
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa
File: efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa (raw, json)
Hash identifier: fcDesH6+2Ps8PWxiuWjv1YNlxOK2yKOtoW8GUc/ZGj8=
Subject key identifier: C8:37:49:56:BC:43:8E:EB:F9:3E:FE:03:58:23:9C:8D:1C:36:72:5B
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584F498B6C2D60A1FE4075EFED00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 12041
IP address blocks: 199.254.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:6c:2d:60:a1:fe:40:75:ef:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=10cef2d7-31f0-480e-8104-b81d57dd615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:00:9b:c0:ad:82:c4:55:eb:7a:5f:3a:b5:
4a:f7:22:79:32:67:a3:01:86:8d:d7:6c:d5:7f:95:
0a:c9:2f:0f:ec:5b:8a:76:c1:b5:9b:10:dc:1f:ba:
d7:2a:c9:f4:d9:21:a6:ee:be:39:c9:96:af:a4:64:
50:09:1e:04:ff:6b:61:d3:ff:10:8f:ed:a4:2f:d0:
16:aa:18:9e:e5:8e:48:f5:ab:16:d6:9a:0f:33:fd:
40:34:3f:28:39:8a:b4:bf:ea:82:ce:2e:63:8a:27:
88:f1:b0:07:a3:a5:45:48:10:ca:80:b4:f4:bf:97:
91:32:db:4c:76:16:4a:d5:ff:05:5a:f6:7f:28:85:
c3:7c:5b:de:cb:ad:ea:5b:85:fb:48:98:e0:cc:03:
9f:94:34:f5:96:d0:c0:d8:0b:ef:cd:42:29:64:60:
35:08:e7:a6:bf:5c:9e:cb:44:8b:92:c7:27:1f:d3:
64:3e:80:0d:10:22:da:91:e6:71:e0:4d:53:92:b2:
2e:f8:80:65:85:29:80:5b:cd:2b:b8:11:2d:66:82:
65:cb:05:9a:b4:6a:39:32:4f:77:45:da:ad:d2:8a:
f4:12:f7:6b:c1:31:a2:eb:ae:ff:59:96:24:76:0b:
a6:3d:e6:e0:15:24:7d:e8:b5:10:87:9c:12:c0:98:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:49:56:BC:43:8E:EB:F9:3E:FE:03:58:23:9C:8D:1C:36:72:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.254.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:e7:1e:c7:94:d0:9f:c1:d5:b0:49:aa:ba:32:a1:e8:6c:43:
87:5a:46:16:31:aa:78:a8:9d:06:b6:c7:11:38:12:15:51:c8:
b5:82:89:2e:46:c2:33:11:d8:50:07:73:35:f8:b8:b5:a0:74:
c1:26:63:95:9c:be:48:6b:2a:37:1d:68:ba:62:ac:06:f2:45:
9b:65:3a:29:f8:40:12:dc:71:3f:5d:7c:8d:7a:09:ca:34:72:
73:89:c8:87:8d:e5:c9:79:1a:b1:9d:63:81:81:ad:70:86:b4:
20:72:92:bd:df:b6:d7:c4:62:14:cd:e2:3b:d6:64:26:91:0f:
d5:2c:08:d4:32:29:43:7e:af:ce:ea:c1:25:2c:4b:c9:9a:e0:
94:2e:08:c6:af:c8:ee:8f:2e:84:ce:7f:4a:36:9b:75:0d:33:
d9:1e:e0:4b:38:c8:81:14:49:3b:fe:f6:4c:14:b3:0c:2c:bf:
a4:94:e7:c6:ac:93:a3:ed:c3:71:22:12:49:ad:b2:8f:3c:ee:
1e:22:91:5e:31:8b:e5:b1:c0:86:a6:a6:ed:a3:93:37:b7:7e:
f3:d7:1b:02:7e:e9:dd:25:5f:7d:7b:2b:90:d9:97:d1:68:4e:
38:4e:d7:f3:de:62:7c:d5:68:27:3c:6a:8f:e3:b9:64:a1:1c:
5d:4a:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:44:20 2026 by rpki-client