
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a1a1c0a2-7338-3bce-898c-770d3cff91a9.roa
File: a1a1c0a2-7338-3bce-898c-770d3cff91a9.roa (raw, json)
Hash identifier: nSzSzZlCppyxMcZ6ErsU6ymhrFQRpVgsCPZWRsgujN0=
Subject key identifier: F8:FE:0A:4A:AC:03:BD:BB:B9:AD:90:46:CC:4E:3D:63:E6:FA:CA:CE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584B95A787D9F276F169AA5A0AC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a1a1c0a2-7338-3bce-898c-770d3cff91a9.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 74.84.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:87:d9:f2:76:f1:69:aa:5a:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=90549552-3495-4de2-94a9-d401517bb551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:c8:52:00:fd:25:de:54:9e:0d:7a:93:eb:
8e:89:b2:cf:62:96:f8:17:92:3a:6d:72:de:1e:5f:
cd:db:69:f9:8b:ca:6a:ed:1f:90:af:e0:4a:d2:1b:
3a:1f:8c:3b:65:ac:be:ef:3e:2e:4a:9c:1b:2a:59:
c1:ba:da:4a:6f:05:52:30:75:45:92:ea:fd:75:3d:
e1:a3:25:88:43:ba:d5:8a:ac:9f:9f:d6:79:70:9e:
c2:4a:56:58:79:d0:06:a5:dd:0a:b0:d7:2f:31:ba:
63:66:1c:99:77:21:8a:f0:45:11:1d:1b:d5:24:f1:
b9:5f:ce:a4:d8:be:01:7b:d0:4a:d6:c3:40:37:5e:
d4:39:9c:c6:6b:70:4f:8e:a8:e0:c9:44:3c:fe:c9:
e0:04:14:44:d5:ee:75:80:b3:48:49:70:bd:28:12:
d4:dd:9f:3a:45:24:46:85:f0:c4:b5:49:92:1a:74:
1e:6f:d1:2a:65:c8:49:3f:41:d3:f7:b8:9b:d9:a0:
46:50:d6:88:3d:3c:ca:b9:56:b5:5c:d9:5f:3b:9d:
92:b1:bf:58:59:b2:a4:f4:f6:df:a5:16:cc:e4:a9:
30:64:c9:91:2d:eb:4d:de:b5:4c:7e:56:25:68:b0:
d1:7f:74:ef:54:98:5f:23:64:cb:8c:23:39:9a:77:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FE:0A:4A:AC:03:BD:BB:B9:AD:90:46:CC:4E:3D:63:E6:FA:CA:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a1a1c0a2-7338-3bce-898c-770d3cff91a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
74.84.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fe:50:1f:e0:74:82:d2:30:89:97:14:7c:96:ec:cc:5b:41:
33:2a:49:bf:66:29:57:b6:94:c9:eb:40:51:f3:67:89:97:42:
37:ac:b3:ca:93:ab:59:f8:20:d9:40:dc:94:59:7c:99:54:44:
75:83:1d:c2:49:ac:12:30:56:70:24:0b:19:d6:20:e3:1d:5d:
94:04:3f:b2:53:2a:b4:f5:a8:21:eb:c2:1e:27:d7:77:fb:26:
14:af:dd:bc:c6:cf:72:92:27:45:4d:51:e8:e0:ee:c0:9b:d3:
fc:bc:83:44:fc:61:ad:39:1b:c9:af:45:68:bb:43:79:80:6b:
40:30:d0:74:0f:35:1c:8c:59:25:93:37:ae:7e:40:99:73:77:
6f:5f:92:d1:92:d5:20:c7:b9:a0:4f:a2:4f:eb:1f:a0:00:d5:
7a:6a:59:83:cb:e0:1a:b1:86:02:34:47:3a:34:22:52:fc:46:
f4:a7:0a:2d:1d:85:62:23:8c:50:98:da:28:cb:93:15:9b:e5:
33:5c:9f:2e:50:1a:34:d1:f6:ca:df:43:f7:86:59:b0:36:02:
97:74:24:c1:51:75:7e:83:b2:f4:e9:77:4c:77:c3:80:a0:01:
c8:c5:8e:6a:2d:b3:6b:31:02:83:70:22:d9:4e:cd:4b:3f:ed:
ac:a2:4c:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4fZ8nbxaapaCsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
OTA1NDk1NTItMzQ5NS00ZGUyLTk0YTktZDQwMTUxN2JiNTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNfIUgD9Jd5Ung16k+uOibLPYpb4F5I6bXLe
Hl/N22n5i8pq7R+Qr+BK0hs6H4w7Zay+7z4uSpwbKlnButpKbwVSMHVFkur9dT3h
oyWIQ7rViqyfn9Z5cJ7CSlZYedAGpd0KsNcvMbpjZhyZdyGK8EURHRvVJPG5X86k
2L4Be9BK1sNAN17UOZzGa3BPjqjgyUQ8/sngBBRE1e51gLNISXC9KBLU3Z86RSRG
hfDEtUmSGnQeb9EqZchJP0HT97ib2aBGUNaIPTzKuVa1XNlfO52Ssb9YWbKk9Pbf
pRbM5KkwZMmRLetN3rVMflYlaLDRf3TvVJhfI2TLjCM5mnfW4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPj+CkqsA727ua2QRsxOPWPm+srOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTFhMWMwYTItNzMzOC0z
YmNlLTg5OGMtNzcwZDNjZmY5MWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3+UB/gdILSMImXFHyW7MxbQTMqSb9mKVe2lMnrQFHzZ4mXQjess8qT
q1n4INlA3JRZfJlURHWDHcJJrBIwVnAkCxnWIOMdXZQEP7JTKrT1qCHrwh4n13f7
JhSv3bzGz3KSJ0VNUejg7sCb0/y8g0T8Ya05G8mvRWi7Q3mAa0Aw0HQPNRyMWSWT
N65+QJlzd29fktGS1SDHuaBPok/rH6AA1XpqWYPL4BqxhgI0Rzo0IlL8RvSnCi0d
hWIjjFCY2ijLkxWb5TNcny5QGjTR9srfQ/eGWbA2Apd0JMFRdX6DsvTpd0x3w4Cg
AcjFjmots2sxAoNwItlOzUs/7ayiTKY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:21:27 2025 by rpki-client