
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa
File: 00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa (raw, json)
Hash identifier: 9tu0Ubl4G9LRuB73+kMtU2Bl5Fk4rksycGFBbiLP4Xo=
Subject key identifier: 50:E9:A8:C4:C2:6A:F5:22:83:FE:90:E7:AB:17:F6:F3:E7:56:36:D7
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584E059B3DEC35297368A2CE9300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 12041
IP address blocks: 2001:500:d5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:3d:ec:35:29:73:68:a2:ce:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=a35fe258-80ae-4c91-87b1-1ab7439102ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:4a:b1:37:c5:28:00:32:d0:de:7a:5d:89:
2f:0b:88:ca:1a:59:5a:03:4e:09:39:c1:4f:a5:cc:
73:09:4c:8a:f4:12:8a:81:95:cc:17:d3:04:b4:3d:
ad:4f:1b:83:c3:41:da:28:52:2d:89:30:ee:e0:51:
c2:26:54:d0:a5:5f:8f:76:4c:54:e7:ee:3e:84:e4:
1b:b6:15:2d:3d:39:d1:b3:91:1f:0d:af:49:e5:bb:
13:35:75:72:f0:35:32:5e:2c:39:f3:fc:86:63:87:
04:5d:59:2a:b8:ae:e0:a7:ba:ef:3f:ba:a6:f6:29:
bf:eb:77:58:c9:e9:34:27:a1:8d:53:bf:64:75:7c:
5c:c7:f7:41:ad:07:31:ca:e4:43:10:d6:29:fd:40:
0f:7a:e0:0a:c5:28:14:b1:60:24:f5:7e:3b:65:85:
29:51:20:41:ff:59:45:32:69:48:ea:c1:8f:b7:d1:
bd:75:4c:4d:89:cf:d3:a4:05:97:2d:b2:1b:9b:fd:
4f:42:ab:98:08:d0:d4:93:a8:79:ce:78:00:1b:85:
a7:19:51:b2:01:fa:4e:96:bf:3d:1a:4d:fd:26:1d:
4f:bd:ec:e0:3c:c6:60:f0:e9:0d:d2:04:e5:b5:d9:
26:37:f9:ad:09:46:db:95:d1:5d:12:7b:65:24:a4:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E9:A8:C4:C2:6A:F5:22:83:FE:90:E7:AB:17:F6:F3:E7:56:36:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:d5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ad:69:bc:e4:ba:45:f9:ca:48:e0:74:ac:3e:a2:f1:f9:81:
2f:65:22:c2:cf:25:55:a6:c1:2f:c5:b9:b9:47:86:98:bd:01:
2a:65:79:74:d2:64:c1:e3:cf:4f:ee:35:60:68:02:da:fd:6c:
e8:bd:88:e0:d6:ad:a8:50:c0:5f:9d:a9:31:59:d2:10:fb:93:
26:50:57:ae:b0:45:b2:89:3a:40:a6:45:fd:e3:c3:b2:6c:7b:
fa:77:a6:a0:16:fa:9c:58:d2:a1:35:77:6e:14:62:d7:e8:71:
13:58:e2:db:b0:c8:95:35:48:52:da:4c:66:fa:70:50:1b:de:
e5:68:3a:22:a4:0c:56:75:fa:c9:73:ae:db:6b:4b:d1:0e:e6:
23:c1:cc:00:9d:29:4b:ef:2a:33:0c:0f:71:a1:d2:d0:22:e0:
5e:19:b5:82:43:72:02:82:77:13:67:a7:b0:7b:18:38:b6:79:
d0:08:c4:a6:e2:4a:06:b1:c6:c8:16:e6:a7:ff:a4:0a:90:c2:
55:50:09:83:f1:57:af:58:ff:ee:92:c3:be:ba:7c:90:a1:4e:
1d:83:85:7f:8e:4f:4d:db:af:9e:bb:0e:df:4c:53:c3:e9:5d:
2c:08:d2:5a:fc:65:6a:f6:b1:d8:57:a3:7b:8c:ca:c6:73:2d:
27:02:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:54 2026 by rpki-client