
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
File: f35276f0-246a-3323-89f4-2e26ac333010.roa (raw, json)
Hash identifier: wRjTpoAygxQ9pnK2ybJh0ssgphMBhlnQMa6ytW+XNE0=
Subject key identifier: 22:B5:76:A1:DA:5A:63:EC:86:36:41:D5:45:3E:7F:CD:E7:45:D0:0F
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BB19261242E5C15A4AC516C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
Signing time: Thu 30 Oct 2025 13:00:38 +0000
ROA not before: Thu 30 Oct 2025 13:00:38 +0000
ROA not after: Wed 28 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 108.178.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:92:61:24:2e:5c:15:a4:ac:51:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 30 13:00:38 2025 GMT
Not After : Jan 28 14:00:38 2026 GMT
Subject: CN=28047140-fa70-45fd-aea5-7685fceeca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:c5:88:c3:3f:a0:43:1d:ec:f8:96:93:fe:
f6:3a:05:48:1e:83:62:da:49:b9:cf:24:aa:42:a8:
d2:8e:0d:18:87:d2:a1:33:96:03:5c:05:2d:13:16:
93:48:c2:7a:96:bc:b2:93:7b:aa:fb:7d:67:97:9b:
57:37:d1:16:5c:bc:dc:f5:cc:a7:f4:7a:1f:2e:88:
08:a9:c3:5c:33:5e:23:9f:2b:99:a4:5a:64:58:5d:
41:8e:fa:88:55:ad:8c:9d:8e:7c:71:15:a9:e7:9c:
c4:6e:04:a9:00:9d:4c:8e:e9:4b:98:d8:42:4b:10:
93:33:10:18:fe:f3:93:7e:b3:fc:18:a6:02:84:f3:
33:50:ca:1d:e4:f7:19:9f:ba:1a:98:47:e1:9a:5d:
72:e3:d0:9a:46:32:ff:40:d1:02:56:f9:03:e4:b8:
7f:88:4d:e6:ed:00:9c:e3:39:82:06:73:eb:0c:1e:
36:fc:23:d4:61:58:48:b1:e7:7e:24:f8:c4:2c:da:
e6:10:bd:be:0a:f3:a6:95:43:1b:b0:c9:cd:a9:92:
b4:d0:77:3d:ef:6d:fd:92:d3:45:09:ee:79:0f:51:
36:c7:42:7e:28:19:36:72:0c:75:75:b4:a1:ab:df:
c4:5f:d1:a4:a5:55:a2:88:bc:6f:c3:d3:95:87:a7:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B5:76:A1:DA:5A:63:EC:86:36:41:D5:45:3E:7F:CD:E7:45:D0:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:dc:53:9d:ce:6b:f6:b8:d6:11:01:f9:11:53:4d:21:7f:c1:
48:34:08:f4:6c:47:cc:50:f6:7c:2f:44:c2:f5:6d:0b:94:81:
3c:30:7d:27:e8:92:b2:41:d0:8e:ef:4a:00:5d:8a:83:63:e2:
a3:21:06:0a:7e:8d:1f:fb:28:3a:de:86:a4:8d:ba:99:98:da:
6e:17:10:37:19:44:42:bf:54:cd:52:f8:40:a7:1b:98:3f:17:
24:db:4b:d4:b8:b8:aa:35:e7:56:64:6b:84:9c:27:d8:11:1a:
82:a9:87:27:9b:68:59:38:4e:c7:4f:2d:df:44:c4:6b:98:96:
c4:fc:d3:6d:e3:2d:c6:7a:12:da:23:19:d0:15:66:eb:03:3c:
a1:90:f5:b3:f2:e0:52:c0:3e:3d:f7:89:3e:27:ef:e1:a6:0d:
cb:69:36:c2:83:0a:96:b9:71:66:73:b9:ec:35:13:2a:e3:99:
a1:58:9f:1d:1e:2b:ac:d3:55:4a:9a:b0:e9:26:69:00:c1:27:
f9:38:f1:8a:9f:d8:63:19:52:83:1c:7e:cc:40:76:8a:da:6f:
42:e4:0d:58:eb:2c:08:31:6b:14:6c:b9:b6:9e:1e:0f:80:16:
92:7e:1f:13:90:67:2f:58:d1:8c:5b:0e:d1:fd:ea:f8:cb:21:
9c:84:1c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:30:53 2025 by rpki-client