
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f3316a6-5035-34ca-ba1a-0f9c3267f706.roa
File: 3f3316a6-5035-34ca-ba1a-0f9c3267f706.roa (raw, json)
Hash identifier: 8seBmGFNbYFWQX0YXQWYQ83KG2fxPYsQr4qnfk3xl+Q=
Subject key identifier: 9C:FC:BB:1D:82:FA:0C:8B:CC:AE:A7:BC:D0:83:FE:97:AE:E7:1A:80
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584BBDF51DF913F0532398C02340
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f3316a6-5035-34ca-ba1a-0f9c3267f706.roa
Signing time: Mon 03 Nov 2025 23:29:22 +0000
ROA not before: Mon 03 Nov 2025 23:29:22 +0000
ROA not after: Sun 01 Feb 2026 23:29:22 +0000
asID: 401430
IP address blocks: 74.1.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bd:f5:1d:f9:13:f0:53:23:98:c0:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Nov 3 23:29:22 2025 GMT
Not After : Feb 1 23:29:22 2026 GMT
Subject: CN=6f783e3d-9c8b-4c5b-9939-1c166ea66f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:90:f7:02:34:cc:56:ef:22:ca:61:cf:4e:c3:
41:fd:ee:57:8b:e2:30:56:78:0f:6f:08:f1:a1:e4:
be:62:86:45:33:a7:0a:97:da:50:f0:64:92:73:1a:
06:94:fc:11:5b:25:64:05:d1:b6:32:2c:2f:98:7d:
5b:62:8f:08:74:49:5c:ac:46:95:00:1c:91:e5:c0:
d2:a4:96:53:f3:c3:8a:57:1f:ed:d9:a4:e9:d3:02:
f4:97:6f:ed:09:4c:07:a9:11:7a:e3:5e:32:2a:53:
e3:0a:36:8d:1e:e1:18:ec:01:b9:a1:f6:e0:1a:c1:
33:0b:49:d5:be:98:de:a3:83:6b:8f:ed:8e:68:cc:
01:01:da:97:4b:a1:70:d3:33:17:d5:d0:9c:c9:68:
a0:8b:29:4d:fe:f2:9e:2b:5c:1f:d2:3e:89:cb:f0:
43:52:ea:d6:03:b9:30:82:c3:d7:11:1d:f1:ff:03:
6a:4c:9e:41:47:d9:b6:ab:e4:72:15:2c:d5:e3:91:
9c:4f:e4:5a:ec:15:b0:fa:b0:6b:20:51:fe:f3:ca:
39:4b:04:bc:df:d0:ae:ff:70:e6:b7:a8:cb:e1:fb:
07:a7:28:12:cf:8a:8f:ed:26:3c:56:d5:97:99:46:
39:f9:39:35:9c:70:a2:7e:e3:47:71:db:26:d0:bb:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:BB:1D:82:FA:0C:8B:CC:AE:A7:BC:D0:83:FE:97:AE:E7:1A:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f3316a6-5035-34ca-ba1a-0f9c3267f706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.1.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:06:79:72:72:19:f5:c8:94:1e:5f:1b:f8:aa:96:03:e5:b3:
5a:9f:de:d3:37:18:f6:c5:cf:51:22:49:ae:36:1a:43:15:fd:
66:50:55:bd:96:0a:c8:d3:d9:59:f9:f5:5b:9c:df:f9:f6:3c:
6f:52:83:af:2e:cd:75:bb:7b:a3:cc:dd:de:78:f8:fd:79:0d:
68:f8:08:e3:ba:6e:f7:d2:71:07:f5:01:8f:d1:95:ec:7f:a3:
ea:d0:5c:91:b0:e1:06:d1:3f:b0:e9:a6:67:df:99:eb:34:8b:
24:84:7c:35:83:67:59:6e:be:16:97:22:73:5b:2e:09:16:70:
9d:24:e7:52:d9:bc:ce:80:71:74:44:0b:c5:d0:c7:91:db:22:
27:53:dc:f4:80:95:b5:f7:cc:f4:e3:79:ff:95:a0:4f:b9:9b:
c1:3a:64:21:19:5d:c7:c7:f8:68:63:b7:75:89:59:df:42:18:
6d:fc:ef:3f:4b:b4:f0:e1:55:0c:cb:90:6a:48:97:b6:af:67:
b4:bd:8a:65:c6:ad:87:03:96:66:fc:3c:7c:48:1a:5c:2f:6f:
bb:16:c3:28:89:29:3f:fa:f5:56:ef:67:77:9a:f1:98:7c:26:
b4:4b:b4:68:dc:b2:d0:4c:a3:e4:2e:63:74:ee:3d:cf:59:b6:
b0:e8:b2:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu99R35E/BTI5jAI0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTEwMzIzMjkyMloXDTI2MDIwMTIzMjkyMlowLzEtMCsGA1UEAxMk
NmY3ODNlM2QtOWM4Yi00YzViLTk5MzktMWMxNjZlYTY2Zjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JD3AjTMVu8iymHPTsNB/e5Xi+IwVngPbwjx
oeS+YoZFM6cKl9pQ8GSScxoGlPwRWyVkBdG2MiwvmH1bYo8IdElcrEaVAByR5cDS
pJZT88OKVx/t2aTp0wL0l2/tCUwHqRF6414yKlPjCjaNHuEY7AG5ofbgGsEzC0nV
vpjeo4Nrj+2OaMwBAdqXS6Fw0zMX1dCcyWigiylN/vKeK1wf0j6Jy/BDUurWA7kw
gsPXER3x/wNqTJ5BR9m2q+RyFSzV45GcT+Ra7BWw+rBrIFH+88o5SwS839Cu/3Dm
t6jL4fsHpygSz4qP7SY8VtWXmUY5+Tk1nHCifuNHcdsm0LulUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJz8ux2C+gyLzK6nvNCD/peu5xqAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2YzMzE2YTYtNTAzNS0z
NGNhLWJhMWEtMGY5YzMyNjdmNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgEWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYGeXJyGfXIlB5fG/iqlgPls1qf3tM3GPbFz1EiSa42GkMV/WZQVb2W
CsjT2Vn59Vuc3/n2PG9Sg68uzXW7e6PM3d54+P15DWj4COO6bvfScQf1AY/Rlex/
o+rQXJGw4QbRP7Dppmffmes0iySEfDWDZ1luvhaXInNbLgkWcJ0k51LZvM6AcXRE
C8XQx5HbIidT3PSAlbX3zPTjef+VoE+5m8E6ZCEZXcfH+Ghjt3WJWd9CGG387z9L
tPDhVQzLkGpIl7avZ7S9imXGrYcDlmb8PHxIGlwvb7sWwyiJKT/69VbvZ3ea8Zh8
JrRLtGjcstBMo+QuY3TuPc9ZtrDosoI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:09:25 2025 by rpki-client