
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
File: b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa (raw, json)
Hash identifier: Mh/5Rj0Fo3ayjbdOYn+a+me1HzvKnakII63pX6ovBek=
Subject key identifier: 30:30:8A:DA:D9:6F:90:E1:1E:32:D5:D5:87:85:66:2F:68:A2:88:23
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F4328584B8BE20F0C6D9763F31913DB40
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
Signing time: Fri 17 Oct 2025 01:00:30 +0000
ROA not before: Fri 17 Oct 2025 01:00:30 +0000
ROA not after: Thu 15 Jan 2026 02:00:30 +0000
asID: 42
IP address blocks: 206.108.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8b:e2:0f:0c:6d:97:63:f3:19:13:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Oct 17 01:00:30 2025 GMT
Not After : Jan 15 02:00:30 2026 GMT
Subject: CN=0c557485-4616-4ae6-8192-ca3baa7af04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:0a:f0:f6:89:68:0f:5e:cd:81:63:4c:4e:
7d:d4:93:67:ca:6d:9e:14:ee:a3:f7:a8:79:17:3d:
16:a0:36:fd:09:27:c6:8a:ab:c8:ae:b0:d5:8e:33:
9d:b0:a9:e3:16:40:6e:ea:5a:39:8d:12:93:e8:6e:
a4:2c:cd:2a:d8:1f:63:b4:f4:5e:83:db:85:aa:56:
76:19:25:cb:57:77:96:7c:4e:7b:b1:9a:b6:b5:f7:
54:dd:b4:f0:b0:e8:27:cb:1a:34:5a:0d:6e:59:5c:
e9:8b:22:72:77:76:c4:15:64:df:20:fd:b1:74:83:
86:fd:5a:dc:16:d2:53:ad:ab:97:62:01:bb:2d:25:
1b:eb:56:15:0c:a4:a7:ea:f4:57:53:36:5e:d1:81:
3f:e0:3d:4d:73:ca:65:ba:7a:1b:0a:d4:e9:9d:8a:
d6:1c:29:62:d6:02:4e:40:30:79:07:1e:6e:02:b7:
5c:a6:27:b3:4d:f6:8c:c8:ed:57:c2:af:86:63:a5:
bc:6a:c1:99:e8:42:b0:37:1a:6e:9a:45:c3:36:5b:
1b:3a:f1:1d:13:ab:ea:45:e5:90:2e:52:0e:04:71:
d4:70:09:5b:25:78:f9:49:5a:3d:64:8f:ca:db:ea:
70:f8:a9:39:c3:39:1d:1f:64:c8:e4:6e:9b:70:1b:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:8A:DA:D9:6F:90:E1:1E:32:D5:D5:87:85:66:2F:68:A2:88:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ce:84:86:09:ff:3d:f2:59:b9:3a:40:e0:08:3a:df:af:de:
32:9c:d2:18:e6:ab:98:9d:ff:22:5b:0a:31:60:50:76:93:ca:
f8:70:60:c0:98:ae:e7:7f:04:1a:21:c9:34:e7:08:4a:cf:33:
bd:1d:bb:ab:06:65:1d:da:44:42:b1:ef:f0:02:6b:06:0d:5a:
a2:9b:69:57:78:59:5e:99:26:d5:2b:a8:3a:00:95:7b:43:73:
46:b3:98:88:01:5c:b0:fa:fd:06:92:71:6f:23:5f:0b:03:15:
a2:80:85:4f:d5:50:9a:8d:9d:e8:9c:5f:4a:62:eb:f6:14:7e:
47:4a:ee:32:91:f1:0a:6f:6c:a5:51:0c:53:79:16:24:5f:7e:
5a:8c:30:eb:f5:25:9e:d6:53:66:b7:02:57:02:90:da:53:97:
ee:27:9c:af:95:9a:54:d3:19:67:fd:8d:4d:ae:ad:51:ce:81:
13:04:fc:d0:fd:1f:ab:d7:31:a7:b0:3e:30:15:73:1b:28:d8:
89:c5:d4:8e:35:06:ba:5d:77:5e:84:fa:27:43:7a:db:6a:b6:
4f:60:d3:ef:b2:0d:3b:04:8a:d8:a4:07:23:d9:e1:57:84:ca:
1d:72:87:80:58:70:0d:5d:65:ef:b4:68:81:0d:d8:48:62:86:
12:4d:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:18:34 2025 by rpki-client