
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b2e9bd60-a065-392f-b584-def7a902d50a.roa
File: b2e9bd60-a065-392f-b584-def7a902d50a.roa (raw, json)
Hash identifier: wlJ+qwJGmTvH+4R6CRCyXqjHpVpWlHGqto5xuBtTlw4=
Subject key identifier: 24:32:51:D1:8E:D7:26:C0:23:36:D4:EB:57:D5:11:57:58:97:FF:20
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584BA667AA66A02406E92BACD080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b2e9bd60-a065-392f-b584-def7a902d50a.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 834
IP address blocks: 74.49.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:aa:66:a0:24:06:e9:2b:ac:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=f5ab412b-7b04-47f0-bb42-5e5edfd25289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:f9:4c:87:f6:91:66:25:2f:63:f0:1d:cf:
8b:23:87:48:5c:b3:25:40:13:0d:45:84:7c:59:16:
4a:13:37:ba:d3:a7:a9:bc:63:64:3b:db:60:39:14:
1b:0b:bb:23:6d:e1:88:f9:0c:50:c7:87:fb:0d:f1:
98:29:6d:da:1f:ef:33:40:ec:ac:e4:5e:ac:b9:93:
cb:79:59:cf:3e:ca:f0:e6:94:f4:8a:1a:a2:0b:8c:
11:92:d5:11:bf:0c:5f:18:e8:f1:da:de:5f:f9:b2:
60:62:eb:0e:c3:ac:04:1a:33:38:72:3e:bb:6a:a4:
5e:3b:d5:32:30:63:4c:7a:80:bb:1b:b6:14:5b:f2:
38:52:ce:7b:d0:86:2a:b1:f6:a2:57:2c:06:6f:9e:
55:c4:c6:7d:33:9e:49:6a:c3:a9:81:f3:01:3d:06:
d0:56:0f:78:e1:2c:83:df:08:cc:29:7e:9f:3d:90:
2e:81:02:f9:56:ed:77:23:d0:ad:cf:37:95:7f:38:
5b:9b:2c:de:80:11:cb:fe:c9:b3:c3:c2:06:cc:36:
ab:7f:d1:18:07:af:ea:1d:a9:38:1e:2d:bd:5d:7a:
c7:90:c5:70:ec:40:b6:8a:ea:23:bc:0c:29:37:42:
fb:fd:7f:9f:c1:e6:29:10:3c:00:a7:a5:5d:f1:64:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:51:D1:8E:D7:26:C0:23:36:D4:EB:57:D5:11:57:58:97:FF:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b2e9bd60-a065-392f-b584-def7a902d50a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
74.49.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:94:a4:df:71:53:b6:87:92:ca:f6:25:a7:6a:9b:2d:f8:84:
d2:65:a6:24:b6:33:ec:93:b4:72:6c:30:34:53:ce:bd:2a:70:
cc:79:43:48:2c:4f:9f:01:35:63:12:8a:d6:99:56:6e:0a:ce:
08:d5:18:f8:7b:0a:c7:28:18:f1:66:97:53:79:58:ce:bc:76:
72:94:1b:2a:8e:02:7f:ed:92:f3:8a:ae:51:0f:ac:65:10:7b:
e0:a2:e5:4e:cd:b9:9b:e5:d6:39:72:33:09:ea:94:94:f9:fa:
62:a5:37:43:b7:e9:80:cc:20:44:32:f2:c6:fb:c3:76:cf:aa:
06:7e:d7:7c:c0:49:6d:b4:fd:92:8e:55:b9:42:fd:f3:38:04:
2c:97:d2:e8:16:11:a5:37:fa:dc:29:84:ea:da:f6:ca:a1:e5:
4d:a5:89:59:41:9c:e8:d7:58:31:76:a4:66:ce:e6:8e:da:55:
d7:da:df:1b:6c:87:50:13:63:7d:39:7c:81:99:c8:a7:9a:d1:
b3:5e:18:54:a4:45:6c:a8:07:9f:e2:e0:58:7c:6b:8e:f8:08:
3e:01:b1:ce:68:fc:b1:54:f8:cb:4c:05:93:3e:62:54:9f:9f:
b1:e9:8d:46:29:0d:74:3b:e4:3d:6a:ea:5b:70:23:95:c1:3d:
4f:9b:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:33 2025 by rpki-client