
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa
File: f1432ee2-0ae6-32fb-950a-ffa05a901073.roa (raw, json)
Hash identifier: On+dykWsaKhHW0+Rys1x4uytX35l0SRroRgfRmsjffI=
Subject key identifier: 2B:92:E7:38:2B:2B:A9:9D:F3:7B:20:6C:47:D5:A3:74:06:47:2C:CD
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA79CB3BF646BE541FAEF1B20
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 12041
IP address blocks: 65.22.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:b3:bf:64:6b:e5:41:fa:ef:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=b2c6940e-3ecf-4402-9abb-b02c19a0801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:65:91:bf:65:0f:52:f1:9f:1d:c6:e2:40:
b3:c9:9d:38:26:5a:9b:80:4b:90:98:c7:07:48:51:
2f:24:d1:9b:b5:58:fa:ab:23:21:47:87:37:ff:77:
6b:e5:c6:01:ab:ce:21:79:0e:a5:25:9e:5e:b6:69:
d4:1c:87:69:bd:fb:b0:48:e7:89:87:50:e0:4a:ca:
0c:36:ce:3f:d8:c2:b4:62:e4:6d:10:99:e4:1f:42:
1b:95:00:21:ba:8c:e4:c6:ae:13:6c:af:44:50:4f:
80:0c:36:22:b5:20:73:98:42:09:92:6d:99:9f:cb:
99:8a:ed:54:83:8b:eb:71:16:5d:2e:4a:6f:15:e9:
9d:55:09:e6:1b:dc:ad:a3:97:62:f0:8c:a2:78:1a:
f1:15:70:8e:a6:03:92:b8:73:8e:9f:c0:4f:05:28:
14:36:a3:df:48:51:9e:1d:7a:53:7b:96:00:17:65:
e1:e3:65:86:f0:80:22:b5:76:15:d7:f5:94:2c:9a:
41:59:17:55:2c:d7:5c:f4:7e:3d:83:66:67:31:07:
cf:0a:58:82:f4:7b:7f:9c:31:54:4f:69:8c:74:a0:
5c:6d:cf:cc:4e:2e:f2:6a:c6:20:72:28:61:84:8a:
4c:2e:93:ef:75:82:e8:88:0e:90:a1:15:bd:21:53:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:E7:38:2B:2B:A9:9D:F3:7B:20:6C:47:D5:A3:74:06:47:2C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:4f:98:87:69:71:79:8c:96:9b:1e:db:86:a8:8b:cd:15:84:
5c:7e:5e:e5:3d:60:28:f8:b6:dd:48:c1:ef:98:4d:57:eb:53:
ee:0e:e8:a4:56:54:ef:fa:20:7a:ff:79:ec:e6:c5:56:4d:67:
da:4b:91:1b:c9:a9:45:5f:dd:94:16:f3:c1:19:77:22:27:ad:
fb:83:4a:26:3f:4c:3f:05:3d:59:02:5d:64:61:27:9b:ba:13:
1a:ba:40:f9:8c:f3:8a:5c:0c:fb:bd:5f:f7:dd:c3:f8:e8:dd:
64:18:4e:86:5b:e1:9e:68:c9:15:0e:92:9f:78:00:a3:24:d0:
67:5a:8e:70:ca:5f:d0:67:9e:b9:29:38:29:08:cf:d9:6c:1b:
5b:56:a1:3f:2f:45:bf:24:cf:85:64:73:e2:65:92:89:06:75:
a7:0d:e1:fe:d3:f3:37:47:b4:58:5c:6e:08:0a:85:3e:04:6c:
20:32:eb:7f:29:a3:2a:4f:13:f0:36:fe:85:64:47:45:d5:89:
d4:08:e5:5f:96:e0:3a:3f:ba:5f:99:ea:e2:83:f9:5b:50:73:
fd:e7:30:73:67:7a:57:44:04:f0:e4:9d:64:8f:54:2b:04:f2:
3b:2c:75:a8:40:c7:0a:7c:94:11:aa:e9:c4:c0:ac:f4:2d:3b:
c9:9e:75:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnLO/ZGvlQfrvGyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjJjNjk0MGUtM2VjZi00NDAyLTlhYmItYjAyYzE5YTA4MDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Vlkb9lD1Lxnx3G4kCzyZ04JlqbgEuQmMcH
SFEvJNGbtVj6qyMhR4c3/3dr5cYBq84heQ6lJZ5etmnUHIdpvfuwSOeJh1DgSsoM
Ns4/2MK0YuRtEJnkH0IblQAhuozkxq4TbK9EUE+ADDYitSBzmEIJkm2Zn8uZiu1U
g4vrcRZdLkpvFemdVQnmG9yto5di8IyieBrxFXCOpgOSuHOOn8BPBSgUNqPfSFGe
HXpTe5YAF2Xh42WG8IAitXYV1/WULJpBWRdVLNdc9H49g2ZnMQfPCliC9Ht/nDFU
T2mMdKBcbc/MTi7yasYgcihhhIpMLpPvdYLoiA6QoRW9IVNhowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuS5zgrK6md83sgbEfVo3QGRyzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjE0MzJlZTItMGFlNi0z
MmZiLTk1MGEtZmZhMDVhOTAxMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMJPmIdpcXmMlpse24aoi80VhFx+XuU9YCj4tt1Iwe+YTVfrU+4O6KRW
VO/6IHr/eezmxVZNZ9pLkRvJqUVf3ZQW88EZdyInrfuDSiY/TD8FPVkCXWRhJ5u6
Exq6QPmM84pcDPu9X/fdw/jo3WQYToZb4Z5oyRUOkp94AKMk0GdajnDKX9Bnnrkp
OCkIz9lsG1tWoT8vRb8kz4Vkc+JlkokGdacN4f7T8zdHtFhcbggKhT4EbCAy638p
oypPE/A2/oVkR0XVidQI5V+W4Do/ul+Z6uKD+VtQc/3nMHNneldEBPDknWSPVCsE
8jssdahAxwp8lBGq6cTArPQtO8medVA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:29 2026 by rpki-client