
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/41a6e290-6891-392d-aa1d-179649fd0aaf.roa
File: 41a6e290-6891-392d-aa1d-179649fd0aaf.roa (raw, json)
Hash identifier: AYjzm0QB4U0DiZUpTTd7rR1gA5m3c044doktJlNIWbY=
Subject key identifier: 28:C2:28:1F:14:34:45:33:96:63:10:DE:15:C0:72:BF:17:E6:5B:89
Certificate issuer: /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial: 010D0C9F4328584B56C44E2EED46FA815958C180
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/41a6e290-6891-392d-aa1d-179649fd0aaf.roa
Signing time: Sun 28 Sep 2025 00:22:45 +0000
ROA not before: Sun 28 Sep 2025 00:22:45 +0000
ROA not after: Sat 27 Dec 2025 01:22:45 +0000
asID: 63201
IP address blocks: 161.199.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:56:c4:4e:2e:ed:46:fa:81:59:58:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Validity
Not Before: Sep 28 00:22:45 2025 GMT
Not After : Dec 27 01:22:45 2025 GMT
Subject: CN=17089d97-82df-44d9-a1a2-7593e8f1eff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:35:7b:7c:5d:4e:1b:f6:73:db:0c:44:41:
fb:cd:4d:30:a4:68:b7:c4:60:1f:6d:f0:5a:dd:61:
75:7a:75:88:16:ac:23:a2:68:b2:0b:57:ff:f1:01:
5b:6a:29:49:5f:b4:c8:c0:48:a9:6b:ed:61:c7:48:
9f:c2:0d:01:5c:83:4f:4d:83:17:9e:82:f4:bd:09:
16:45:0e:82:b4:56:e4:6e:66:28:bf:59:98:d5:e9:
79:c5:31:4c:fc:47:f4:fc:95:2e:38:d5:7a:bc:28:
d1:47:aa:0e:09:da:f4:76:bd:ef:4a:41:13:53:a3:
f4:b9:61:ad:4c:1e:44:9d:25:6f:93:81:83:f7:05:
17:f7:a7:a8:12:a6:61:a4:ca:8f:ca:1d:bb:a6:ca:
6c:fb:18:7d:59:73:e9:59:de:fb:d3:c2:f4:99:88:
bf:de:2a:ba:b6:96:b5:7e:af:87:95:00:8d:11:84:
5f:72:b6:9e:05:2f:34:43:fc:5e:8c:43:cc:bf:20:
4b:a8:0e:e1:86:7e:40:1d:79:67:b7:5f:6c:ea:4d:
6e:d2:2e:d8:d0:34:34:97:53:97:19:e9:3a:69:e9:
1e:a8:bd:f5:9f:58:98:86:10:ed:1b:aa:85:95:78:
89:e6:11:b2:7d:84:53:14:38:bc:a4:aa:42:93:be:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:28:1F:14:34:45:33:96:63:10:DE:15:C0:72:BF:17:E6:5B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/41a6e290-6891-392d-aa1d-179649fd0aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
X509v3 Authority Key Identifier:
keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:9a:bb:ed:d4:99:0a:86:44:4d:dd:6f:f0:88:70:79:f3:38:
ad:fa:7d:0c:81:42:65:37:4a:cb:fa:8f:45:cb:3b:9b:e9:8e:
37:0d:80:d7:5e:da:2a:e1:63:94:ca:24:33:54:54:84:13:74:
a5:d1:75:5e:f6:64:bb:97:82:97:91:51:03:a6:d7:51:4f:f6:
1e:f9:0f:16:3d:fc:90:9b:78:22:5d:51:a2:52:95:43:9d:40:
f3:63:c4:c9:87:dd:a1:3e:8c:2b:a9:e9:38:06:8c:45:46:f8:
2b:a4:ff:40:23:4c:31:4c:bb:7c:cd:56:c1:6b:f2:3c:f7:20:
d9:c8:f5:ec:80:e0:1e:5f:76:91:84:fa:9d:09:fe:fa:42:3d:
58:78:0f:b2:82:a5:f0:f4:36:f6:42:05:15:26:c9:f2:29:16:
c8:8a:ef:83:b1:90:77:0b:bc:4b:9b:6d:29:90:6e:50:c9:91:
50:a4:4a:ab:60:3d:71:96:cb:65:1b:d8:74:43:63:e2:59:61:
e5:7c:a8:4a:d1:5d:7f:1e:eb:69:d1:19:a3:72:da:ef:14:cb:
4d:ae:36:1e:20:da:63:dd:1a:64:b5:55:71:28:14:fa:32:15:
32:03:2a:b9:04:0b:9d:8a:87:5d:cb:b3:3b:94:29:6b:0b:af:
ee:70:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:19 2025 by rpki-client