
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa
File: 8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa (raw, json)
Hash identifier: lVDk/vJNgyuPlfAll18s70hRQEspanw7wLNOTwsBwFM=
Subject key identifier: 56:02:77:E6:67:E3:B8:98:35:50:11:56:5A:82:58:94:FB:29:5C:2F
Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial: 010D0C9F4328584BBE4043876F5BC900BF101F80
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 7018
IP address blocks: 74.122.56.0/21 maxlen: 24
107.180.128.0/21 maxlen: 24
107.180.160.0/19 maxlen: 24
206.251.196.0/22 maxlen: 24
206.251.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:43:87:6f:5b:c9:00:bf:10:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=8e8c6770-e76b-4704-86bd-fcedb4ad377f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:69:fa:e0:3d:bf:d2:a6:f3:b8:f8:8f:28:
ad:6c:e7:82:7b:1d:fc:f9:50:8b:19:2b:6d:76:44:
e3:64:c4:ad:be:ad:de:9b:09:56:fa:b5:62:0d:09:
d9:8d:dc:19:98:1f:ba:05:3e:b7:a2:09:84:7b:db:
55:b9:bf:b0:15:d5:7a:e0:c8:5b:14:69:97:d7:80:
37:19:73:df:62:fe:b0:bb:8e:f7:c7:65:52:55:39:
01:32:42:5c:73:55:fb:58:d6:8e:3f:c9:d3:e5:f2:
4f:dc:17:3f:f8:a9:50:a3:c2:87:58:07:97:e3:7e:
58:c8:b6:78:f9:fa:e2:c5:82:ec:08:7b:d3:43:cc:
fd:84:f3:70:ec:9c:bd:1f:a7:0e:ef:ad:cc:a8:d1:
8c:2e:43:6e:4c:9c:b6:0e:55:55:b3:65:5c:01:e4:
3f:43:11:b6:e7:ca:fe:a3:3e:6e:42:f3:32:a9:8d:
57:97:23:97:5b:00:a4:81:51:a4:e6:64:65:b5:23:
d1:42:5f:87:b1:85:56:1d:de:2f:26:75:8e:ab:3c:
f5:52:5b:0e:ac:4d:0a:8d:e7:b7:7e:f8:57:f8:fb:
7a:27:68:87:04:f1:62:3d:13:fd:fb:87:bf:b7:ee:
94:b1:ee:56:9c:86:bd:48:57:e4:dc:ce:27:29:b0:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:02:77:E6:67:E3:B8:98:35:50:11:56:5A:82:58:94:FB:29:5C:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/8535d9d7-f8f7-3d10-8e35-92ab0696028e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
X509v3 Authority Key Identifier:
keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
sbgp-ipAddrBlock: critical
IPv4:
74.122.56.0/21
107.180.128.0/21
107.180.160.0/19
206.251.196.0-206.251.203.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c9:7b:bf:79:c1:8f:32:ab:a7:7b:38:53:f9:f3:95:c8:30:
03:27:36:06:53:6f:dc:b5:c2:14:af:6f:a6:89:c3:d1:36:82:
e2:08:5a:21:7e:a1:38:38:eb:4d:51:e5:1a:42:2d:85:ea:8e:
59:eb:e6:f6:7d:e4:db:61:dc:ba:01:c2:46:0c:2c:30:92:d0:
bc:69:4e:5a:a2:19:c5:bd:f5:8a:92:40:c3:45:c0:0c:27:9f:
27:08:9a:9c:dc:ca:30:01:77:0b:0c:04:b0:3e:a0:69:1e:dd:
00:90:f0:fe:7a:28:e5:a6:6b:4f:79:c3:d6:b1:2c:10:25:48:
d0:66:65:2a:b2:a6:6e:4a:2c:1c:bf:f9:ae:ba:e8:79:65:15:
45:90:4d:b9:e5:df:e6:65:97:48:c1:34:d2:bb:55:97:48:e0:
84:b4:46:ce:51:b8:0b:51:cb:ae:aa:10:bb:6d:28:bb:9d:db:
31:48:3a:ba:c8:44:e5:94:f7:2e:31:60:3a:1f:13:e5:1e:55:
cf:f2:80:1c:16:11:39:42:e4:11:b7:af:0d:fd:fb:45:c7:ec:
eb:97:cf:19:66:84:f0:8b:95:ea:d4:62:3d:64:2a:f0:90:7e:
23:d4:71:b5:d4:7a:12:7a:1b:d2:1e:01:11:ee:8e:12:15:42:
2e:db:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:47:11 2025 by rpki-client