
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa
File: e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa (raw, json)
Hash identifier: tYk1O8jBesSfGrgTZEk1f3bWo6BCDxqAJ8C2//U6BHc=
Subject key identifier: F5:20:DB:35:8A:43:8B:E2:91:49:29:E3:F9:FF:25:79:8F:E0:60:B5
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA79BD22CA52E6114A9BDE480
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 12041
IP address blocks: 65.22.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:d2:2c:a5:2e:61:14:a9:bd:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=981542c1-f672-451f-92f7-93d54a7eb4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:63:c8:6a:7a:e7:01:8a:4b:e5:b2:cb:72:
61:23:6f:1d:60:f9:cd:ed:54:d6:4f:1f:ea:eb:46:
cb:e0:c8:df:f5:19:68:3f:85:6b:35:ee:6d:c2:0d:
b5:17:52:0b:d8:b6:da:77:34:8d:66:83:60:27:ff:
79:02:3f:ac:47:4a:99:97:6e:55:73:5f:2c:71:51:
a9:89:54:02:90:94:cf:e5:f3:1f:5d:48:76:bb:8f:
2f:dd:2a:c1:53:5d:4b:f5:57:b3:dd:92:29:47:eb:
ed:9b:7a:3d:aa:56:2d:7a:1f:ae:5a:ab:37:3a:30:
5d:9f:6c:ac:49:ec:6a:50:47:f9:44:0a:68:6b:8e:
2f:25:0e:1e:13:2f:d0:44:35:96:1c:3e:9e:d3:37:
c1:13:9d:06:71:d7:c7:fd:90:88:57:fe:86:59:b5:
55:5d:d7:22:b0:31:e7:89:2e:40:48:d7:1c:8b:21:
c9:9d:8c:b9:9f:fb:e0:df:f9:81:69:49:e6:4e:2d:
8b:72:15:79:8b:0e:9a:d7:01:14:b7:12:bc:68:7d:
ff:da:2a:5f:4e:f0:e7:d3:4e:17:a1:32:99:51:c9:
d7:0a:47:86:2d:f7:d5:a5:5e:24:b3:ba:16:04:15:
74:bf:62:da:bd:12:56:55:fd:69:62:f0:61:15:0b:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:DB:35:8A:43:8B:E2:91:49:29:E3:F9:FF:25:79:8F:E0:60:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:4d:2d:03:21:59:a9:3c:1a:d4:1f:3e:d3:d0:38:d2:36:94:
81:ad:ae:6b:30:a4:27:3b:2e:00:2d:db:76:01:c0:29:91:d4:
1f:49:94:95:9c:d0:64:a7:71:b1:59:51:ed:7b:09:62:90:20:
c3:34:8f:6e:b9:86:81:4d:6d:3c:9f:1d:53:c6:d9:ea:30:44:
37:15:2c:5c:78:3a:02:ce:7b:bc:a5:2c:c5:1d:4e:66:29:c8:
96:01:3f:31:76:49:b4:8a:7b:04:c3:54:f3:c7:f7:f5:6c:c9:
fc:fd:5a:92:12:d7:9c:01:1f:51:67:bb:3b:e8:7e:38:b3:bb:
e2:33:8e:d1:ee:57:8b:92:b1:20:8d:cd:ea:0e:c3:7e:b0:7c:
a1:62:80:e3:b8:f0:eb:19:cc:63:2f:87:51:57:47:09:e4:9c:
b3:d0:7c:8c:3b:03:b7:ea:37:10:1e:a3:af:45:cc:ea:2f:32:
18:fe:b1:a5:e7:78:22:bd:e9:b3:93:7a:9c:98:e4:1d:7b:ce:
83:46:03:21:9d:d3:6d:8e:55:33:26:e5:bc:81:16:c3:d5:99:
fa:48:9d:57:03:c4:19:d3:35:4d:6b:5f:f9:db:c3:1b:df:a9:
0a:50:5f:8a:ad:13:a2:8d:f9:e7:66:ea:59:a6:fa:53:b2:c8:
b0:4b:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:20 2026 by rpki-client