
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa
File: 293e684a-7bd4-3127-83af-07287fbf52e0.roa (raw, json)
Hash identifier: Mb5LG+LczEugO/w2s5oczNr/47crmyagYX8nx7p/DtM=
Subject key identifier: 0E:41:43:58:49:3D:B3:CE:8E:D7:CF:0D:2C:65:AD:92:61:5F:89:9C
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA7A101D98A04F00AC05DAAC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 12041
IP address blocks: 2001:500:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a1:01:d9:8a:04:f0:0a:c0:5d:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=09edff4a-e90e-4e94-b401-b910b65aff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:5a:a5:90:5f:b1:b6:d1:4a:8e:9d:e8:fe:
c8:eb:ec:76:1b:e1:8e:2e:c5:1e:42:5e:01:02:39:
89:36:19:64:e6:d5:2a:88:d7:61:ea:9b:05:fa:40:
e2:43:85:86:2e:cf:65:38:6c:b7:0f:c7:11:e3:6b:
34:c8:ee:e6:4a:b5:e8:31:bc:ec:17:c4:34:a7:bc:
ff:8d:a8:83:e0:0d:42:c6:47:04:05:14:92:9a:2f:
b9:15:ef:91:71:2d:68:08:ea:59:eb:43:70:b0:e7:
44:10:03:fd:a7:76:00:5b:3c:7e:5d:74:d5:30:92:
0d:d5:29:9e:bb:d4:f8:0f:f5:ce:91:09:fd:cb:1a:
49:73:02:87:76:d3:57:2b:bf:d1:d8:dd:35:ba:4c:
0a:00:83:82:9b:ca:8b:ca:40:e0:62:9c:36:e9:0c:
83:8a:bc:76:7b:04:90:f9:9c:05:8a:bd:5e:e3:87:
45:34:f9:00:36:41:04:1e:e5:26:38:a5:bd:d6:90:
2d:f8:6a:dd:92:65:c4:05:11:66:36:23:0f:34:11:
bc:7e:fb:c1:31:91:16:52:98:29:e0:ad:8c:2f:e3:
02:fd:06:c8:09:56:e4:77:2e:76:14:a9:9c:17:4f:
24:9a:11:df:fc:4b:37:97:1b:a3:fa:3a:50:b9:b1:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:43:58:49:3D:B3:CE:8E:D7:CF:0D:2C:65:AD:92:61:5F:89:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:43::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:10:a0:8d:d6:3e:a7:a4:1a:61:17:fc:92:a8:d7:89:33:c4:
3e:2c:ac:78:5d:32:ca:d6:99:bf:86:5c:cd:c5:c8:d1:3b:88:
60:d7:1a:57:dc:fa:a3:47:50:47:65:b1:ee:a9:61:64:82:b1:
0c:50:d3:00:9d:b3:84:f5:49:6d:24:bd:97:c9:1a:ac:ed:c2:
6e:c7:b9:ac:0b:2f:59:cb:72:af:fb:ed:11:13:f3:a1:ac:ec:
f0:40:70:74:ac:24:e7:0d:84:06:06:e1:66:4a:b4:14:0d:71:
e1:a0:e6:93:4d:5d:91:f4:23:c8:dc:bb:77:33:eb:75:27:7a:
46:12:6f:93:a7:46:ed:d2:7c:60:40:d2:9e:cb:7a:32:1b:03:
70:4b:9c:b7:3a:3f:50:62:2a:9f:47:90:c8:05:21:13:74:9f:
cc:3f:a5:40:73:23:80:67:c8:f4:27:1b:6e:42:bf:fe:98:99:
9b:d5:81:46:0a:c3:fc:5b:90:d5:bc:4a:b6:fe:5b:7c:ff:30:
06:44:d0:7c:50:3c:91:85:4c:6b:1b:26:87:a9:9f:13:ce:92:
df:dd:5c:04:2a:3a:87:e7:72:0e:03:83:ff:5f:16:54:52:82:
1e:9a:2e:a9:7e:0f:a7:bf:81:33:30:a2:41:e6:bd:4e:a6:e3:
d5:9a:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:28 2026 by rpki-client