
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa
File: 7398979f-b238-3247-b6f2-0711d0b06197.roa (raw, json)
Hash identifier: vZmonTghJfy1uql8i1P6Omv1jgxYJ+kIOB4ArlrrxeM=
Subject key identifier: 49:7B:FC:38:FA:E4:FA:21:35:60:F5:FF:C3:63:8F:D6:72:41:96:7F
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584B6202033442A14E08175495C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa
Signing time: Thu 02 Oct 2025 01:00:31 +0000
ROA not before: Thu 02 Oct 2025 01:00:31 +0000
ROA not after: Wed 31 Dec 2025 02:00:31 +0000
asID: 12041
IP address blocks: 161.232.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:62:02:03:34:42:a1:4e:08:17:54:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Oct 2 01:00:31 2025 GMT
Not After : Dec 31 02:00:31 2025 GMT
Subject: CN=e0893c79-a1e4-429f-803b-6bd78318ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:44:4a:3f:da:99:0c:53:6d:80:0f:49:0d:
74:c3:16:6e:da:d9:72:a6:a1:80:71:e9:d0:0d:79:
be:93:1e:f4:b2:a9:40:ff:2a:44:81:78:6c:80:85:
b0:d9:9b:e3:cf:99:39:12:ea:4b:9e:e6:7c:d3:20:
18:52:1b:68:71:8b:99:2e:7a:1d:c8:68:02:67:44:
45:b2:71:44:6f:a3:4f:1a:89:26:30:53:31:be:ec:
85:94:b9:d9:87:4f:00:41:34:4e:a2:e9:49:22:73:
97:d1:f8:ab:79:72:14:7e:e3:6e:be:68:96:b7:0d:
7a:7b:d6:d8:c0:8a:55:d0:32:b7:e8:b4:55:f3:c6:
bd:c1:c7:79:6e:a1:d2:94:ca:f1:94:f0:2b:c4:1c:
03:b2:db:de:cc:f9:1e:b4:f8:b0:90:7e:c3:39:36:
76:a9:94:da:81:d3:a5:28:9e:9a:45:22:de:c7:b5:
05:17:50:5c:09:0a:02:84:65:54:3b:af:b2:a3:0a:
a5:3c:a2:cd:25:de:61:d0:44:e9:5b:8c:1e:86:9e:
7d:9a:30:43:cd:1d:58:a7:9f:b1:b5:93:af:02:b1:
ea:e5:97:a3:e7:70:2e:b3:26:0f:d4:50:69:00:b3:
59:51:12:37:e1:73:5d:a7:80:16:7c:62:52:95:6f:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:FC:38:FA:E4:FA:21:35:60:F5:FF:C3:63:8F:D6:72:41:96:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.232.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f7:77:29:87:80:a4:f4:74:4c:61:17:ee:f2:5a:b7:0f:8f:
5c:ca:52:46:93:d8:7d:ea:ef:a0:40:d2:7e:7b:5b:8e:16:d3:
3c:46:ec:ef:47:5f:4c:5e:2b:fc:87:b6:66:a4:0d:5c:0b:53:
82:23:40:ea:65:65:48:3f:4d:1c:3d:8f:6b:56:9a:18:55:3f:
fa:7e:98:ef:3d:1f:78:a0:07:8e:ad:d6:60:c2:51:36:12:19:
3d:ce:d8:21:54:d8:34:c7:a8:5a:53:99:76:f7:11:59:d7:ba:
00:e2:bc:e1:9c:0f:4b:08:c0:ff:85:db:4f:20:a3:6a:04:35:
d4:38:04:c9:28:6f:04:8f:87:4f:99:46:52:f4:de:26:24:88:
6a:ce:98:44:57:22:a0:f4:e7:93:65:5c:d5:02:61:1d:a0:52:
b5:87:f3:65:95:f9:2e:f8:f1:ae:88:ba:3e:49:c6:a8:bd:e6:
41:1b:cb:68:ba:c3:a7:d0:01:ff:88:61:36:f7:85:65:1a:26:
22:a2:f3:6b:e7:14:2e:60:cd:25:25:5e:87:30:64:9e:14:18:
cd:a3:7b:11:6c:3f:38:54:76:9e:8a:16:56:1d:51:5e:22:2a:
15:82:3c:5c:18:36:72:0c:69:f3:b6:d0:f8:64:e2:62:e4:59:
17:49:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:44 2025 by rpki-client