
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
File: a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa (raw, json)
Hash identifier: 99+GYOJdhCz/HFFB7KQx1Q9ff9KgjFGgWToX2vi5hoc=
Subject key identifier: BD:C8:4C:95:BE:1B:6A:31:A6:FE:47:31:3F:BA:2B:EA:99:96:DC:AD
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA39D3BF0302284211922EB90
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 104.201.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:3b:f0:30:22:84:21:19:22:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=adb03c75-2f23-4c81-a9b6-fd544da9405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:7b:9e:cd:ea:30:40:41:2b:4b:2c:3c:b9:
bb:6d:c9:cb:6a:7d:2b:39:7f:52:da:8c:93:58:56:
73:04:b6:ad:1c:ba:5e:3c:ab:c2:4c:af:1a:65:fe:
99:33:4a:f5:c4:8e:77:9d:86:a9:66:94:72:82:e2:
d7:c7:4e:a3:57:a4:de:be:26:bb:73:b5:85:ec:9e:
4f:c8:a8:28:b6:24:8c:6a:44:cd:68:6a:86:6a:c8:
60:e3:fd:8d:bf:68:a4:39:a2:c3:96:de:9a:8e:2a:
c1:ed:f2:3f:a1:96:c9:5d:dd:8e:34:d5:07:c5:b3:
f7:e5:e8:9d:f4:7e:f8:e6:d7:45:e4:c7:ef:fc:bf:
2b:b3:83:09:a3:86:83:2a:38:6e:86:7b:f7:18:5b:
3d:20:88:c3:4c:db:f0:db:1f:3d:d3:f2:e0:ef:bf:
c2:1a:53:71:20:22:38:3a:21:c9:80:f9:00:be:8e:
2a:b7:2a:ac:fb:1a:7c:cc:4f:a7:b0:fb:30:f4:63:
61:af:db:56:88:03:3b:fe:b8:61:42:81:04:30:1e:
d8:1e:ad:04:82:15:cb:87:92:bd:27:0a:43:2c:35:
4b:a6:12:07:8d:f3:c2:64:10:1b:ae:81:15:83:02:
7d:19:14:d5:ce:c9:fb:75:dc:2e:2e:6c:60:0b:24:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:4C:95:BE:1B:6A:31:A6:FE:47:31:3F:BA:2B:EA:99:96:DC:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e1:2e:64:31:75:d6:af:44:25:86:0a:77:be:42:dd:97:e3:
5f:23:23:2c:90:3e:44:eb:f7:cf:84:85:a3:57:72:f6:00:e4:
e4:2a:ad:ca:bb:ba:ba:5c:63:cf:67:3c:72:98:22:96:d8:57:
f8:1e:19:a5:f3:1b:6e:f6:4f:70:83:03:50:14:2d:30:b9:d4:
5b:84:04:e2:30:9f:97:c3:21:91:0d:69:33:49:c9:ee:e6:18:
bd:d6:a7:96:0d:f7:06:bf:6d:6f:cd:40:6b:80:5b:2e:da:ca:
e4:9e:ed:6e:60:93:5f:80:8a:d3:86:1a:82:59:cd:f5:58:a9:
7b:cf:de:21:bb:fa:f2:23:1d:d6:94:5e:f7:2d:a9:ba:3f:fc:
92:0d:ba:85:22:03:9f:7c:c3:a3:b6:b0:6b:a7:4f:48:f1:0c:
8c:4e:de:f7:88:b3:01:d4:30:f2:69:6e:67:e8:07:d0:41:ce:
67:79:06:29:fc:ba:f9:bd:6e:5c:ca:a7:e5:40:b3:d6:48:c0:
63:e9:14:92:0f:21:37:c5:eb:92:74:d7:83:d6:77:62:b4:d4:
7d:8f:99:b0:2c:fa:30:3f:aa:3e:92:cf:94:63:c8:9f:07:ae:
fb:df:af:52:0e:ce:18:65:42:b9:93:b6:9d:4e:d5:a0:d0:37:
fa:a0:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:08:46 2025 by rpki-client