
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa
File: a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa (raw, json)
Hash identifier: bz/PVWpeYKeKfu7KdrzqtrZL35KHXrlN4jtMP27ETvA=
Subject key identifier: 3E:6D:EC:20:56:46:51:7C:6E:E6:2A:DD:45:55:9C:98:B0:8D:CA:F7
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584F497390D1DE62962375D08180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 12041
IP address blocks: 2001:500:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:90:d1:de:62:96:23:75:d0:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=57b2c84a-4637-43a4-ac13-078c66d3b8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:ba:39:e9:96:a7:12:15:bf:5a:ef:eb:1c:
cd:48:5d:ac:8a:f0:6a:de:bb:24:44:07:96:1f:20:
fb:75:6e:46:26:e6:4a:f6:de:dd:30:20:23:37:90:
36:73:69:72:36:c8:e1:cb:d5:7c:71:ca:55:09:41:
d6:b6:03:d7:74:66:48:23:7e:35:6c:e1:15:49:19:
14:35:d3:69:3c:fb:b2:a6:9a:30:96:39:98:ad:db:
89:05:b0:08:6c:22:cb:58:b5:a2:92:8b:a6:f4:5a:
a1:38:5b:15:be:36:78:68:1a:ea:b5:21:de:38:93:
a4:12:13:ab:77:d2:29:2c:4e:35:cb:e2:d8:79:46:
51:4d:d4:ef:10:6a:0e:f0:ac:26:af:29:d2:f4:66:
e2:d7:e6:1d:da:54:42:d1:1e:cb:6f:77:f0:b4:cc:
ae:a3:5f:c8:0e:af:07:2b:68:98:ee:fe:8d:2b:41:
e8:51:75:6a:70:e9:8b:1e:22:c0:df:b0:eb:18:f5:
a3:f3:7f:50:00:68:c9:0a:6a:e6:7e:70:33:7f:08:
b5:db:af:ba:f8:4e:91:c8:5f:7b:fa:20:4d:b9:33:
8b:4a:2b:c5:c4:db:a5:77:36:8b:54:f6:39:0d:05:
f5:ba:b6:9f:d2:74:7a:c7:15:81:77:6e:12:a4:d6:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:EC:20:56:46:51:7C:6E:E6:2A:DD:45:55:9C:98:B0:8D:CA:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ee:e0:7d:f2:37:20:68:e3:b5:b5:1c:3c:a6:61:9f:c7:1c:
d5:eb:10:92:2c:7e:3f:56:fa:9e:38:0b:ec:6c:11:c1:f5:16:
86:39:a8:e8:7d:78:95:67:a1:4a:84:ae:0d:e6:5a:e4:16:ef:
33:85:29:7d:15:a8:23:37:68:ac:fb:5f:80:de:1b:8e:d4:35:
67:e5:9a:dd:12:3b:05:66:10:c3:0c:a3:55:cb:b0:4f:2d:31:
b2:27:2c:98:f8:f5:72:bd:d7:0f:18:8a:e8:92:df:93:af:1d:
54:a8:7c:40:17:fd:e7:5b:cf:dd:b9:01:05:56:b8:53:1e:58:
9d:e2:71:82:c4:a8:d2:7e:66:7e:19:de:07:d7:55:e2:b7:43:
20:d2:14:90:0b:12:a4:f4:74:24:3e:d1:2c:f7:08:c6:c1:41:
24:03:02:a4:a0:28:6f:c1:2f:8a:17:40:30:16:60:1f:74:ab:
79:5b:ca:86:6b:c5:ae:f1:5a:fd:00:3f:e3:6a:61:b2:89:e9:
a5:e0:85:bd:85:53:87:56:33:e5:86:5e:f2:ee:ed:42:17:47:
4e:bc:5d:77:d2:35:f7:cd:2d:19:bd:0d:be:92:2f:77:c5:cb:
6e:47:46:42:07:71:b0:5e:13:fe:03:83:4d:f6:70:be:8f:55:
bd:a9:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:40:23 2026 by rpki-client