
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa
File: 5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa (raw, json)
Hash identifier: vaDVlT5yxFBwDQLU7d65E9p2eNneqJMeV3pAZaRXqKY=
Subject key identifier: 85:71:31:FA:69:9D:2C:C0:53:C5:4A:63:24:EE:30:75:57:87:50:8F
Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial: 010D0C9F4328584BA7CCF07FECE1ADFBA6259380
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 3477
IP address blocks: 151.207.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cc:f0:7f:ec:e1:ad:fb:a6:25:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=cec37f4c-876b-4ea5-90c7-40df8f1cebb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:8c:0c:66:4c:a8:d5:c8:a0:6f:78:0c:d6:
f4:61:e8:c6:7f:b7:03:2c:7c:50:82:23:56:00:c8:
45:ec:0b:d0:80:b5:0e:4b:01:1b:69:e0:bd:06:b2:
4a:7b:07:8f:a4:fb:ae:c3:ef:c6:db:ed:16:37:20:
02:75:53:24:50:ce:12:bc:64:3c:05:e3:47:dc:bf:
49:97:77:a6:a9:0a:bb:83:e2:d3:0c:05:fd:55:a3:
14:52:1b:aa:0e:a0:6a:12:ec:70:af:60:0d:70:e1:
da:9a:52:97:a6:4e:6f:a0:c4:21:d4:a3:8c:64:cd:
0d:55:b3:cc:04:79:a4:9f:9e:c0:80:38:4b:ef:f4:
ca:fd:cc:18:06:62:e4:fa:92:93:65:e6:16:51:1a:
7e:89:9b:1b:a6:54:9f:23:0e:c0:9d:a3:ad:b5:60:
22:e0:c1:cd:6d:e0:0c:66:95:66:0a:1d:06:c9:4c:
cb:95:bb:c2:15:96:aa:9e:9f:ab:df:bc:41:49:98:
f6:66:a3:c4:32:91:7e:c4:d4:8f:38:1b:c6:3c:35:
a5:70:cc:87:6a:0f:44:39:c9:c5:06:5e:97:0b:b8:
a4:bd:06:60:af:e3:e4:a9:f2:9e:0c:b8:8d:b6:e9:
e9:16:a6:04:cb:95:37:57:97:f7:c3:5c:fb:2b:23:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:31:FA:69:9D:2C:C0:53:C5:4A:63:24:EE:30:75:57:87:50:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/5cecadd9-8fe1-3224-a491-ec4ac04d225f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
X509v3 Authority Key Identifier:
keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
sbgp-ipAddrBlock: critical
IPv4:
151.207.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3f:cd:d2:ff:e8:63:cf:c1:2b:39:8c:7b:fa:83:ad:64:41:
b2:19:30:42:3f:a6:e6:78:54:c3:d7:4c:ea:ed:68:bb:80:d4:
fe:97:16:8a:13:e4:6f:86:69:c6:19:b1:c3:74:57:70:31:12:
11:28:56:a6:db:5e:05:1d:cc:6e:f8:47:56:f6:6e:6c:3d:85:
e3:85:33:90:d8:84:bc:d4:2c:b2:f8:9c:63:89:2d:5a:39:9c:
ec:42:96:96:7f:af:ad:7b:a6:50:7e:b4:0f:d8:07:e1:14:ac:
16:e2:4c:9c:5c:6f:bf:91:00:8d:d7:25:69:16:0e:28:aa:55:
35:73:34:c2:3c:35:e4:84:a3:cb:21:e3:f6:56:19:2a:38:d2:
dc:e1:52:23:71:1f:27:3b:a3:b6:ad:b8:f7:d1:ff:3d:3f:02:
a9:c9:f1:29:5f:3a:86:50:bd:82:d9:59:91:08:b0:53:ec:5e:
45:de:0d:4a:a6:17:f1:06:7e:81:e1:22:3e:2c:f3:b3:8e:46:
09:84:58:a3:e7:ff:3e:89:27:00:02:dc:8a:22:20:0a:bc:ed:
48:0e:f0:e1:5f:d2:97:3e:37:b1:c0:2b:23:b4:ed:09:dd:dd:
00:bd:68:94:11:4d:ec:3e:41:90:d1:6e:7f:29:dc:9e:7c:e6:
8a:79:e2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:47:43 2025 by rpki-client