
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa
File: e5b29350-97e8-3c9d-8af3-e08fba14e907.roa (raw, json)
Hash identifier: RMlx38P5uRwbpMP4yXX3wGBswEmVW53g4Zk3+7BY/qE=
Subject key identifier: E1:4F:01:37:4A:AC:F3:5F:DC:F3:45:41:04:54:19:4D:DD:78:E6:1D
Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial: 010D0C9F4328584B970CE29B6F7535562DDCD8A0
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 397131
IP address blocks: 23.170.32.0/24 maxlen: 24
2602:fe6a::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:e2:9b:6f:75:35:56:2d:dc:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=247740ab-681f-4be8-886b-1f2f312b4908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:50:00:fd:01:b6:f6:56:f0:2d:1b:7b:60:
a7:63:d9:2f:1a:86:c5:f9:53:ef:f4:0d:78:fb:90:
e8:1b:31:7e:4e:7a:2d:80:bc:bf:14:73:9f:bc:e0:
ec:ce:96:5e:3a:65:25:11:33:c8:81:20:81:56:bc:
a5:eb:96:d1:57:e5:a7:b2:1e:72:0b:02:6c:03:cb:
6c:d6:c8:82:68:b5:af:55:91:91:42:c9:96:94:73:
49:45:aa:26:16:40:26:8c:0e:1b:36:73:dc:1a:c5:
b8:93:85:ef:71:8f:ca:92:eb:90:8f:0f:ad:60:51:
b0:0b:d3:11:d5:6e:6f:50:9c:4c:94:bf:07:4c:96:
e9:65:e7:cd:de:30:aa:55:16:09:14:1f:b0:bb:5c:
62:ae:2d:f6:43:bc:bd:b7:49:0c:3d:69:78:6d:7c:
a1:07:a0:42:6c:8e:da:ac:d4:c1:38:0f:32:1e:b8:
17:b0:e0:9f:13:1b:eb:54:db:d6:5a:c5:d5:d9:68:
c5:4d:c9:40:a1:3d:da:e9:89:74:89:7f:a7:89:1f:
70:b2:e0:4a:9d:52:98:24:72:fb:86:74:33:81:a5:
4d:75:23:ab:8f:7a:80:ac:ee:b8:6f:e5:c8:0d:9f:
e9:e2:9a:21:03:58:df:a0:11:59:d0:fe:a4:fa:36:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4F:01:37:4A:AC:F3:5F:DC:F3:45:41:04:54:19:4D:DD:78:E6:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
X509v3 Authority Key Identifier:
keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.32.0/24
IPv6:
2602:fe6a::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:33:e7:bc:a9:c6:81:18:41:f3:dc:3a:e4:74:55:cf:64:ab:
36:89:6d:5b:ae:5e:6d:e2:37:1b:5a:8a:12:50:2c:db:a4:8f:
db:ae:3c:a5:47:b5:7f:57:40:1d:2d:02:3b:0a:16:30:98:c7:
c5:cd:9b:f0:51:ba:94:b2:b3:72:93:e2:2a:de:fa:2c:87:a2:
e7:c9:4d:94:18:94:0b:ca:c1:99:c9:d0:5b:ce:5b:8b:90:64:
45:44:d3:0a:0c:1d:d7:de:57:48:70:1a:9a:56:98:ab:7c:7c:
6f:a0:04:34:a2:d1:4d:11:ce:99:9b:4d:3e:ed:b7:a2:4e:e6:
3d:7d:ce:7f:db:2b:ea:15:fb:97:f6:72:a4:d8:a2:ba:4e:85:
86:34:14:79:9c:f4:a5:11:63:2e:29:83:05:84:da:75:b6:28:
46:da:97:cf:cb:aa:75:7e:66:92:0a:1d:f9:c8:d2:e9:b8:73:
bb:ee:eb:79:17:38:81:17:8e:68:07:d1:31:0b:be:38:2f:05:
40:53:35:5e:f3:a2:99:cd:34:21:58:db:b1:97:1a:5a:75:aa:
80:1b:58:be:c3:7d:6e:bd:78:8f:5d:b0:d6:cf:77:4d:63:ea:
87:12:44:e5:41:fa:e4:eb:cb:3d:b7:10:80:45:0e:31:40:68:
29:2f:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:56:12 2025 by rpki-client