
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa
File: cf073435-3e42-3d47-9b1a-352d76f1337b.roa (raw, json)
Hash identifier: qYTDeUBrB7I3NDRUbeSGB7JVaXA2eMGDzAtyiNn0o88=
Subject key identifier: 33:56:34:CE:85:49:12:89:FB:4B:FA:23:CF:78:87:34:7B:B3:E6:40
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA0D24261E111AF20953BAA00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 192.119.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:42:61:e1:11:af:20:95:3b:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=e3dc6619-a659-4635-a551-ee45490832cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:5c:54:72:79:a5:9a:02:98:e6:59:01:26:
52:56:dd:6a:56:c9:86:7c:c9:50:aa:08:aa:a7:e6:
d7:0d:c2:5d:42:84:aa:ee:4e:34:21:f9:d1:27:42:
fc:8a:0d:0d:f2:0d:7a:6f:2a:7c:f2:fb:5c:b7:c8:
d9:e2:f8:8c:d7:1b:9d:64:cf:49:c6:04:ca:95:22:
43:46:b1:d6:5e:ed:44:f0:f7:ce:e1:ce:63:b4:69:
a5:28:f1:44:56:95:28:c2:56:4c:a9:8f:1e:b4:76:
c6:e3:b1:7a:c3:8c:bb:00:86:d1:9c:19:fb:ff:ae:
05:73:f8:cc:c4:d3:f2:ba:05:c1:bb:31:12:c3:61:
b4:d4:97:1c:dd:2b:23:f2:e7:81:bd:d3:37:4a:0e:
7d:00:69:2f:ab:ca:d7:7e:cd:48:3a:71:1f:f7:98:
9a:c4:2d:e0:fd:78:b4:bc:df:09:f3:b7:30:58:75:
82:48:79:66:06:a4:c6:d1:a1:ed:dc:ed:9a:ef:eb:
59:a5:39:aa:c1:b6:92:1f:38:eb:93:dc:47:a3:fd:
11:3d:9e:96:57:aa:65:0d:a0:c7:bc:68:35:31:17:
6a:9f:c9:43:a6:69:fa:2d:f5:60:16:dd:c9:13:20:
c3:4c:1b:63:9d:9b:d2:8b:96:be:5f:8a:9e:d4:84:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:34:CE:85:49:12:89:FB:4B:FA:23:CF:78:87:34:7B:B3:E6:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:8e:82:88:8b:d5:56:4e:38:bd:7b:16:72:d8:f5:59:00:67:
9f:f6:07:8c:da:7f:17:cc:e1:14:d9:89:d0:25:5b:85:f1:27:
1c:90:53:ba:a0:74:2c:3c:13:a6:2f:40:17:34:f3:d3:55:c9:
81:fc:10:2e:80:ba:07:8f:8f:4c:c5:e9:ce:cb:d6:e3:2b:35:
8c:46:f6:d2:9c:bb:8a:9f:ff:af:98:ef:82:c2:9b:71:89:7a:
59:3c:69:9d:c6:0c:5d:58:8f:2f:c2:e3:3f:da:f1:f3:c0:3b:
ae:ae:5e:20:b2:52:62:23:6c:67:47:62:3f:9f:cc:43:09:be:
40:25:8a:fb:d7:db:a2:60:8b:e8:b5:01:ba:86:6b:23:7b:e7:
1b:8f:fc:34:5b:2e:dc:6d:0b:73:6a:cb:d3:7d:c4:b2:37:50:
5e:16:e6:a4:6c:30:e0:3a:de:1b:6b:04:b2:e3:06:9d:33:8b:
62:c0:e1:7b:82:19:81:b4:bc:d9:8c:72:8d:b1:9d:bd:b2:d7:
93:e3:e1:fb:13:4b:35:71:a9:b1:cd:57:4a:f2:5c:55:eb:e1:
bd:c7:74:ec:7a:69:49:a6:78:5c:f6:3c:c1:82:7c:b6:3c:07:
e6:96:f6:c9:6c:e9:9b:ca:1e:f3:3b:14:cc:75:ec:2d:b1:fb:
0c:e5:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:44:52 2025 by rpki-client