
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
File: 57901a8d-3025-36c9-bed1-42964cd3980b.roa (raw, json)
Hash identifier: byBIAc/g0kuWk3sPIh+bbu5spe926Jo76K1Abubrt9o=
Subject key identifier: 06:2B:63:50:F4:11:E5:BB:E9:D1:A5:C9:F0:8E:B6:A3:05:A5:44:91
Certificate issuer: /CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
Certificate serial: 010D0C9F4328584B6631FE86D4F29DF461A1A700
Authority key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
Signing time: Fri 03 Oct 2025 13:00:40 +0000
ROA not before: Fri 03 Oct 2025 13:00:40 +0000
ROA not after: Thu 01 Jan 2026 14:00:40 +0000
asID: 54785
IP address blocks: 23.160.104.0/24 maxlen: 24
2602:fa57::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:66:31:fe:86:d4:f2:9d:f4:61:a1:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
Validity
Not Before: Oct 3 13:00:40 2025 GMT
Not After : Jan 1 14:00:40 2026 GMT
Subject: CN=16ca1861-985e-4736-9f23-04ba74f57faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:f4:31:63:cf:48:d8:e7:53:a8:d1:1a:3c:
62:5a:f4:fa:bc:0a:8d:63:ca:4a:1a:7e:2e:72:a9:
fe:8f:8d:bd:93:ce:ab:e8:74:66:fd:ee:e7:16:f1:
2d:f3:d8:2a:65:d9:d0:52:7a:1e:f2:12:c8:56:6c:
82:39:bb:95:24:81:06:7c:19:c7:41:15:53:32:ed:
9d:25:fd:b9:d3:e1:9e:ed:4f:0e:18:a5:bf:b4:8f:
5b:72:07:65:c3:d1:1b:07:1e:ad:fc:a8:a0:be:0b:
c9:08:ba:63:54:0e:8a:d3:6f:85:bc:7e:b2:a3:80:
69:af:08:fc:e9:fc:01:7b:47:bb:1a:1d:75:b1:c0:
44:6b:c0:41:da:c5:04:6e:e0:ea:6e:a9:a8:92:19:
81:fd:d7:89:71:9b:a8:2c:9f:be:56:22:30:d4:2e:
5a:c0:33:e3:3c:4b:78:86:59:69:fd:be:25:f2:66:
0e:c9:f7:ee:90:2a:49:11:f1:b7:88:4f:a7:8a:2b:
df:97:2b:72:46:2e:39:7f:d0:7a:65:7f:43:5a:91:
19:b0:e9:dc:70:96:98:c7:01:2a:ca:c5:d6:b8:b8:
d2:2e:a5:74:35:52:39:ad:30:ab:31:35:da:9c:0c:
33:15:5d:17:b0:fb:89:bb:ac:6a:7d:65:77:d6:e5:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2B:63:50:F4:11:E5:BB:E9:D1:A5:C9:F0:8E:B6:A3:05:A5:44:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl
X509v3 Authority Key Identifier:
keyid:0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.104.0/24
IPv6:
2602:fa57::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:a9:30:b2:24:56:e7:6e:b6:f5:8f:d7:fa:3f:d9:ee:c8:94:
dc:fd:e7:43:bc:83:24:d8:55:68:1e:98:50:bd:97:a2:e8:4c:
19:71:ef:60:c4:af:64:be:8e:7d:cc:3e:36:fc:fe:94:5e:59:
3c:53:a0:db:28:72:47:ed:69:9e:b0:19:1e:27:d9:46:13:4e:
6b:09:b4:3f:40:21:f3:fc:bc:6f:11:f2:b9:99:b9:fc:96:6d:
ba:b1:d7:56:36:63:0a:f7:fd:bd:22:de:e1:50:9a:bd:e1:6f:
ad:1d:8b:7f:92:60:29:f5:42:b4:81:5e:57:ab:84:f3:d2:38:
30:30:9a:e6:84:0b:b9:1d:d7:ce:d7:bc:7c:f8:6d:95:b9:f6:
ae:fb:85:d1:88:e4:a7:a0:9b:89:9c:60:ab:92:a7:60:4d:ce:
23:3a:3e:ae:bb:9a:25:8f:86:4d:8e:4e:7d:03:75:cd:63:ca:
e0:21:ff:02:bc:28:cd:94:16:bc:9c:0b:f2:6d:4b:4b:2b:67:
26:80:37:ac:96:2f:20:1a:e5:3f:50:91:49:40:46:c9:74:d9:
3a:9f:60:9a:ad:c7:a7:87:ef:f6:99:7f:1d:ac:b8:d7:54:e0:
4a:55:f4:e9:59:cd:3f:87:7d:23:7f:a0:50:a0:ce:7b:a3:6c:
dd:ce:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:47 2025 by rpki-client