
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa
File: f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa (raw, json)
Hash identifier: pVriQ17vWFhUPU5S9rz0E3/ZK+Lxr7h/wEpEMOn3EY4=
Subject key identifier: BC:1B:40:70:FF:55:FC:D2:46:33:C5:78:5D:96:D6:17:87:EB:14:69
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584EA79BEC23E2123C5478E02F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 12041
IP address blocks: 65.22.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:ec:23:e2:12:3c:54:78:e0:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=aa40a126-6052-4e7c-b1fb-fe11b844f94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:86:34:33:7f:58:e5:93:08:4c:64:ae:40:
c4:ea:14:73:bb:09:04:64:8b:80:6f:56:1f:b2:f3:
2c:05:d3:a2:c9:8b:14:50:d7:52:ae:67:d7:75:88:
cd:d1:0c:ec:42:cd:5c:f7:aa:36:f2:e1:ec:13:69:
ba:ad:fd:d5:a2:76:38:61:78:be:ea:88:1c:a1:86:
c2:50:cd:73:09:c0:2d:f6:26:b3:e6:86:5a:7b:8f:
88:91:2b:e4:ad:6c:88:3b:e3:d3:c9:45:a3:5e:46:
d5:4d:4f:02:eb:48:1b:52:e5:c3:4b:64:82:d3:e8:
f9:bd:4b:ef:15:99:4b:b4:fc:d8:2d:87:46:8c:b6:
1f:b8:fd:be:83:50:fa:ad:76:56:27:eb:ba:3a:06:
d7:be:85:08:18:f9:2a:da:b2:6a:6e:a2:d5:55:3e:
32:d6:6d:f0:5b:55:89:2d:cb:8f:b1:e1:9c:8d:9d:
9f:64:d7:33:d2:af:6e:6d:67:db:3a:99:e2:6c:76:
19:58:f7:1a:b0:f9:9e:8c:53:40:c4:36:d0:ca:b9:
2e:7d:2c:38:37:a5:0f:bf:b6:e9:83:9f:47:0f:e6:
eb:bb:89:8f:fd:66:49:91:34:18:c9:fe:46:42:d8:
ba:43:80:3c:e3:ff:ce:b8:b9:d0:bc:d8:5c:2a:fa:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:40:70:FF:55:FC:D2:46:33:C5:78:5D:96:D6:17:87:EB:14:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:7d:92:08:0b:11:ab:af:75:84:5a:ea:0a:0f:e7:2a:16:ad:
80:a8:15:50:6f:e0:ea:56:fe:ff:e9:51:4f:7e:e8:c7:b7:69:
85:8b:e3:03:6b:fd:f8:ea:8a:1a:64:2a:3e:17:e6:07:23:75:
a4:09:d7:47:7c:02:61:a3:e8:b6:c6:7d:a0:68:ed:c6:ff:97:
a5:d8:3b:9a:ce:bd:ba:b5:3a:2d:45:94:24:ba:d0:dc:ce:be:
95:28:6f:b3:f2:bb:e7:34:c4:b8:cf:61:16:65:49:48:5c:d2:
45:ca:9b:f4:dc:97:b4:92:c0:4d:9b:ff:83:5c:75:eb:a6:e0:
ab:3c:d8:60:42:e2:bd:31:45:af:1c:35:8b:6f:6f:d2:3c:17:
6f:8e:f8:9a:2f:f3:7a:3f:2b:2d:0e:32:36:9e:47:17:df:d1:
71:4a:3f:15:73:a8:36:56:ed:4d:74:35:53:c9:70:bc:06:7b:
1e:30:c1:d2:06:6b:a6:55:0f:b2:c8:1e:22:4c:42:01:7a:19:
4f:38:00:93:05:9a:84:1c:24:85:3a:95:d1:92:3a:0b:b5:e1:
ba:5a:3f:25:8b:b1:45:82:c3:bc:97:3c:88:2a:1a:8b:bc:b3:
47:d1:76:4e:93:6f:2d:7f:1a:6c:53:50:9a:4d:40:f8:4b:83:
ab:98:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:27 2026 by rpki-client