
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa
File: 34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa (raw, json)
Hash identifier: bPp64NEVaLxznXX8SiCzuzzr5n7Iqc5Su3YOPRPu/Y0=
Subject key identifier: 50:09:10:15:5D:38:67:36:F8:6C:DE:BA:4D:B6:7E:D4:6E:CA:4B:52
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584E2D9F420672941F4F59FB7E80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 393246
IP address blocks: 199.115.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:42:06:72:94:1f:4f:59:fb:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=d2043bf4-743b-48d2-8f61-2c511b091465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:5e:4a:77:fe:d7:52:89:c1:0e:cc:4b:12:
63:28:31:20:1e:83:f0:a4:49:30:80:65:0c:7e:bd:
d2:c2:8d:d1:4d:d6:67:1a:a4:94:dc:4b:7c:82:f7:
cf:d4:df:e7:9f:94:2a:c7:83:24:63:f7:00:6b:2e:
f9:c9:a7:3c:e4:b2:fe:96:e4:7d:ba:aa:69:df:90:
1a:01:fc:f6:8d:32:04:a7:b8:43:4c:17:e5:06:06:
f3:1a:15:f1:46:a5:13:d8:65:37:3d:61:98:6a:26:
16:7c:2e:b4:53:7c:80:11:2c:de:b2:25:12:36:63:
55:52:1d:5b:85:c3:6d:f9:a9:01:57:88:13:db:6d:
1d:0d:78:04:c0:ab:38:b2:7f:3c:78:8a:b0:ec:73:
b4:d7:29:dd:3e:e9:e5:41:ad:c8:60:8e:8d:48:58:
b6:b7:14:20:93:6f:e8:de:87:33:1a:98:75:42:63:
9c:9e:04:b0:e4:de:98:6c:23:9c:25:ee:51:b8:65:
ba:b7:25:52:ab:fa:df:24:fc:ed:72:6e:d5:ea:fe:
47:67:69:ed:cf:e0:85:8a:99:9a:df:1b:1a:78:d4:
2f:a8:d1:c3:2d:b8:01:62:f3:84:75:55:50:5a:dd:
81:bf:9c:85:c3:62:18:b3:c0:91:a1:ff:34:e0:8e:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:10:15:5D:38:67:36:F8:6C:DE:BA:4D:B6:7E:D4:6E:CA:4B:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.115.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1b:24:24:c2:38:4f:4b:ca:45:36:5b:83:ef:92:40:34:1f:
a0:92:1c:8f:51:ad:e4:d1:92:da:8b:69:5b:cd:54:73:5e:f3:
8b:e7:9e:7c:2a:27:8a:1e:02:de:2d:49:fa:0a:df:fb:15:a1:
5d:9e:a0:56:42:a8:35:7c:38:7b:29:f6:a8:43:d1:72:7f:d8:
80:07:cd:72:64:b7:db:c3:22:76:ad:77:36:26:2b:56:c7:5e:
5f:0b:e4:bb:c9:5b:87:26:19:42:3e:5f:ae:5b:43:8e:36:42:
2c:20:2e:3c:9c:4b:51:e2:2f:11:1b:95:2f:91:82:f5:49:1c:
be:2f:bd:fa:f4:4d:43:8a:96:5c:4e:a3:a3:fb:35:10:6a:43:
be:a6:21:66:cb:4d:f5:f4:0c:dd:21:d7:0c:89:33:b8:1b:a9:
d0:9f:fa:20:e3:80:20:6c:72:0b:6f:e0:04:d5:ac:d2:eb:b8:
3d:4a:eb:b1:c3:a4:66:30:72:9a:de:68:93:fe:e5:aa:71:82:
bd:62:35:ec:cf:96:05:7c:47:29:b5:52:91:da:70:a5:d7:da:
91:6a:c9:7f:a5:9b:48:58:26:61:3f:db:21:67:2b:2b:8e:40:
95:77:28:43:90:c0:30:e6:af:e0:25:05:c4:79:7f:5c:27:96:
70:29:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:17 2026 by rpki-client