
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e249523a-8947-35ca-a99d-133b1c3ebf0a.roa
File: e249523a-8947-35ca-a99d-133b1c3ebf0a.roa (raw, json)
Hash identifier: +WcdWtmPtth1WyNJckzOJkYal8nYVGOoeXKselRJVHM=
Subject key identifier: 6A:DD:2D:0E:50:B8:4F:34:CE:08:62:73:A2:59:38:60:95:8B:6E:B9
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA39D1814D6B85CDE5BDE8380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e249523a-8947-35ca-a99d-133b1c3ebf0a.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 104.201.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:18:14:d6:b8:5c:de:5b:de:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=9ccf0cfb-8f62-414f-b5af-a11331049363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:4f:03:eb:d2:88:57:e3:0b:97:d0:63:1f:
fd:aa:c1:13:0f:8b:00:c5:3e:05:b0:8d:45:e5:00:
12:68:6e:c7:15:de:0d:1f:58:ef:f9:5a:8e:6b:78:
4c:a6:05:ab:8d:58:fa:f2:75:62:e1:d8:86:e4:93:
4a:46:dd:ad:8d:b4:f1:ee:69:18:01:fa:2a:b3:d8:
4e:c9:27:33:52:43:11:99:65:e9:9b:14:8f:08:4c:
fb:37:dd:92:b5:ad:19:6e:de:d5:a1:6c:ad:62:ce:
62:63:d8:5e:c4:99:d6:7e:81:aa:d1:c2:ca:c8:69:
b8:73:f7:d9:61:54:21:57:5e:3a:4c:c6:6b:ef:d1:
e4:f4:57:4c:f7:ac:67:cc:dc:ef:da:34:9f:32:21:
9a:34:8f:52:e2:20:a9:fe:3a:7d:77:08:8a:58:c7:
c5:eb:35:fe:ea:c1:67:0e:ca:32:bd:0b:dc:f3:f2:
ab:b7:5f:f5:ae:34:12:9d:81:30:4d:83:8d:96:bf:
a2:1e:35:3f:0f:31:1a:da:e9:e1:03:62:00:b3:d7:
4d:ed:c8:26:1e:d9:4c:60:c4:91:c7:81:56:5b:01:
48:87:c1:c9:6b:37:97:6d:fa:43:37:12:dc:e2:de:
fd:ec:74:50:5e:80:9c:2a:50:cd:d1:6d:2e:06:ae:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:2D:0E:50:B8:4F:34:CE:08:62:73:A2:59:38:60:95:8B:6E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e249523a-8947-35ca-a99d-133b1c3ebf0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:b6:54:5c:0c:84:81:5c:33:d8:47:a0:d1:55:33:53:14:f8:
87:39:d9:3a:0a:b9:11:9c:37:08:15:a6:2e:cc:40:28:97:b9:
01:02:49:e8:83:31:7c:2b:13:0d:31:1a:69:b4:03:6d:5f:b9:
71:b1:6f:23:57:56:85:40:41:a8:97:f0:5b:4d:38:15:f9:23:
81:03:88:93:b8:78:4f:27:8d:1c:96:3f:89:3c:c0:2f:6f:e9:
51:56:e3:1e:df:af:4b:35:a7:b2:9f:41:b4:b7:6f:bd:6c:86:
e0:56:22:78:eb:af:05:39:7c:e4:88:bf:50:c9:9b:4a:06:62:
18:b5:bc:59:8c:b0:d6:11:34:00:77:ef:81:a3:1e:3e:f4:c7:
02:fe:b4:47:2e:b7:23:a2:59:32:77:04:3a:e9:2b:89:d6:38:
83:33:10:5c:62:3c:38:8f:25:b9:4d:62:38:4f:78:78:c6:5e:
af:2d:97:90:3d:e1:ab:91:82:19:5b:b4:89:48:d4:22:60:17:
f9:05:ef:d7:90:70:86:e2:b6:6b:fe:c6:68:9c:b0:26:73:82:
d1:2f:05:dd:96:94:26:9f:4f:c0:38:41:b0:41:d2:c3:1d:25:
d6:93:c9:6e:d8:cb:f3:0f:8b:d5:22:6e:02:28:6b:d2:b8:97:
d5:aa:87:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:47 2025 by rpki-client