
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa
File: a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa (raw, json)
Hash identifier: 7bmGgkUJ92/GSEw5q7S0+ZsDPSgBULaT9tVfqRA3nCw=
Subject key identifier: 09:75:CF:4C:D2:47:FA:9F:64:B2:C0:AC:B4:8D:5F:1B:59:F3:2F:F3
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA79BE5F7A67C0A63832DBF80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 207266
IP address blocks: 65.22.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:e5:f7:a6:7c:0a:63:83:2d:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=2d3d04f7-07df-42b0-a838-aad12cdb2bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:f3:5e:dd:b8:c8:64:e1:b5:b5:b1:90:f9:
d8:4a:6a:99:ae:95:2b:b0:78:b4:ff:76:a3:c6:f8:
24:0b:a3:8c:bf:6d:b6:2e:71:83:41:b4:a7:6d:1b:
c3:4d:61:ae:48:e8:6c:c0:6d:38:61:77:52:36:2f:
f9:55:de:73:c7:53:54:1f:aa:a2:2a:a5:4f:2a:24:
d7:7d:8b:10:82:e4:80:e2:2e:02:48:6c:5a:32:17:
c5:f5:c7:9f:42:75:c1:6c:b6:95:d8:c4:d2:dc:b2:
da:9c:2e:d4:fc:21:a6:31:a3:77:af:89:69:bb:d7:
11:61:79:c6:2a:e6:a2:a0:e9:65:7b:1c:ba:22:bd:
52:bf:76:5e:43:f6:9b:20:17:29:01:80:a5:d4:02:
9b:58:ab:12:68:44:43:21:62:b9:3f:bb:bd:55:01:
3e:c9:11:ce:4b:27:32:19:50:60:45:7b:e5:eb:1d:
d9:26:d8:fe:24:5c:28:47:9e:c5:ce:fb:40:b1:ae:
81:d0:41:dc:e1:a2:8f:83:98:43:1f:51:4e:da:02:
35:af:6d:79:3b:85:87:e4:2e:a4:01:0f:db:86:eb:
1d:b8:8c:2f:0a:81:da:eb:79:20:c7:7a:1b:f6:01:
3f:23:7a:28:78:e6:d9:65:b4:77:a2:6b:76:40:82:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:CF:4C:D2:47:FA:9F:64:B2:C0:AC:B4:8D:5F:1B:59:F3:2F:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:fd:9e:d9:22:55:b0:15:1e:ed:5b:3f:1f:0d:01:44:7a:f7:
f5:8f:d8:34:36:fe:99:1a:1d:29:96:d0:96:43:ff:f9:8a:cd:
b2:fa:2a:91:6d:60:6f:83:e6:8f:ae:37:56:a6:0b:04:9b:6c:
d4:a7:ed:47:2d:d7:a1:ee:5f:6c:32:12:68:ed:c2:ac:6c:d9:
ba:63:58:24:c9:90:f9:03:0c:48:bd:a5:1d:e3:06:ee:4f:80:
d2:a3:dd:e1:c1:1a:d7:ee:de:95:11:6b:f0:cc:f6:27:2a:c2:
30:84:f2:fc:89:07:16:5d:e4:46:ea:95:ce:9b:8d:08:63:01:
bb:b4:26:b4:40:b3:b6:af:c7:cb:07:9d:66:9f:1b:77:ef:91:
72:69:cf:15:bd:54:ad:a6:78:d5:78:2b:83:e8:96:10:e4:15:
4c:16:33:1c:ef:1b:07:ce:6a:e4:86:28:85:89:2b:f6:68:e3:
16:38:01:72:03:27:bc:33:48:93:16:16:07:e1:2d:3f:4b:66:
95:0b:e4:d9:a8:84:dc:dc:7f:de:ea:f7:18:a2:0c:fb:9a:58:
44:bc:01:ca:6e:4f:91:ff:5c:f3:80:37:de:37:c3:16:d7:ba:
5b:29:b1:b3:ae:e1:c3:72:ce:29:56:86:3a:c6:80:ed:e3:08:
aa:00:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:03 2026 by rpki-client