
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa
File: 1909c963-0da6-3f09-8485-a5f139e7bf16.roa (raw, json)
Hash identifier: bNru8YgFvO0/QQivs509AzRf510D364Bddvs7caqfS4=
Subject key identifier: 27:0F:F0:FC:3F:8D:EB:51:F6:6C:10:58:9B:02:3D:D7:BB:DF:41:D4
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A27256CEFF7FFE56B6EE0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 12041
IP address blocks: 161.232.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:27:25:6c:ef:f7:ff:e5:6b:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=f32deff6-1aaf-49b8-882b-a7b6834a4d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:9b:ac:9c:15:bc:4a:fc:ea:2b:16:07:a3:
95:d7:9c:d2:d9:a3:3c:ef:7e:3b:d8:bc:e5:e8:d7:
a7:fe:98:04:fb:e1:bd:e7:fd:47:e7:2e:c7:9a:10:
08:cf:83:9d:6d:97:4a:96:4f:59:76:f3:42:7a:ae:
81:9b:bd:00:07:33:59:8d:8e:f7:ba:d8:95:52:9f:
e6:8c:d1:a2:f3:77:c2:49:06:b5:67:29:c3:86:14:
58:32:0d:a4:e5:25:36:56:cc:9a:8a:46:e9:e4:4f:
aa:3f:b8:d9:61:3c:ca:84:c8:90:49:2b:31:b5:05:
7d:9c:32:3e:ea:62:2a:18:4d:a8:f7:1f:03:1c:8b:
0c:33:58:8f:7a:8a:a8:0c:83:52:2c:c1:f3:6f:1b:
5c:19:71:77:f4:dc:76:a5:15:ab:05:02:e1:9d:4d:
5d:20:28:aa:00:f4:09:f4:c5:12:31:09:39:5f:f1:
a0:1b:e1:ba:a4:0d:bf:a4:65:38:58:bc:11:2f:7c:
4f:57:75:ed:cd:16:8f:ad:1a:78:45:e8:74:ea:95:
04:f6:d4:55:0e:00:11:73:8d:d9:68:1a:62:d2:c2:
ad:e5:e0:4b:e0:f0:a9:64:0e:b2:91:30:d8:14:5e:
8c:46:c4:10:9f:48:61:a0:ab:5c:91:75:2f:34:68:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:F0:FC:3F:8D:EB:51:F6:6C:10:58:9B:02:3D:D7:BB:DF:41:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.232.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:00:9f:2d:6e:e3:48:3a:ca:1a:34:5e:21:a4:ef:10:e1:83:
51:c8:88:4f:63:22:86:54:2b:fa:4f:71:6c:e1:46:d3:e2:a9:
79:ba:ff:4e:b6:7b:13:f0:f6:3e:0a:3b:13:80:ef:29:dc:22:
2d:e0:1e:23:61:f1:8c:73:7e:5f:7f:fe:d7:85:a5:1a:91:ec:
ea:94:e5:85:0f:40:70:09:59:62:8a:bf:28:24:0d:cf:6c:19:
e3:e8:68:da:f1:c4:fa:9c:31:b3:2a:8a:20:4b:4c:ff:15:75:
c9:cd:9a:94:63:dd:10:da:89:66:6c:dc:cf:3f:75:70:ef:6f:
01:22:bf:cc:59:be:fc:9e:9c:e8:5b:37:aa:87:40:ee:30:38:
4f:e0:2f:55:cb:56:67:d7:a9:52:66:44:a7:d9:7c:8e:78:42:
f8:f7:a5:b4:93:59:09:76:7f:4c:91:bf:de:3a:c0:1e:55:89:
8a:3b:4b:64:ff:d4:55:f1:7b:d0:7a:f9:40:80:8f:61:3b:d2:
df:87:de:0f:90:41:9f:bc:57:14:d5:0f:10:8a:54:33:0e:87:
15:78:bd:1a:81:29:45:69:86:3b:12:1a:5e:20:b7:0f:dd:1f:
d8:54:a4:1e:ac:5f:4b:75:77:5d:4a:bc:74:ef:a5:d9:38:ca:
59:80:c7:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiclbO/3/+VrbuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZjMyZGVmZjYtMWFhZi00OWI4LTg4MmItYTdiNjgzNGE0ZDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoGbrJwVvEr86isWB6OV15zS2aM873472Lzl
6Nen/pgE++G95/1H5y7HmhAIz4OdbZdKlk9ZdvNCeq6Bm70ABzNZjY73utiVUp/m
jNGi83fCSQa1ZynDhhRYMg2k5SU2Vsyaikbp5E+qP7jZYTzKhMiQSSsxtQV9nDI+
6mIqGE2o9x8DHIsMM1iPeoqoDINSLMHzbxtcGXF39Nx2pRWrBQLhnU1dICiqAPQJ
9MUSMQk5X/GgG+G6pA2/pGU4WLwRL3xPV3XtzRaPrRp4Reh06pUE9tRVDgARc43Z
aBpi0sKt5eBL4PCpZA6ykTDYFF6MRsQQn0hhoKtckXUvNGihwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcP8Pw/jetR9mwQWJsCPde730HUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTkwOWM5NjMtMGRhNi0z
ZjA5LTg0ODUtYTVmMTM5ZTdiZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUAny1u40g6yho0XiGk7xDhg1HIiE9jIoZUK/pPcWzhRtPiqXm6/062
exPw9j4KOxOA7yncIi3gHiNh8Yxzfl9//teFpRqR7OqU5YUPQHAJWWKKvygkDc9s
GePoaNrxxPqcMbMqiiBLTP8VdcnNmpRj3RDaiWZs3M8/dXDvbwEiv8xZvvyenOhb
N6qHQO4wOE/gL1XLVmfXqVJmRKfZfI54Qvj3pbSTWQl2f0yRv946wB5ViYo7S2T/
1FXxe9B6+UCAj2E70t+H3g+QQZ+8VxTVDxCKVDMOhxV4vRqBKUVphjsSGl4gtw/d
H9hUpB6sX0t1d11KvHTvpdk4ylmAxyc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:09 2026 by rpki-client