
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
File: 2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa (raw, json)
Hash identifier: CdoIlCyVIwpUikRl2DCu9CMl0Qa8Joo6UvBDP/Zsamw=
Subject key identifier: FB:17:D1:DF:F0:04:22:78:80:A1:96:11:BB:2F:20:71:58:59:1F:8F
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F4328584B95A7995DA5A2DADF367CE960
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 8560
IP address blocks: 74.208.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:99:5d:a5:a2:da:df:36:7c:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=d6cce45c-721e-4fe3-a895-932efc33b7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:6e:c0:58:99:39:c1:71:42:15:da:19:d5:
22:0c:82:84:ab:77:79:4c:e0:16:9d:07:c9:d0:ba:
f3:dc:91:30:d7:24:39:57:1b:cc:be:f0:1d:6c:73:
37:2b:ed:0c:66:65:a7:5c:8b:be:19:21:a5:ec:dd:
4d:ff:4c:1f:68:27:8c:37:0c:2f:4c:fd:06:6a:06:
cf:d2:12:67:8d:a8:c6:c1:ca:85:53:b2:7e:98:6e:
b2:97:1d:50:4e:d3:8d:01:9d:f8:47:7b:d5:2a:26:
3e:24:05:5d:f8:89:c2:12:35:7a:9f:15:9e:ef:ea:
d7:83:95:05:54:77:06:e6:b3:f9:e6:9d:f2:87:60:
2a:e8:82:6c:b4:78:16:05:32:d8:5b:e6:b3:e0:35:
96:50:68:b2:86:0f:b6:de:36:a7:84:a4:39:18:14:
c1:61:0c:05:de:5c:7e:87:2e:7e:db:bb:1d:87:82:
95:fa:e3:f7:71:0c:50:9c:b1:c3:5b:2b:3a:68:00:
c3:a4:64:9a:e7:c9:80:48:10:39:cb:c6:e5:f2:fa:
5d:58:01:22:98:5f:56:96:f7:e1:d9:6e:65:1f:31:
98:2a:04:a0:e5:1a:5f:71:7e:e0:24:d1:a1:94:7b:
4f:97:fd:17:e1:e2:92:77:0f:96:e4:9e:13:6d:2a:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:17:D1:DF:F0:04:22:78:80:A1:96:11:BB:2F:20:71:58:59:1F:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:93:9f:a4:a6:e5:ff:47:e3:75:6f:ba:bb:12:be:87:4e:ed:
ea:1a:dd:18:0e:b2:9c:ff:f3:4b:5d:09:cf:b8:dd:54:01:4f:
ec:5a:ad:c5:4c:59:66:64:5c:c9:60:66:3c:db:8d:ca:d1:51:
ad:92:ce:90:6f:1f:63:d6:65:07:6c:0f:e0:57:a9:f8:9a:5e:
96:80:9d:91:d1:35:1a:a6:72:8f:62:c5:78:4f:1e:fa:b3:d1:
c1:5e:1d:45:b7:49:92:45:ba:ac:68:89:0d:c7:8f:55:a5:90:
58:9b:bd:f5:00:ff:59:5a:f3:fe:a3:83:9a:1b:d6:b5:fa:8c:
63:3e:25:fa:1b:b4:be:04:39:bb:12:c9:c8:7d:ef:1a:bc:b0:
24:f3:ea:b7:41:a5:19:40:1f:cc:0a:35:ef:2f:fa:d4:be:d2:
47:13:b3:ef:d0:c2:73:67:83:48:17:a9:cc:16:35:fb:d4:9b:
ec:bf:c6:1a:f9:68:cb:f8:fb:38:3e:14:e4:a7:7f:50:8b:ce:
79:32:11:02:42:27:61:91:d3:5e:60:69:67:d9:c4:c5:4b:86:
84:bb:33:08:90:7c:63:53:26:cf:9b:1e:26:1b:53:cf:2e:3d:
83:3c:c7:34:3a:54:e9:ea:3d:57:e1:7e:af:64:05:9d:9f:fa:
8a:39:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:54:45 2025 by rpki-client