0a:62:ce:60:3d:d3:62:e9:7b:3a:50:
64:c7:53:45:22:f2:26:6c:d8:48:c5:2e:01:cd:90:
25:9c:cb:b7:e6:e0:fd:30:24:ad:62:ed:00:52:dd:
be:f2:89:b2:8a:18:1f:ff:4f:99:52:ad:ac:8a:73:
11:44:63:64:74:d9:01:7e:c7:d1:c1:b0:3f:16:e0:
e9:da:27:ea:63:65:b9:04:bf:d2:c7:38:e5:0d:a9:
6a:82:67:8c:9f:07:9f:c3:b1:05:5a:36:a3:d5:f0:
5a:04:cd:fe:f0:2e:32:a3:c6:d8:3d:4d:7f:a6:1e:
d7:86:1e:f6:b1:79:15:b1:55:a0:3b:b9:dc:36:86:
dc:d1:d1:a5:d6:e6:80:81:c0:2c:9b:6a:92:bf:91:
ce:3b:93:14:90:b7:31:fa:d6:94:2d:8b:a6:13:68:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:DE:97:88:EF:72:12:45:5A:68:F2:BF:89:7C:28:70:CB:89:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90502b83-521d-302e-9013-fa4078bdf306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:2400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c5:29:71:86:90:1f:14:8a:ee:1f:ab:85:03:89:3b:f0:22:
c5:79:c9:ae:db:28:7e:1c:c4:20:60:b6:14:5b:10:8f:02:7e:
ba:35:76:c5:33:1c:19:2a:67:43:d9:46:ef:69:26:c7:13:8a:
08:34:32:21:e3:b3:45:fd:68:a8:93:67:a2:21:1c:85:d1:f7:
61:b4:0a:88:87:41:c2:b6:22:4d:08:a4:44:f1:1e:8b:fd:1e:
38:65:91:fa:7c:fd:3a:5f:81:fb:a4:15:6c:e1:59:95:7e:64:
9c:75:a4:91:0a:65:19:c5:fe:32:4e:39:9e:2a:2e:d4:f1:3c:
2d:10:27:23:28:77:1e:6c:4e:ee:0d:50:63:71:bc:23:07:7b:
d3:3a:ba:25:27:03:af:5d:b0:42:08:70:f8:d4:b7:7b:0a:fa:
8c:2e:83:b9:f4:19:3e:f0:47:4d:d2:8d:91:de:a8:05:32:43:
7d:67:b6:20:ba:88:55:ab:65:9d:7d:88:d7:91:99:c4:ac:a8:
32:ea:6e:34:76:70:ea:3b:64:43:d4:4c:e7:c9:9b:c5:a6:43:
2c:45:e7:b8:ae:0d:7f:d9:0b:ae:f4:63:14:57:9f:52:3f:0d:
30:5e:f9:d3:66:8f:93:c7:62:72:74:87:63:9d:b4:22:27:42:
d5:91:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:26:37 2025 by rpki-client