
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
File: bf00ff42-1d72-33fe-afc2-42837b116524.roa (raw, json)
Hash identifier: oghU7JiC2YrhMkWcgEXzIqlL1I4FRJZ94B29i69cTu0=
Subject key identifier: 89:E1:63:8F:88:C6:9C:19:ED:0E:4A:F9:0E:23:ED:75:F7:2B:B2:30
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584B64CCB40114564D9403B81B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 30036
IP address blocks: 2604:2e8c:9400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cc:b4:01:14:56:4d:94:03:b8:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=715d37ed-04bb-4b74-8012-d881032fcf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:f1:61:34:30:85:f4:81:cd:54:97:9d:81:
c2:35:cc:3b:a9:e1:bd:34:1e:b8:aa:3d:ff:ed:21:
75:2d:1f:24:a0:fc:5a:f9:8c:b3:86:78:ec:85:a8:
47:dc:10:cf:16:c9:7b:a9:fc:3e:cd:8b:dc:ad:48:
11:67:06:2f:1b:c5:20:d1:1f:51:11:2a:29:de:3b:
03:93:b7:db:6a:e6:24:80:a6:1d:e8:7e:7b:8d:cd:
14:dd:3b:ab:bf:f7:32:6a:1e:a6:34:8f:7f:c6:6e:
80:77:fe:ba:c8:38:5f:10:33:0b:51:9b:38:eb:b3:
40:cf:a2:b4:25:47:9e:71:1f:48:a8:72:fa:c8:f7:
96:44:05:32:d4:0f:86:ac:21:79:d8:ec:ca:0c:ff:
93:e7:02:f2:25:bc:6b:b3:37:6b:2f:00:06:5f:5e:
d5:87:88:b6:23:a0:e9:28:d7:56:0e:6c:64:64:fe:
fe:21:0f:1c:4c:4b:37:e5:b6:38:81:7a:09:08:b5:
1a:af:67:ce:e0:f5:b4:bd:82:cd:6d:01:d0:cc:52:
c8:31:c2:e6:e4:b0:2f:46:9f:76:bc:9d:a7:9b:d3:
cd:4e:f2:f2:01:fd:d4:af:ea:8b:2a:91:16:a1:dc:
5f:e6:a2:fa:c3:ae:2e:c6:b7:0a:25:35:9f:fe:0b:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:63:8F:88:C6:9C:19:ED:0E:4A:F9:0E:23:ED:75:F7:2B:B2:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:9400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:a9:a8:70:cd:9d:a9:51:55:bc:0b:08:7d:28:9b:15:46:f9:
ee:24:01:ae:b6:a6:17:69:8a:5b:33:7f:74:d3:59:3d:06:c8:
c1:5c:da:f2:fb:00:cb:4f:40:3e:23:45:2c:22:74:05:ec:0d:
30:11:96:7f:1e:64:de:4a:43:04:d8:59:b4:0d:a1:cd:f9:57:
33:5f:3d:44:31:d9:2a:ef:3d:29:12:03:aa:bb:11:5a:32:f5:
2f:e3:b5:73:69:e6:56:4e:e3:a2:c1:1e:6b:40:3c:61:84:ad:
39:7b:ea:06:c2:f2:4a:a8:2b:cd:84:16:5c:1e:89:32:71:49:
d0:4a:7b:bb:ec:c5:db:d9:a7:5e:ec:6d:35:1c:ab:c6:4d:40:
6e:00:e3:b0:7f:12:ce:3f:74:33:19:e2:8e:65:6f:b3:72:ec:
1d:6a:cc:54:54:9f:89:aa:4e:a0:55:46:4b:91:93:47:c1:dc:
62:23:5d:7b:f5:2a:c8:28:22:9d:3f:d0:76:50:dd:c7:01:60:
57:77:a0:6e:9b:73:6d:4a:a2:10:bc:d1:c3:d8:23:2b:eb:3c:
e8:dd:56:f9:3d:55:10:35:00:7e:c5:11:99:07:21:5e:22:fc:
8c:5f:a1:8c:87:0c:06:cf:4b:b3:b8:94:d8:f0:3b:76:15:7f:
eb:f6:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:29:22 2025 by rpki-client