
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32a61cd4-9c90-3296-aee4-4ec0127caef6.roa
File: 32a61cd4-9c90-3296-aee4-4ec0127caef6.roa (raw, json)
Hash identifier: V7KBi5EPmshYo4huj8f1fIGCzdYeBEdp35Ug9eDt3mM=
Subject key identifier: 28:39:8A:44:FA:9B:56:8E:48:0E:3F:EE:3B:9E:E2:A9:85:31:83:ED
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584B95AB0220A86984403E942E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32a61cd4-9c90-3296-aee4-4ec0127caef6.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 74.84.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:ab:02:20:a8:69:84:40:3e:94:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=0417bc73-b52e-4d84-ac4a-760c101bd4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:4d:3c:0c:cc:a2:52:5c:76:7b:2b:7a:10:
b7:28:ed:9b:a2:bf:6a:ed:0e:9a:26:37:8b:8c:b4:
b8:e5:88:99:d8:47:9b:e5:e5:16:54:52:3b:0e:c0:
c3:16:3d:fc:99:00:83:7c:ed:6c:a6:1a:7f:d9:32:
c0:08:ca:de:58:c6:53:dc:7a:a5:06:ef:47:20:12:
7a:f4:24:0a:9d:a1:5e:50:1d:6f:fc:ea:b3:96:d3:
1a:f1:eb:ff:4d:84:80:17:f2:a1:78:ea:ce:3f:c0:
ac:57:58:91:bd:55:7f:17:7e:a4:12:56:df:36:65:
ad:10:ba:67:90:25:34:a3:67:05:4a:a9:00:f0:26:
2c:e8:bf:82:77:8d:6c:1c:8e:de:97:c0:bc:92:7f:
95:3e:c3:37:5f:71:42:1e:5b:44:0a:44:e0:97:07:
93:22:88:f5:0a:70:ad:44:cf:79:0f:95:bd:bb:43:
32:5e:6d:5b:97:4f:a4:ec:41:bc:10:41:fd:37:5b:
98:62:30:3c:03:c9:ca:70:c4:8d:82:ad:71:62:a6:
cb:12:76:d2:15:88:c3:36:5d:ae:86:df:e8:58:35:
d6:4b:a9:e6:b0:48:3c:d5:0a:e9:bf:d1:ef:20:41:
a9:04:97:a1:b5:44:16:af:d5:c2:2f:4f:2d:f4:2f:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:8A:44:FA:9B:56:8E:48:0E:3F:EE:3B:9E:E2:A9:85:31:83:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32a61cd4-9c90-3296-aee4-4ec0127caef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
74.84.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:11:19:1e:af:14:e2:a2:f2:99:d9:2a:24:49:34:7d:ea:1f:
c2:4b:2f:27:6b:72:86:c4:0f:3f:68:a2:95:8c:fa:dd:65:8b:
4d:ed:85:d5:4f:7c:73:db:c1:b4:00:48:83:d0:2b:f6:0a:98:
73:85:ba:cd:c5:39:2b:f1:89:40:3c:47:77:e7:41:d5:10:4b:
4f:44:05:6d:98:8b:fc:ae:a9:6f:b7:e5:b9:c8:c6:6e:02:12:
2a:9e:1f:ae:cf:25:03:90:ca:8b:18:7c:c6:dc:f7:54:2c:a6:
de:59:2f:45:5f:b7:26:39:41:de:3f:30:95:bc:01:78:d7:8d:
24:38:eb:f8:7b:9b:6d:e2:c9:e5:d7:ea:7f:da:03:c4:64:0b:
64:37:4c:ca:ff:c8:e8:21:bb:b2:06:13:41:4c:2a:bf:77:c7:
fe:80:29:bc:4e:1d:3d:4d:e7:6b:1e:e4:2c:6e:f7:84:ed:e0:
7b:68:f0:96:15:48:0e:07:6b:bd:0c:0c:53:4e:08:0a:9f:56:
3f:b2:64:b1:55:96:4c:c5:57:71:6b:75:85:1a:8c:4d:d6:99:
ee:fd:91:17:a5:11:e7:3e:37:73:4c:bd:6a:96:25:19:62:3d:
46:1c:e9:6a:09:76:3a:38:5f:d4:e5:61:4f:48:ab:49:54:d4:
2b:9e:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:27:28 2025 by rpki-client