
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/080ec38a-9284-359e-9161-413d26746491.roa
File: 080ec38a-9284-359e-9161-413d26746491.roa (raw, json)
Hash identifier: Hzu7et9Rr0ZQ8zRC7DAFE2jUR1OdHwSuL2ntdETOozQ=
Subject key identifier: 90:1B:44:C7:40:13:2E:6D:9B:DB:51:5B:E4:F5:14:62:9E:1A:87:CC
Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial: 010D0C9F4328584EA79115EE74B116478E334700
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/080ec38a-9284-359e-9161-413d26746491.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 10998
IP address blocks: 199.43.48.0/23 maxlen: 23
199.43.48.0/24 maxlen: 24
199.43.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:15:ee:74:b1:16:47:8e:33:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f0c91409-c6b3-4881-80e1-94d3c28f45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:ef:56:91:ee:45:fc:cb:80:96:05:68:f6:
7a:16:ba:a1:dd:c3:0e:4d:97:23:b2:89:56:9a:b1:
b7:29:6c:f6:ad:90:48:b5:26:c8:ad:6e:be:a4:0e:
1c:8a:6f:09:95:7b:8a:85:01:94:f0:bb:2a:7d:fc:
95:70:b8:b9:76:93:89:cc:81:7a:9c:81:86:e1:a6:
fa:14:a2:8a:ee:63:39:f5:47:0d:8a:6c:e7:3c:ef:
58:57:c1:63:16:15:bd:29:2b:51:ea:1d:bc:3e:b0:
e9:0d:00:17:39:e2:54:32:72:92:2b:34:14:de:d1:
85:c5:bc:cb:a7:af:bf:54:2b:81:e9:04:c0:fe:d4:
aa:6f:10:d2:c4:bc:41:ae:82:ac:08:bd:4c:56:eb:
42:c9:a3:e1:b5:f3:86:0d:53:79:e3:2d:b4:7e:d5:
5a:28:91:94:d2:fa:0a:05:a0:c4:e3:e4:94:16:53:
5f:b9:19:e9:4e:cb:69:1a:4f:7b:f2:5b:5c:88:9e:
04:c2:88:75:12:f0:5c:93:61:61:a1:0e:65:c5:35:
a9:dc:0f:8a:12:cf:31:b4:43:78:9d:7e:a3:dd:2f:
49:6c:51:47:ea:ee:17:ba:0a:18:ac:5c:81:22:1b:
30:bc:ee:cf:ec:39:0a:10:cf:9c:8f:f1:c8:1d:72:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:44:C7:40:13:2E:6D:9B:DB:51:5B:E4:F5:14:62:9E:1A:87:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/080ec38a-9284-359e-9161-413d26746491.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
X509v3 Authority Key Identifier:
keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.43.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:92:e1:ba:aa:0d:2e:74:77:c5:ff:fa:b5:9e:28:31:bc:c7:
0e:c3:a3:fa:d2:fc:be:a7:b4:07:42:c3:c0:da:85:bb:1a:e4:
fc:25:a8:38:86:97:38:b7:8c:81:61:ee:68:e3:ce:33:3b:2f:
b7:65:57:aa:d4:e3:f4:b2:c1:ec:1b:64:1a:18:eb:72:c1:1e:
21:dc:23:6f:3d:20:56:7c:04:c6:de:f6:bb:f3:f6:7d:f2:5f:
6e:47:44:2c:c8:bb:46:1f:f8:99:a1:10:86:75:1b:ff:2e:33:
ea:ea:5d:9e:39:09:1c:d0:bb:84:21:b2:e9:79:de:a3:7a:32:
e8:e9:e8:66:15:1a:b3:0a:18:40:c5:78:9b:63:e7:34:bf:a2:
05:99:07:b6:62:95:98:4b:92:35:f3:53:a5:60:1c:e5:dd:ab:
11:c7:5b:c7:56:7f:14:39:c4:22:03:26:54:11:56:ee:86:1a:
f8:b2:a1:02:b0:f3:0d:3f:17:2a:9e:a8:96:d5:0c:a7:41:8e:
47:8d:92:e0:4a:d7:8a:ac:87:9c:ae:f1:ba:a0:cd:ae:cb:61:
7f:51:c6:20:a9:56:48:b4:34:e6:fd:fa:48:bf:2b:ca:bf:62:
4e:49:a8:05:ec:80:70:0e:b2:e7:3a:46:7c:b1:54:23:b3:a2:
1d:34:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:25 2026 by rpki-client