
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa
File: a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa (raw, json)
Hash identifier: keTvX+dJM1bh+DiVC5v/W9wUadN7kROFmYnUhYaSaoE=
Subject key identifier: 84:10:BD:C9:24:65:FD:14:E0:C7:A1:CA:9D:8C:44:83:BD:EB:9B:48
Certificate issuer: /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial: 010D0C9F4328584B4D11DE5560DC13CC378EC680
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa
Signing time: Wed 24 Sep 2025 13:00:41 +0000
ROA not before: Wed 24 Sep 2025 13:00:41 +0000
ROA not after: Tue 23 Dec 2025 14:00:41 +0000
asID: 17056
IP address blocks: 74.115.114.0/24 maxlen: 24
74.115.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4d:11:de:55:60:dc:13:cc:37:8e:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
Validity
Not Before: Sep 24 13:00:41 2025 GMT
Not After : Dec 23 14:00:41 2025 GMT
Subject: CN=e35b2256-21c2-4667-8160-a28d2e598913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:04:72:85:00:90:b0:a7:57:a1:28:b4:b3:
a7:4c:17:f9:e6:6c:8b:68:f4:b2:89:ae:8a:33:5e:
8d:28:a0:07:d3:c3:d5:53:f6:eb:ee:e7:ea:c2:fa:
47:27:cd:f3:51:eb:73:d3:d1:bc:6d:28:f8:46:9e:
e4:f2:fa:14:16:c5:e8:20:96:13:f9:5c:93:b2:09:
21:f7:93:22:9e:6c:12:24:17:b6:a7:45:20:22:ba:
a3:b4:46:46:de:7e:e1:57:e6:14:28:20:71:84:e4:
c3:97:5b:8e:a4:63:d1:7b:76:2d:3f:9d:a6:d7:3b:
c1:ca:43:cf:93:a7:ca:0c:36:f5:25:b6:94:c6:ea:
72:8f:c8:bc:b5:66:28:bd:d3:34:35:0f:8a:bb:d3:
7e:66:62:20:f6:3c:13:89:76:78:53:b8:a5:18:ce:
32:55:66:66:af:36:3b:0d:d2:8e:5e:a0:9e:25:46:
92:a5:26:72:31:8e:fe:d6:49:4d:2a:9b:5e:5d:15:
7c:00:82:58:b9:27:e1:a9:e9:75:03:af:d6:9c:f2:
e8:9c:87:98:3a:89:b6:d1:3c:0c:97:98:1b:70:8b:
25:aa:76:8d:fa:a3:09:54:0e:ff:03:2d:89:fc:fc:
ad:37:4e:f7:ec:e7:69:84:19:af:41:e2:f2:5e:8e:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:BD:C9:24:65:FD:14:E0:C7:A1:CA:9D:8C:44:83:BD:EB:9B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
X509v3 Authority Key Identifier:
keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
sbgp-ipAddrBlock: critical
IPv4:
74.115.114.0/24
74.115.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:bf:45:68:79:90:dd:bf:f9:7c:e4:52:72:99:d3:76:36:e0:
94:2e:42:d7:33:05:22:8e:80:25:77:4a:fc:5f:44:09:6f:0e:
00:37:56:4e:a4:2c:65:2f:e5:fc:fe:6b:0d:9e:0c:ce:be:d5:
7a:43:27:10:d0:1f:83:e5:89:62:3f:b2:52:3f:bc:09:4f:53:
b8:59:3e:a1:62:dd:fa:ce:86:27:ea:58:a0:9a:98:b3:ad:f3:
f2:13:89:a4:52:ff:49:46:eb:c9:a3:6a:a8:d7:66:f5:fb:46:
8c:51:ec:79:5d:6d:18:49:5a:a6:c1:e3:1d:f8:05:99:aa:7c:
57:39:69:7d:be:d9:e0:b2:86:b1:66:aa:d8:e2:44:80:50:6f:
48:77:a0:c1:e7:10:41:82:b6:92:39:d0:20:9c:09:f0:4e:ce:
13:01:57:98:94:91:af:f7:ad:82:ff:d0:81:22:0d:b5:5e:a1:
a8:99:33:f7:e7:10:85:9f:54:ae:2c:86:bb:a8:c5:f2:e6:a8:
86:f4:94:ac:44:2a:63:dc:01:61:3c:24:e2:08:53:bc:3c:b9:
83:4e:66:d2:1d:b3:8a:8f:a2:a3:de:38:40:c0:db:cc:c4:f5:
8b:3c:5e:25:70:ec:78:92:ab:15:17:87:92:6d:d6:95:1c:e1:
8c:2f:a0:3c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtNEd5VYNwTzDeOxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm
YTIxMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZTM1YjIyNTYtMjFjMi00NjY3LTgxNjAtYTI4ZDJlNTk4OTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8EcoUAkLCnV6EotLOnTBf55myLaPSyia6K
M16NKKAH08PVU/br7ufqwvpHJ83zUetz09G8bSj4Rp7k8voUFsXoIJYT+VyTsgkh
95MinmwSJBe2p0UgIrqjtEZG3n7hV+YUKCBxhOTDl1uOpGPRe3YtP52m1zvBykPP
k6fKDDb1JbaUxupyj8i8tWYovdM0NQ+Ku9N+ZmIg9jwTiXZ4U7ilGM4yVWZmrzY7
DdKOXqCeJUaSpSZyMY7+1klNKpteXRV8AIJYuSfhqel1A6/WnPLonIeYOom20TwM
l5gbcIslqnaN+qMJVA7/Ay2J/PytN0737OdphBmvQeLyXo6/wwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIQQvckkZf0U4Mehyp2MRIO965tIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx
MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvYTZlNWFjYzktNWJjOC0z
NDlhLTlhZWEtZDA3NDE1MjJlZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk
NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx
ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0
OGEwMWZhMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASnNyAwQA
SnN1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH2/RWh5kN2/+XzkUnKZ03Y24JQuQtczBSKOgCV3SvxfRAlv
DgA3Vk6kLGUv5fz+aw2eDM6+1XpDJxDQH4PliWI/slI/vAlPU7hZPqFi3frOhifq
WKCamLOt8/ITiaRS/0lG68mjaqjXZvX7RoxR7HldbRhJWqbB4x34BZmqfFc5aX2+
2eCyhrFmqtjiRIBQb0h3oMHnEEGCtpI50CCcCfBOzhMBV5iUka/3rYL/0IEiDbVe
oaiZM/fnEIWfVK4shruoxfLmqIb0lKxEKmPcAWE8JOIIU7w8uYNOZtIds4qPoqPe
OEDA28zE9Ys8XiVw7HiSqxUXh5Jt1pUc4YwvoDw=
-----END CERTIFICATE-----
Generated at Mon Nov 3 14:48:32 2025 by rpki-client