
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfdfb45-3134-3e83-bacb-26cd8ef19a87.roa
File: 1dfdfb45-3134-3e83-bacb-26cd8ef19a87.roa (raw, json)
Hash identifier: q/CCSiDMF0HYNWLwFW7uXqiZrTvQmxOdeXaM8K3Lmro=
Subject key identifier: 87:88:2A:79:0B:EC:D9:10:75:CD:95:94:15:CE:E4:1A:4F:68:38:85
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584B821D7A37E88615F5EF428D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfdfb45-3134-3e83-bacb-26cd8ef19a87.roa
Signing time: Mon 13 Oct 2025 13:00:36 +0000
ROA not before: Mon 13 Oct 2025 13:00:36 +0000
ROA not after: Sun 11 Jan 2026 14:00:36 +0000
asID: 33363
IP address blocks: 150.224.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:82:1d:7a:37:e8:86:15:f5:ef:42:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Oct 13 13:00:36 2025 GMT
Not After : Jan 11 14:00:36 2026 GMT
Subject: CN=a0a44659-d9c2-4504-b9b1-09900378a224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:5c:2b:1f:63:77:d9:bd:96:5b:91:74:2a:
61:d5:54:fb:2e:a6:ee:d3:cd:f1:bd:e9:f8:1c:fb:
9f:19:f5:88:19:e5:80:32:ab:ba:54:d2:e1:17:b5:
ca:72:07:d7:e0:a2:61:54:d8:d9:20:ae:1e:87:b3:
55:3a:b6:52:da:d1:b6:73:77:49:b5:20:d3:f7:64:
9c:65:fc:81:e9:06:51:3b:43:8a:8e:be:e5:7a:48:
ea:25:b5:dd:2d:d2:1f:e8:a6:2b:57:60:89:de:e6:
b8:51:5b:57:2b:d1:41:c6:5d:13:0e:85:3d:85:34:
40:84:4f:bf:ce:e7:51:9d:ba:75:d0:a4:9e:ca:27:
87:cf:0b:40:4d:d0:36:5b:90:c1:37:78:ea:a4:cb:
95:9f:18:53:ac:f5:f3:90:49:12:56:be:6e:38:a3:
91:a4:af:c1:ef:a0:fa:0f:9e:12:d3:be:97:17:75:
d1:2c:64:65:38:03:4d:ab:2a:4f:96:81:91:e0:32:
1f:3e:d7:e2:5d:7d:ec:22:1e:30:a7:2c:ad:ea:93:
d8:03:d6:b7:b1:c6:80:96:e0:fb:a1:fa:09:20:b8:
f2:6d:a5:8b:97:fc:b0:94:f0:4a:fe:14:2e:9c:a3:
20:12:ed:3f:48:f2:b1:70:41:e2:34:ec:52:f6:90:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:88:2A:79:0B:EC:D9:10:75:CD:95:94:15:CE:E4:1A:4F:68:38:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfdfb45-3134-3e83-bacb-26cd8ef19a87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
150.224.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f9:8e:cc:4a:d9:02:37:d5:1f:02:3b:24:90:89:45:07:81:
33:e8:96:e7:91:95:5e:01:e1:ec:fd:fc:ac:50:27:ad:84:7e:
bd:c6:ef:7b:a1:09:43:a1:37:f0:7f:2b:f9:43:8c:9f:0d:93:
d6:78:a2:69:57:e7:04:7b:59:74:93:4c:f5:20:be:da:86:65:
28:3a:e9:04:97:f4:96:1c:a4:2e:28:d3:ca:1d:3d:4e:8d:bf:
5e:ee:5c:22:16:48:7b:7b:53:ce:af:40:a9:01:6a:42:2f:9c:
e8:70:49:48:e4:61:d4:c5:b0:ff:12:33:95:8e:03:33:c0:a3:
40:09:be:8b:05:41:0e:88:9f:71:50:0f:b7:5e:d9:68:2d:91:
b0:ca:21:70:17:86:0f:28:ac:78:9c:9e:56:18:fb:15:4c:ca:
c0:5e:af:d4:e9:6e:a7:35:9d:5e:6e:82:36:11:b0:f9:bc:ab:
7d:32:90:08:f7:a6:f2:fe:64:59:e0:05:07:8b:73:3d:1c:ec:
f2:11:60:79:a5:eb:a2:a1:ae:97:72:fd:1a:d6:9e:03:d0:fe:
9a:33:68:98:cf:dd:b7:97:45:48:db:a8:e3:21:55:b0:84:26:
f5:83:8a:3b:d3:6e:3c:24:87:54:2b:e1:ce:2c:1e:fa:7f:04:
b1:19:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:08:16 2025 by rpki-client