
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
File: 9d885db0-78f9-354c-8cf1-040c707c8d9e.roa (raw, json)
Hash identifier: VbMtcK3TiiujAXQYB6CiuSK7JZh8DmN+xQcfxt/DaK8=
Subject key identifier: 1E:52:11:EF:CF:11:D3:0C:49:2A:56:3D:20:5D:20:E1:87:B8:5A:E8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584AE67B9345C78D177292763180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
Signing time: Mon 18 Aug 2025 19:05:40 +0000
ROA not before: Mon 18 Aug 2025 19:05:40 +0000
ROA not after: Sun 16 Nov 2025 20:05:40 +0000
asID: 30036
IP address blocks: 2604:2e87:9c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e6:7b:93:45:c7:8d:17:72:92:76:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 18 19:05:40 2025 GMT
Not After : Nov 16 20:05:40 2025 GMT
Subject: CN=d75900e0-7a70-4284-805f-39de09fdb471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:94:af:b7:39:01:ac:66:d1:59:59:f0:df:
92:bc:ba:ee:30:24:97:60:4b:82:f1:bf:7b:4c:2a:
8e:a8:22:90:80:b6:34:2a:cf:b5:a4:9f:a8:21:d4:
50:82:9a:97:0e:18:0f:39:c7:25:ed:20:db:6c:81:
ac:27:4f:fd:3a:0e:34:15:ee:79:1a:04:b0:31:bd:
2d:c7:c9:f0:af:e2:2a:d6:83:65:91:f2:49:a7:38:
6e:53:55:76:c5:98:6e:6b:f3:12:72:29:86:3b:53:
ed:f6:b3:59:10:d3:4d:14:a7:51:9f:f3:e5:4b:db:
c8:52:7b:50:7b:d8:85:f3:da:eb:3a:e7:5c:99:94:
1e:8b:a3:b1:c9:d9:2b:1f:2c:09:8e:37:e7:06:b0:
6a:40:83:17:18:35:5c:5d:47:d0:57:f9:d9:73:b0:
2a:b3:60:79:02:2d:77:77:5a:a3:c1:44:18:5d:44:
27:65:64:eb:3e:5b:25:b8:07:41:3c:e5:ae:3d:0f:
ff:14:01:43:06:ba:76:71:9d:50:99:d9:ed:66:9b:
45:1b:83:05:df:36:3a:9f:a8:9d:3a:dd:69:ad:eb:
61:51:4e:80:3e:f4:08:a0:ab:d9:5f:4f:39:64:88:
07:20:18:ad:cf:8c:8c:bf:2f:57:9c:c6:6b:c5:a2:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:11:EF:CF:11:D3:0C:49:2A:56:3D:20:5D:20:E1:87:B8:5A:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:9c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:59:0b:c4:46:d7:ac:26:57:df:a2:9a:24:f7:85:76:21:0e:
99:c7:51:59:9a:ff:a1:17:dd:51:05:9d:1a:5e:2e:01:f3:db:
c8:2a:ee:86:90:a5:fc:47:fd:45:ad:77:54:31:c4:c5:bc:32:
89:de:e7:6b:8e:5a:be:74:5c:4e:f4:f0:0f:7a:6f:f4:6d:4c:
70:12:bf:46:c0:24:40:2d:38:80:30:f3:05:09:fe:bf:71:0c:
c5:a7:14:a8:3f:9d:0f:50:7a:6f:38:1c:a1:5c:1b:60:bf:ee:
0c:11:9c:1b:df:d8:f1:d1:33:d3:f1:02:da:7b:a9:25:45:4a:
c4:03:36:32:b4:4b:15:6d:81:24:43:f0:d8:16:8f:35:6c:92:
46:fa:d6:38:1a:66:4d:09:59:73:7f:d4:35:23:8d:3a:7c:2d:
19:de:1f:c5:3d:66:0f:86:26:5f:c1:39:f8:0d:f0:c5:39:f1:
38:cd:7e:89:83:a3:db:a4:d9:cd:b6:5a:ae:ff:fc:66:e5:be:
1f:46:ab:3f:32:36:1d:e5:ce:4d:2d:d6:0c:c4:89:44:3a:f7:
85:ae:1f:14:c9:39:d7:16:0c:09:e4:f4:c7:f3:ed:4d:32:0d:
7e:96:37:91:e6:1e:9b:4a:bf:78:31:a4:27:7c:5e:ad:7a:d5:
ee:48:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:35 2025 by rpki-client