
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa
File: 30218baa-fe66-3d19-aa8d-27ecd60001e3.roa (raw, json)
Hash identifier: tS6/vKnJgJiXr+iHLrX6oNcwOYg9eszayajhTdQVjhg=
Subject key identifier: 71:4E:85:55:BA:AF:41:CA:DD:13:60:CB:5F:4C:29:96:9A:92:F3:F8
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A65931F2D5317F70F1F80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 207266
IP address blocks: 65.22.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:65:93:1f:2d:53:17:f7:0f:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=12ada83b-e3d1-4f4a-aba2-142899d2e6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:79:e7:af:3c:20:c0:af:d1:f4:17:17:6d:
0d:00:1e:1b:35:19:23:9b:e2:1b:f8:11:69:bd:e7:
27:18:ce:3c:f7:f6:f2:d7:33:db:eb:84:93:ca:32:
77:32:65:3c:1f:c7:2e:bf:2a:8c:14:43:3b:1e:33:
e6:62:b8:bd:ba:48:d6:d5:7c:54:b8:e3:6a:a8:7a:
a1:57:9d:16:07:80:43:67:59:5d:5c:01:44:9c:c1:
d8:69:d4:dc:cb:c1:9d:78:42:77:a5:f2:10:d9:e2:
72:65:4b:70:44:e3:42:9d:05:e5:a6:55:65:6e:7a:
13:2e:45:c7:c5:52:bd:72:df:29:b5:be:05:ca:af:
d2:a8:f3:4f:17:f2:87:fb:b8:e6:a9:08:48:b6:8c:
cf:1a:97:83:b2:c6:a3:ad:28:b2:56:78:0b:7c:3f:
d6:99:f7:d3:2a:03:9e:93:a5:d3:24:4d:0e:8f:3f:
19:47:42:a9:f1:2d:a8:5d:98:f2:cb:20:57:f2:08:
70:7c:d3:18:67:6e:af:b7:75:2d:7a:21:62:e0:fe:
20:3b:0f:82:1b:21:d7:b8:da:56:7d:dd:63:28:08:
eb:66:68:37:93:51:d1:0a:ff:aa:44:3b:4e:8f:fa:
f1:03:03:8a:6a:63:b5:ac:0c:f7:3e:a7:6d:88:f1:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:85:55:BA:AF:41:CA:DD:13:60:CB:5F:4C:29:96:9A:92:F3:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:87:da:96:9b:9f:e1:59:d7:50:97:bf:14:7a:62:bf:ab:bf:
67:69:59:16:78:ba:2e:66:c6:87:b1:fc:dc:77:2c:f9:92:00:
c9:fc:fb:16:c0:db:93:6a:55:f2:0a:27:54:27:36:27:cd:a0:
40:a4:18:04:f8:f0:4b:18:4f:be:7b:d8:16:24:e8:11:5f:1b:
0d:0a:2f:0f:23:50:7d:ff:22:d2:dd:10:c1:76:0c:27:ef:18:
65:f6:2b:e8:6f:82:1a:c4:df:3b:c1:3a:b8:0e:50:e7:9d:bd:
9c:b7:3a:37:10:0d:9d:80:ee:ad:ab:02:85:2d:37:39:80:93:
f0:3a:31:2f:fb:18:01:55:57:91:b5:57:df:fe:ae:a1:08:25:
21:a4:28:f8:5e:2f:7c:2b:48:fe:1b:8e:ca:97:57:9c:4b:7a:
ca:dc:0e:df:9a:c0:18:c7:10:a2:4c:85:6d:61:0e:05:66:4c:
c3:a4:52:9d:3f:37:26:9f:78:6c:d7:4d:07:30:b1:e8:e4:7e:
86:f1:10:39:e4:f9:c9:0c:00:10:91:22:0a:7f:e6:0e:9e:96:
bf:a9:a7:2c:60:27:0a:a7:6f:25:41:9d:2d:18:e7:64:ce:68:
ce:16:52:5d:73:04:7d:9d:4c:0b:01:9a:db:87:ce:64:79:50:
d5:45:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:44 2026 by rpki-client