
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa
File: 9579d882-eb1c-3901-97ff-7eb7aeae8077.roa (raw, json)
Hash identifier: mrtX5bjrbL+Uc7tDMk5fy8ywhzbN383TSXC20/1BLpY=
Subject key identifier: 89:72:F5:E7:CD:BE:17:D1:8B:5D:74:0E:B6:87:09:22:98:43:CE:53
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA79CC8282E92CD78202C3C80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 12041
IP address blocks: 2001:500:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:c8:28:2e:92:cd:78:20:2c:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=eb38f2ae-0825-4097-b70d-95ab04131dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:35:29:d7:62:36:07:57:b8:7d:7e:4c:c6:
aa:3f:2a:86:38:75:68:21:c7:53:bd:c5:c3:55:80:
6a:ff:9e:4a:44:87:da:fb:a0:8b:70:9e:a8:fb:8e:
1f:34:e6:1c:4c:d0:af:3c:b3:33:55:8e:62:b8:cd:
ed:1e:13:8e:9f:f5:8c:d7:fb:44:ad:5c:55:20:28:
23:a4:ba:77:42:4c:a0:b1:af:13:e5:06:ee:2c:fa:
ff:48:52:93:f7:8b:ea:7a:73:92:ef:22:e7:d1:69:
52:2a:68:3d:60:8c:63:b1:10:a8:19:f4:4c:5c:0c:
79:72:69:eb:f6:ec:8c:1e:6c:de:22:0b:3d:e5:75:
21:4b:9b:6d:b7:55:f2:c7:c4:11:e3:fc:8c:52:8a:
01:b8:84:5d:fa:7f:cc:8b:38:38:1e:df:fd:b4:72:
d5:e2:c7:a1:71:00:49:25:70:fe:f5:e7:77:30:93:
f6:05:a6:b7:ff:06:9e:2f:54:f7:c3:6a:68:22:0e:
20:b6:62:da:14:2f:e1:01:75:49:e9:a0:ca:31:e1:
9b:95:58:81:49:69:77:22:87:da:a6:2e:dd:5e:d4:
79:cc:3b:7f:2f:56:2e:34:b5:6e:86:ac:9c:32:75:
25:55:9c:e4:8e:61:97:77:70:f3:52:2d:93:ff:b6:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:72:F5:E7:CD:BE:17:D1:8B:5D:74:0E:B6:87:09:22:98:43:CE:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:12:82:2e:55:67:b3:af:8a:a7:32:d2:16:7f:25:53:5a:62:
9f:c9:59:b9:ef:d3:ba:02:94:31:74:21:38:e2:ed:46:21:ed:
16:26:27:5d:95:fc:0f:56:e6:0a:c4:5a:be:80:8f:e3:b4:6f:
14:00:37:d6:06:d1:c2:56:ff:47:06:68:77:08:39:ee:12:40:
ad:70:b0:30:84:6f:a5:9e:e9:7d:46:12:a1:a9:62:3c:2b:47:
95:2b:e7:c8:d3:63:b5:b3:89:16:98:da:3a:2b:fa:25:e0:e9:
f0:ea:f9:c1:a8:79:2a:00:c8:1a:5f:81:2a:95:ce:ef:6c:93:
3b:c6:9c:53:57:16:3a:e0:89:16:5f:d7:f3:d0:d7:6f:70:6f:
5d:ce:b7:da:90:79:79:50:36:29:67:91:9f:a7:a3:85:31:c7:
cc:ac:ed:69:58:79:83:8f:65:4c:f8:97:79:2b:0f:c6:4b:1c:
b9:90:7a:36:4e:a0:21:17:d9:01:c4:d2:76:2d:83:bc:54:3d:
48:29:bd:a7:ff:19:08:57:54:e0:d9:2e:be:40:87:c7:88:4d:
bb:02:1a:82:04:11:d8:4d:75:7d:c9:57:ed:5a:ca:a2:1d:52:
02:9c:e2:db:6c:73:69:08:60:9c:79:42:2a:ac:c8:46:93:0a:
28:90:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:47 2026 by rpki-client