
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2186736d-c9c1-3bb9-b61f-866ab886a133.roa
File: 2186736d-c9c1-3bb9-b61f-866ab886a133.roa (raw, json)
Hash identifier: 5If1SQ6U4Bpfx/M+0ZFJMIlevVvG7H09hOZ0yTim3y4=
Subject key identifier: 38:C3:BF:5C:54:C0:D6:FC:3C:1F:55:4E:5E:6A:A3:F0:E3:95:28:D5
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A61942E6B220590C8E400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2186736d-c9c1-3bb9-b61f-866ab886a133.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 207266
IP address blocks: 2001:500:4e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:61:94:2e:6b:22:05:90:c8:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=5906eb84-d8ba-44e4-85a5-eacb16a5fa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:5a:cc:09:47:29:d0:51:b5:41:d8:90:e1:
5d:aa:69:91:a4:97:f2:97:11:86:93:b3:76:6f:14:
e7:2f:8e:5b:57:e7:d3:e9:b0:d9:74:ba:18:5d:7c:
1c:2b:4a:74:e4:5c:fa:2f:25:47:78:71:fa:66:10:
25:00:a2:06:ed:5b:63:99:e4:a2:21:72:36:14:68:
6a:fa:80:35:1d:1f:f8:38:64:a0:70:c1:7a:97:e9:
e6:d7:a6:c6:e0:21:aa:a4:22:7e:8c:d3:20:36:78:
f8:86:28:0e:79:91:f2:e9:fe:7f:80:5d:60:ce:7d:
ee:97:4f:58:1b:6e:c7:c7:10:dd:e6:b9:fa:56:af:
bd:ee:3c:af:e6:bb:1a:dd:03:5d:50:16:b1:5f:73:
97:1d:19:b4:6d:fc:5c:b6:98:dc:a6:57:f6:d1:b2:
f3:cf:51:56:9f:d7:9b:72:5d:c7:76:fa:08:ce:74:
57:3c:ae:7e:27:d5:19:7b:78:4b:2f:82:00:d2:06:
41:56:43:09:f3:1b:a0:95:8c:4e:5b:47:90:26:df:
e2:7b:8d:58:87:67:19:fe:a9:e6:99:8d:90:6f:8c:
aa:6b:db:e6:b3:e1:1d:3c:00:83:31:7e:cb:4b:4e:
08:25:06:5a:2c:38:42:a1:ff:90:66:e4:4c:3e:6e:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:BF:5C:54:C0:D6:FC:3C:1F:55:4E:5E:6A:A3:F0:E3:95:28:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2186736d-c9c1-3bb9-b61f-866ab886a133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:4e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:93:c1:91:6e:7e:60:aa:79:5d:d6:f8:b4:6f:f0:78:9f:f0:
fe:d2:b1:5a:95:79:41:02:93:6c:a5:7f:92:68:f7:68:5d:87:
1c:59:1a:74:e2:69:ce:32:a2:b0:3a:45:71:59:56:34:bf:fe:
f0:81:25:79:55:aa:01:c4:e5:96:b6:63:0b:a7:96:18:eb:8b:
dc:b2:6f:2f:4d:f1:47:7a:d6:a9:f9:49:5a:89:86:0b:c1:9e:
0e:b9:04:ad:82:67:ae:35:8f:f7:3e:fe:61:a3:34:59:4d:7e:
86:d9:80:3f:93:b9:41:f6:88:b6:49:49:88:81:d2:52:fb:aa:
4d:dd:4f:35:a0:ad:63:89:83:9d:ef:51:dc:ef:7a:af:02:de:
03:d4:81:7e:fd:bf:c2:f1:5f:5c:01:c3:37:91:ac:6c:ab:46:
f4:81:e5:93:eb:f5:0a:8e:cd:da:ff:0c:1e:2d:4f:4c:9f:9c:
37:2b:bf:83:6c:ee:0f:c8:e2:fa:2b:14:31:90:11:0d:96:4d:
5f:43:24:09:ee:bc:e6:ee:67:38:b6:fe:01:14:a4:75:36:f8:
f6:06:44:00:ea:b2:50:fe:86:e9:7d:b6:ae:22:40:05:7b:1e:
f8:4e:7a:e3:c2:de:84:a4:75:76:ff:bb:b9:c7:d9:45:5b:7a:
98:0b:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:49 2026 by rpki-client