
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa
File: 688ac534-050c-3795-a67f-345716db725a.roa (raw, json)
Hash identifier: apRRVaEoASQzllX6JUqQClNO7FcR/Ej1cKrNtsk+1hQ=
Subject key identifier: 73:82:3F:74:36:82:61:06:5A:B0:76:69:F5:78:41:1F:64:B5:E0:18
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584BA9B28B84DF5CE880AD829100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa
Signing time: Mon 27 Oct 2025 17:19:03 +0000
ROA not before: Mon 27 Oct 2025 17:19:03 +0000
ROA not after: Sun 25 Jan 2026 18:19:03 +0000
asID: 213738
IP address blocks: 74.1.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:b2:8b:84:df:5c:e8:80:ad:82:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 27 17:19:03 2025 GMT
Not After : Jan 25 18:19:03 2026 GMT
Subject: CN=b5a0b34a-b28a-4330-8de8-74f8b2a991d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:27:a9:fd:02:c7:d6:a8:4e:89:19:f6:b4:
5d:79:f6:76:88:41:f8:e5:99:06:b4:3e:08:af:f7:
f7:69:e8:fd:a2:03:34:3a:61:17:7b:85:85:6e:ea:
44:5d:4a:08:0c:1f:a3:3d:14:c5:31:77:cf:bf:7f:
31:74:c5:59:51:92:f5:4f:1b:6b:55:a8:23:31:0b:
bf:aa:6a:d9:f8:f8:3c:46:ee:87:99:dd:a1:00:56:
b0:14:e2:44:7d:d9:28:e7:45:21:91:57:3d:e7:d1:
ee:28:e8:c7:08:cb:7d:89:93:eb:05:2f:e7:04:73:
ac:06:21:5e:b5:9a:81:73:0a:9b:9b:9e:48:3c:de:
1f:9f:0d:2a:1e:f0:5d:00:4e:61:e7:e8:fe:d6:7a:
1a:9a:dc:7b:6c:99:12:a9:79:6e:cb:fc:00:06:71:
a2:e4:3c:fa:97:33:d2:bb:85:6f:17:82:f9:d4:a9:
93:24:0a:ae:f7:ae:08:6d:e5:c4:4b:89:77:7b:dc:
7b:46:b3:69:e8:6e:e6:aa:2b:ab:a8:4c:95:3d:84:
76:b2:6a:6c:99:89:f4:3c:67:09:44:c9:90:cb:a9:
65:f2:76:e7:32:8d:bf:25:6b:c5:9c:82:11:88:d8:
50:b6:41:ac:cf:83:87:a9:84:80:91:16:4c:00:ac:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:3F:74:36:82:61:06:5A:B0:76:69:F5:78:41:1F:64:B5:E0:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.1.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:8d:d3:3f:f3:16:76:f2:47:74:0c:84:5a:47:02:34:80:eb:
96:24:80:f4:0b:8b:d6:43:3c:74:4a:ad:ef:65:99:11:86:d3:
11:4e:ce:88:34:b0:7f:1d:34:c3:90:0c:cf:ee:e4:41:62:d7:
74:67:72:00:23:76:01:93:18:4e:aa:9c:09:cd:25:b3:ca:8f:
1d:d5:99:41:09:cc:53:0d:40:11:50:e8:8c:28:ec:a2:7b:19:
51:c7:7b:2c:62:6b:e8:95:ca:c1:c1:79:c6:cc:27:b0:09:e7:
c1:b5:7f:35:50:10:24:c4:0d:8e:38:23:d7:68:45:e1:a7:55:
8d:67:36:ff:ad:f7:f3:3d:7b:cf:0d:8a:45:4f:b5:f8:27:bf:
a9:75:2c:1e:16:0c:b6:bd:eb:89:01:3c:fa:c8:c9:13:6b:ee:
5b:1a:99:a8:c1:d1:f3:b8:82:d9:79:71:34:69:78:ac:98:33:
24:54:eb:e9:2b:a0:ec:cd:7c:b2:7c:dd:cb:59:d3:51:6f:66:
1d:cd:39:4a:73:ea:5d:86:e3:93:c8:91:de:18:12:44:73:e5:
56:06:ad:0b:8f:ae:84:06:f0:fb:b0:d1:37:51:bc:27:31:de:
08:bb:90:f7:a1:f3:9c:44:ad:0a:22:1c:d1:9a:03:7a:ec:ed:
16:ac:ee:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupsouE31zogK2CkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTAyNzE3MTkwM1oXDTI2MDEyNTE4MTkwM1owLzEtMCsGA1UEAxMk
YjVhMGIzNGEtYjI4YS00MzMwLThkZTgtNzRmOGIyYTk5MWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6wnqf0Cx9aoTokZ9rRdefZ2iEH45ZkGtD4I
r/f3aej9ogM0OmEXe4WFbupEXUoIDB+jPRTFMXfPv38xdMVZUZL1TxtrVagjMQu/
qmrZ+Pg8Ru6Hmd2hAFawFOJEfdko50UhkVc959HuKOjHCMt9iZPrBS/nBHOsBiFe
tZqBcwqbm55IPN4fnw0qHvBdAE5h5+j+1noamtx7bJkSqXluy/wABnGi5Dz6lzPS
u4VvF4L51KmTJAqu964IbeXES4l3e9x7RrNp6G7mqiurqEyVPYR2smpsmYn0PGcJ
RMmQy6ll8nbnMo2/JWvFnIIRiNhQtkGsz4OHqYSAkRZMAKyuOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOCP3Q2gmEGWrB2afV4QR9kteAYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg4YWM1MzQtMDUwYy0z
Nzk1LWE2N2YtMzQ1NzE2ZGI3MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgEUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALWN0z/zFnbyR3QMhFpHAjSA65YkgPQLi9ZDPHRKre9lmRGG0xFOzog0
sH8dNMOQDM/u5EFi13RncgAjdgGTGE6qnAnNJbPKjx3VmUEJzFMNQBFQ6Iwo7KJ7
GVHHeyxia+iVysHBecbMJ7AJ58G1fzVQECTEDY44I9doReGnVY1nNv+t9/M9e88N
ikVPtfgnv6l1LB4WDLa964kBPPrIyRNr7lsamajB0fO4gtl5cTRpeKyYMyRU6+kr
oOzNfLJ83ctZ01FvZh3NOUpz6l2G45PIkd4YEkRz5VYGrQuProQG8Puw0TdRvCcx
3gi7kPeh85xErQoiHNGaA3rs7Ras7tw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:24:01 2025 by rpki-client