
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfdcdab4-1898-34b7-8d5d-e47c8649d92c.roa
File: cfdcdab4-1898-34b7-8d5d-e47c8649d92c.roa (raw, json)
Hash identifier: EHBTDBZ2GR4wMD/ztO9T9tpQYSOcDSr47PDlvL04pc4=
Subject key identifier: 8B:2E:AA:82:5C:45:B7:5B:C9:E9:4F:39:28:91:22:2C:90:DA:3D:FD
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584BD0406C47CC47E1EAC4C4DD00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfdcdab4-1898-34b7-8d5d-e47c8649d92c.roa
Signing time: Mon 10 Nov 2025 12:45:38 +0000
ROA not before: Mon 10 Nov 2025 12:45:38 +0000
ROA not after: Sun 08 Feb 2026 12:45:38 +0000
asID: 174
IP address blocks: 74.2.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d0:40:6c:47:cc:47:e1:ea:c4:c4:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Nov 10 12:45:38 2025 GMT
Not After : Feb 8 12:45:38 2026 GMT
Subject: CN=6ea94fa0-abde-4f52-8507-38c5bb9c2fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:50:f6:d2:57:3e:3a:c9:51:27:9c:c3:ea:
3f:dd:52:f5:b8:5c:51:07:95:de:17:75:3e:52:83:
7f:5c:a0:f0:fb:c4:f1:11:34:90:bd:b7:4b:da:58:
4d:f1:3b:50:33:51:fc:a0:ed:4b:f3:10:e7:33:9d:
7a:85:8e:12:60:1f:6a:d7:b7:88:db:b0:c5:11:7e:
df:3c:8e:88:e5:c0:b8:e9:2d:79:c4:ac:f7:55:39:
77:60:ef:74:f3:9f:f0:8e:c3:a6:f7:de:aa:f4:fe:
86:3a:55:ba:06:78:aa:08:08:68:4d:0c:4d:9c:7a:
0d:2e:83:a6:36:4f:b7:f9:80:03:44:ca:65:c5:2c:
3e:3a:80:bf:f1:de:16:34:bb:f3:64:5e:9e:76:59:
cf:53:87:ba:fe:57:d6:04:e0:63:d7:f6:61:a2:68:
3f:20:ff:dd:45:a8:fc:f9:3e:3a:11:d6:3f:ab:84:
47:11:cb:97:6b:a9:b2:65:a0:f5:27:21:75:e4:67:
9f:1f:b7:ba:a9:8b:78:a2:32:45:db:5a:56:8c:eb:
56:1b:e1:5d:2b:71:29:aa:cf:d9:23:c0:3c:f1:49:
46:03:69:28:65:56:fd:a8:79:b3:83:71:6d:d1:ac:
90:85:53:47:f1:d8:04:7c:f6:46:40:43:2d:1a:83:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2E:AA:82:5C:45:B7:5B:C9:E9:4F:39:28:91:22:2C:90:DA:3D:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfdcdab4-1898-34b7-8d5d-e47c8649d92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.2.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4a:5d:76:5e:68:26:2b:a8:9e:83:64:3f:7b:62:05:c8:e0:
b5:60:c4:a7:be:11:f0:2c:ad:02:d8:f2:35:f2:78:f1:d3:e1:
08:95:ef:4c:ea:4c:f9:8c:f8:63:19:ef:7d:7f:94:ba:eb:2a:
ad:41:fd:62:07:5d:bd:9f:db:b4:3a:6a:75:46:64:95:69:5a:
73:e1:1d:18:ef:a3:36:6b:4e:d9:18:91:cc:4d:3c:41:83:97:
8b:21:e2:38:68:d1:2c:b3:91:13:66:d1:06:20:04:d7:06:70:
8c:9f:39:a2:c5:14:91:47:47:e6:dd:f5:7d:ba:45:6b:98:43:
e7:f9:5f:51:77:1b:c9:75:52:83:78:ad:1c:f5:b6:21:90:58:
10:3e:8b:21:b0:76:f8:13:8e:ac:3a:5b:4f:cc:03:84:62:e1:
e5:84:21:e7:5d:2a:f2:11:5a:f5:c4:15:13:6a:00:5e:a8:52:
13:97:04:d0:3b:3b:2e:3d:80:f8:8a:10:ca:23:cd:79:de:83:
47:72:1e:ae:9b:b3:7f:94:37:27:48:26:b8:fb:ce:b6:42:d7:
cb:44:ba:7e:09:da:33:ca:71:e8:f4:52:36:aa:67:d1:a0:2b:
b9:4d:7e:d6:cb:cd:46:a4:52:3b:bb:92:89:32:ea:b2:0e:92:
5d:84:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 04:20:10 2025 by rpki-client