
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa
File: 3cd3730f-437a-38b8-b3dd-014d835d2e54.roa (raw, json)
Hash identifier: peGnYfPqtKP1xONkScuvJbviOxAKWGRCLEvJCTyFi3k=
Subject key identifier: 35:E9:FC:FB:C5:A0:C5:4C:48:28:30:9E:F4:86:0F:AD:03:9C:6A:F2
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA79CA6F04407AE1A94542E80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 207266
IP address blocks: 2001:500:a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:a6:f0:44:07:ae:1a:94:54:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ad27441d-de76-4080-9b5b-0c2a894d493b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:8e:94:e7:db:3c:82:c6:9e:bc:9f:b9:1d:
1f:40:20:5c:84:f9:41:15:10:f0:b2:de:d5:16:74:
be:8e:45:ad:51:fe:75:e2:a9:57:4a:59:e1:17:ff:
27:90:cb:86:20:c7:74:80:18:6a:b1:33:f0:8f:b2:
6c:99:40:dd:d7:bb:d7:4f:b6:36:23:23:e8:e1:57:
5e:de:da:79:26:1c:63:97:50:ca:1f:c2:9c:7b:8a:
9b:31:cb:79:94:ef:14:f4:5d:60:18:26:33:53:17:
e8:03:55:1f:a5:61:15:fe:c0:5f:f6:80:32:fd:6d:
06:14:0d:49:9b:ea:00:99:79:f3:ec:61:65:da:d7:
c5:c7:cc:72:07:bd:5f:b0:bb:28:f6:4a:a9:38:3a:
5f:1f:1c:19:f9:9c:86:25:98:bb:dc:2a:5f:5e:95:
6c:6e:d2:f5:fc:6b:0b:6e:0c:6d:a7:bf:09:08:35:
fc:f1:52:78:f9:07:8b:5b:f3:55:82:d0:d6:cc:b4:
58:95:cc:a0:4d:da:78:8d:a5:ef:eb:c4:fb:19:e6:
80:0e:c5:5d:7a:55:b5:a5:22:d2:e4:3a:a4:e8:56:
36:c6:22:c1:11:5c:45:32:ab:24:d1:52:d8:0b:43:
4f:b9:90:be:f8:88:4d:5b:a1:a2:22:04:d7:88:25:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:FC:FB:C5:A0:C5:4C:48:28:30:9E:F4:86:0F:AD:03:9C:6A:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:be:27:14:93:1e:b0:2e:cd:2a:d9:96:da:03:90:77:b2:45:
09:d4:8c:f1:76:b2:ca:d0:44:9c:03:3f:14:fc:fc:52:93:06:
75:ad:a3:3e:21:75:0c:69:ad:a1:d8:b3:1e:38:c2:f1:77:b2:
c3:b3:d9:9e:da:74:e0:68:d8:1c:08:fc:dd:72:db:c4:a7:0d:
06:cd:16:0f:23:4e:bb:c9:06:2a:f8:c2:4e:61:38:4b:d3:7b:
7b:79:9a:05:8b:d0:80:14:f9:27:54:e9:ce:1f:06:9d:24:bc:
70:92:99:43:93:cd:d1:a6:a5:1c:e5:ed:33:b0:6d:c7:73:b2:
34:13:02:09:d2:ba:a0:07:9b:dd:7c:97:e1:b2:82:33:2e:dc:
ea:96:2d:f2:9f:b6:aa:ed:a8:79:5b:66:b2:fd:28:79:8c:02:
0d:0c:34:57:9a:f5:b2:ef:50:97:63:8f:2f:76:17:fd:83:d8:
8c:7d:da:dc:4a:dc:c0:5c:2c:d7:47:69:70:24:5d:1f:d3:4a:
77:45:06:4c:f7:0a:2f:2d:96:18:59:e6:a9:8d:a3:e9:20:7f:
f2:be:28:84:38:a7:86:88:39:f9:97:ef:0d:c1:87:db:f6:e5:
d4:09:21:d4:e7:28:a9:07:74:9b:38:6f:6b:08:8d:0c:ec:ca:
50:c0:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:46 2026 by rpki-client