
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa
File: a31df491-aa9e-398f-8bf2-7d7490005044.roa (raw, json)
Hash identifier: 3Xw3Epfm2xGG6tfVlKnJjgD46rp9nmvIyyb9rExEcik=
Subject key identifier: 08:F8:69:74:FB:F9:FA:5E:76:93:77:6B:B5:E9:FD:DF:1D:2F:6F:28
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584B92DCFBB3D6741979A5A0C980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa
Signing time: Sun 19 Oct 2025 13:00:39 +0000
ROA not before: Sun 19 Oct 2025 13:00:39 +0000
ROA not after: Sat 17 Jan 2026 14:00:39 +0000
asID: 15085
IP address blocks: 66.168.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:92:dc:fb:b3:d6:74:19:79:a5:a0:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Oct 19 13:00:39 2025 GMT
Not After : Jan 17 14:00:39 2026 GMT
Subject: CN=8a0b5b95-8d12-457e-b9a4-ca0f6bd2c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:26:be:bc:30:68:8a:dd:20:14:34:31:7c:
e9:bb:fe:4b:68:e1:c5:71:78:f7:d9:93:3a:f9:eb:
9e:f9:b8:16:a0:64:cf:b0:9b:ec:1a:dc:97:54:93:
9b:6a:d8:dd:dc:45:f8:89:2c:b0:5d:dd:19:7c:8f:
ad:77:d6:f2:b5:84:4f:a5:67:d2:97:83:7f:42:71:
4b:64:c0:6c:4c:3f:a5:a3:0c:61:36:af:4c:68:18:
e8:3a:cd:83:20:e4:67:22:08:6c:5c:a6:4a:a8:1a:
67:1d:d3:15:d9:5e:7e:23:fa:ec:bf:aa:c8:c2:0d:
85:6e:eb:12:5f:27:38:7b:8a:a2:24:a5:de:68:85:
d2:58:4f:d6:16:67:82:50:20:df:da:66:76:16:2a:
a4:ea:1c:65:31:6a:54:8f:3f:f3:dc:80:c0:e0:e3:
4e:5f:ef:ed:f4:b2:a5:5a:ab:9d:5a:1e:6b:48:ff:
15:14:2c:e0:1e:27:00:b8:74:06:96:f3:82:d0:83:
32:00:20:9e:26:e4:80:16:91:f4:3a:16:20:35:a9:
de:a8:32:c2:e3:83:86:3d:67:66:71:5a:76:e5:10:
f3:90:e5:1b:08:5a:b8:7c:fa:49:90:48:af:68:ed:
df:94:8a:f6:3c:01:13:6a:86:4f:c0:4e:ae:1c:76:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F8:69:74:FB:F9:FA:5E:76:93:77:6B:B5:E9:FD:DF:1D:2F:6F:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.168.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:48:c5:d6:40:aa:8d:34:cc:13:04:f4:13:fa:5e:27:ac:2a:
ef:fd:a3:33:9b:7e:61:76:32:86:2c:03:54:95:5b:a3:cf:65:
ba:7c:cf:ab:73:8f:49:9e:09:a8:0e:c1:db:ce:90:4a:65:ab:
a7:fc:10:1f:e7:31:9e:2e:d9:82:90:da:62:ea:38:e2:59:c9:
da:61:27:00:c7:cd:e8:68:48:22:df:01:30:95:22:cc:bb:d6:
03:59:91:2f:c5:ae:0a:e5:bd:3f:74:42:38:e9:18:4e:bc:98:
8f:90:bb:11:fe:9b:a0:27:63:01:e1:09:76:bf:a5:6b:09:31:
8e:cf:02:dc:cd:81:cf:50:04:26:ec:03:49:b8:6b:c7:01:35:
5a:b9:c5:53:83:20:d9:85:ed:c3:69:8b:57:de:6f:6f:f5:34:
6b:75:d4:35:8e:16:d9:be:0b:1a:03:72:4a:63:f4:00:02:34:
91:a7:fc:55:fa:f7:9c:61:46:93:9d:f4:c6:66:75:d0:ec:1e:
2c:1e:cd:ad:f1:66:96:e3:4f:62:b4:00:79:cb:7e:9e:81:cc:
78:2c:60:ab:84:f9:01:ed:71:bb:b5:c2:e9:18:e7:ed:ed:79:
ab:ad:d7:69:52:f0:9a:cd:57:6c:82:8c:84:9c:36:e5:c6:18:
16:39:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:59 2025 by rpki-client