
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3af7c827-18b2-36dd-a102-75b0380aff64.roa
File: 3af7c827-18b2-36dd-a102-75b0380aff64.roa (raw, json)
Hash identifier: hJdeHlBSMKsuabuzQKggLaN3PTRSbB2vLCF+Y7QO6Ro=
Subject key identifier: 48:C4:9E:9F:77:2F:1E:24:4F:14:84:7D:DC:30:96:58:A9:97:E9:90
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584BD0404B56E2495DCAC750C300
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3af7c827-18b2-36dd-a102-75b0380aff64.roa
Signing time: Mon 10 Nov 2025 12:45:23 +0000
ROA not before: Mon 10 Nov 2025 12:45:23 +0000
ROA not after: Sun 08 Feb 2026 12:45:23 +0000
asID: 174
IP address blocks: 74.2.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d0:40:4b:56:e2:49:5d:ca:c7:50:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Nov 10 12:45:23 2025 GMT
Not After : Feb 8 12:45:23 2026 GMT
Subject: CN=55edac70-bd5b-44c3-898c-2fedbcaed364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:1c:3e:73:36:b6:ce:99:1a:01:b0:3b:d2:
63:58:ff:72:0c:49:ef:2e:a7:d3:aa:07:d3:98:d8:
84:81:25:ed:a1:34:4d:d9:e2:92:9e:38:7b:bf:79:
16:3b:6c:ad:0b:d9:16:ab:19:ca:ca:a4:72:b9:ba:
f4:45:b9:46:d9:f3:3b:45:34:80:80:d3:a1:b4:54:
e6:4c:f8:b8:2b:ea:a2:19:6e:90:02:a7:4d:29:b1:
4c:e8:f7:c2:ad:e8:31:6f:ac:e3:f4:19:1f:14:d3:
98:d5:6b:ff:5a:08:74:91:a4:89:f3:5b:fa:d6:12:
3b:9e:64:2d:ac:4e:77:84:75:e0:98:c2:ef:73:3e:
52:f2:38:9e:9a:ba:e7:df:97:ad:b7:9b:56:0d:a2:
87:a0:8c:fc:9f:56:bf:dc:6f:f9:2e:7a:1f:0c:60:
f2:87:29:1a:5a:13:4b:9a:ab:5f:13:c2:ee:b8:4d:
bb:05:fe:c8:c4:6d:8c:54:cd:7e:d3:16:82:d4:42:
d6:9f:5a:eb:1e:ed:03:ec:44:b5:cc:8e:54:5f:0f:
b4:37:73:1e:7c:54:bc:a1:e3:ba:e7:f9:63:5e:f3:
21:b1:50:27:06:e6:0d:94:04:bd:bf:82:27:7c:08:
f3:82:60:a8:5f:01:a0:15:aa:13:65:e3:ac:e9:78:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:9E:9F:77:2F:1E:24:4F:14:84:7D:DC:30:96:58:A9:97:E9:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3af7c827-18b2-36dd-a102-75b0380aff64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.2.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:75:98:af:5d:e6:ea:28:5a:23:e4:e6:70:c5:83:bc:2d:9d:
e9:3f:ce:cc:50:e8:4c:0d:f6:53:60:ac:e7:73:7d:5c:cf:62:
61:0a:e2:ac:7a:d8:7f:62:6a:00:97:8c:94:0b:c0:c9:05:23:
de:17:66:3d:b6:4c:99:3c:01:a7:5c:51:ad:6c:52:14:f0:38:
c1:a5:80:92:21:3d:d5:d0:ad:1a:03:1e:82:6c:b9:6f:3e:77:
b6:a7:ba:0b:57:79:51:3c:84:7d:bb:ae:28:a4:94:2f:8a:dc:
84:94:84:3f:68:e6:1c:dc:6d:a0:49:4e:af:b5:cc:23:f8:6d:
1f:84:00:0d:8e:78:ac:55:71:48:d7:ac:5d:1f:bb:f1:95:cc:
a8:63:b8:67:62:15:6a:fe:a8:7a:c0:fa:ec:1b:c4:64:75:87:
46:65:02:26:01:5b:67:11:ce:9f:6a:b1:3a:db:fe:c9:11:15:
b0:3b:22:24:09:fc:6e:5f:78:16:f7:c6:09:72:93:d3:ee:af:
13:76:09:43:ca:68:10:18:72:ed:67:b3:8a:81:5a:df:c3:72:
be:d8:15:8a:42:70:56:3b:9c:69:c7:7a:d7:cd:d1:11:2b:56:
90:cc:65:d9:6f:b1:9e:32:f9:10:fc:b2:af:7d:72:44:27:81:
7b:81:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 04:20:24 2025 by rpki-client