
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa
File: e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa (raw, json)
Hash identifier: tZU5kh7htVfFTaA8u5u0JZgIppq9xsGI9NFnQHbIHfs=
Subject key identifier: 72:1F:4C:FB:6B:8A:1C:7B:DF:53:3B:9F:1F:27:A1:6F:DD:13:36:67
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA79BEEEFFE5910D9716BFA80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 12041
IP address blocks: 161.232.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:ee:ef:fe:59:10:d9:71:6b:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9c3e7f78-8b50-4aa8-8fbe-e7e51885b34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:fa:cb:6c:cf:06:3a:1b:1a:a7:a0:78:1e:
87:d0:f9:2c:9e:27:5d:7e:fb:b0:72:41:b9:e8:43:
98:b7:76:81:a1:ad:b0:26:f2:4b:c8:7c:d1:83:86:
5e:67:7f:6e:74:33:53:56:ab:a7:a6:ee:5d:68:3d:
35:6e:f9:9e:5b:0c:b6:2e:eb:16:bd:74:81:61:2e:
28:f1:18:76:02:d8:cf:4e:44:90:f4:75:8d:00:36:
87:76:83:14:1a:0b:6a:58:ab:c2:40:06:7e:50:bd:
9b:1c:24:cd:72:db:2e:68:a3:14:f6:3a:6d:c0:29:
cd:53:cd:32:4c:ee:75:57:69:83:76:0e:d1:54:e1:
0d:49:b8:f8:9e:d6:8d:5d:6a:27:38:85:6b:b9:36:
5d:b0:8a:5b:3d:4b:af:fe:4c:d3:ce:30:ed:57:17:
ea:ae:3a:c3:6d:fa:c6:1a:42:70:5b:d7:5c:0d:65:
b0:b9:64:fb:c7:95:53:e4:9c:cd:37:15:a4:26:d8:
f2:de:2d:78:09:82:18:e7:7f:2f:ca:22:d7:4f:8b:
a2:bb:40:4c:9c:a0:1d:7e:33:ab:6e:6f:81:77:8a:
57:52:67:ff:b9:d5:0f:9e:fd:c1:4e:cc:86:d0:09:
17:6d:eb:03:1c:7d:9f:23:58:0e:45:ff:0b:e9:c7:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1F:4C:FB:6B:8A:1C:7B:DF:53:3B:9F:1F:27:A1:6F:DD:13:36:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.232.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:9e:ba:d6:d0:c1:41:7c:bb:87:e4:2a:6c:9c:e2:19:78:20:
44:95:e5:f3:42:55:da:e9:ba:70:8c:1d:d6:57:c0:eb:11:5e:
5b:8d:06:c8:6e:3e:74:6a:61:ea:23:58:c4:fa:db:20:b9:75:
ca:c8:79:ef:88:34:9e:87:00:ec:7e:7c:5b:2e:c1:30:de:46:
d0:fe:32:fc:4b:a8:fc:91:34:64:fe:e6:d0:b5:9d:3e:fe:f9:
b4:9f:70:26:d1:1e:46:7f:76:b5:40:df:14:35:0e:7d:20:b6:
e5:1a:5a:2a:ef:5e:77:cd:9b:39:9b:e7:30:62:b9:e7:e3:24:
a1:2f:5a:03:6c:25:7e:66:40:02:24:40:bb:f1:48:13:6a:c8:
e7:a4:3e:6e:98:1a:b6:a3:bb:d3:3b:d6:ad:8b:d9:61:2f:05:
0a:17:0e:7a:0c:ea:01:9f:d6:37:b8:18:f5:2d:c9:d5:f5:2b:
f5:d6:f1:50:e7:f4:eb:79:99:80:f1:49:f9:75:8d:eb:89:13:
73:0f:14:1f:4e:c4:b7:85:09:49:db:5e:89:47:1b:b8:de:62:
c3:0e:61:78:61:b6:d0:fb:c6:fb:43:83:c2:81:9f:75:0d:d8:
72:ed:e6:40:01:a7:9b:03:6f:ae:88:9b:34:97:30:0d:de:af:
d6:5b:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:32 2026 by rpki-client