
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa
File: a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa (raw, json)
Hash identifier: WxjfO1Ei/ZCicoBIrz0fpAj0qgiA7D9TmYLoiljmLbw=
Subject key identifier: 9B:EB:D4:D0:DA:C0:6A:A4:A4:B2:12:11:4B:DA:62:B5:7D:91:55:EC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B8EAD082EDECC28DD87C101C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa
Signing time: Sat 18 Oct 2025 01:00:30 +0000
ROA not before: Sat 18 Oct 2025 01:00:30 +0000
ROA not after: Fri 16 Jan 2026 02:00:30 +0000
asID: 6167
IP address blocks: 174.42.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8e:ad:08:2e:de:cc:28:dd:87:c1:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 18 01:00:30 2025 GMT
Not After : Jan 16 02:00:30 2026 GMT
Subject: CN=64cea268-6c46-498e-b7a5-d6c27f0835c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:df:45:7b:b0:92:d9:c9:52:80:59:c3:7d:
76:14:f7:bc:ac:b4:d6:90:48:71:55:c4:2c:b8:81:
5d:fd:05:ae:9d:0c:5a:f4:de:cc:96:7e:e8:da:1b:
5c:be:38:9b:80:9d:f6:de:01:76:c6:2a:f9:29:ec:
e2:f1:d1:dd:9e:9b:b3:dd:79:88:ff:c7:cd:18:44:
06:d9:73:8c:16:17:b0:16:6e:93:a8:6b:36:05:05:
80:ef:ef:a4:f8:37:e4:06:de:05:7e:41:8d:0a:30:
1d:22:c4:7b:7b:c2:32:84:66:57:be:ac:3e:2a:bb:
fd:11:d3:c9:01:62:77:34:ca:65:69:00:6d:aa:c0:
9e:81:fc:d7:89:f0:b5:7c:3b:62:52:2c:cd:c7:8a:
09:49:36:ee:75:4b:e1:30:73:64:32:de:2b:86:bc:
c5:ea:5c:ca:9a:04:41:bb:4a:37:98:a0:5e:ac:5d:
94:ca:5b:b4:74:03:65:66:4f:e3:6c:af:ef:01:3e:
54:f9:31:c0:9a:56:8c:1e:63:c7:11:f8:0e:e0:98:
b3:c4:bf:57:d0:e4:1c:2a:5e:ba:05:de:ce:6e:b0:
27:a4:be:bc:5d:b6:1b:f2:8f:f2:33:9b:15:7e:8a:
50:83:a0:aa:1c:cf:22:46:9e:cc:ce:b4:61:bb:a4:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:D4:D0:DA:C0:6A:A4:A4:B2:12:11:4B:DA:62:B5:7D:91:55:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:b2:4c:07:e3:a5:f5:b6:50:2c:91:8c:3e:ef:7d:2f:29:7c:
46:dd:e6:73:8e:4d:cb:cc:29:f9:d3:22:85:33:b7:4b:9c:c8:
26:89:16:0c:2a:4e:b9:05:e6:f8:cf:20:ce:ef:5f:d8:f8:52:
a7:c8:00:c3:84:26:f7:dc:be:cd:50:94:ad:9f:e7:2e:b3:14:
87:64:af:59:76:0f:15:eb:ee:23:d7:a5:31:c8:75:73:c4:db:
67:6d:f2:b4:57:b0:2e:2c:ff:e5:38:bf:b7:fe:57:88:c8:78:
c1:b8:f2:f9:37:2a:fd:b9:81:9a:f6:f2:0e:5f:40:4f:2a:b4:
1a:ba:4c:c1:3e:f3:43:bb:6b:c2:bf:b1:26:03:25:66:4e:d9:
9d:67:c2:d5:49:65:08:e8:f4:df:a5:87:f6:47:d1:10:48:7f:
ba:8a:7a:37:2a:41:da:21:f3:a9:9b:9f:27:4f:e3:7c:d7:1e:
2c:4e:a0:41:a6:f2:ce:41:e2:96:fa:1d:35:9e:61:94:3e:a7:
6b:f0:5b:7f:9e:f9:cb:a0:a3:32:29:f4:45:d9:3b:54:38:b9:
86:32:ec:53:4f:af:01:2f:53:ac:83:79:59:c0:e1:44:1d:c7:
84:e3:ef:4b:df:3c:fe:1a:2f:f6:8c:fa:aa:10:f2:ca:1f:d8:
ad:3b:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:47:12 2025 by rpki-client