
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa
File: 3785b371-e802-3801-bd81-df056b6e23ae.roa (raw, json)
Hash identifier: Xgi2w+RYk08DCHWL3xqw3iSmZ+9QsYhHwrZQ66DoWjQ=
Subject key identifier: D1:71:1E:F9:2F:74:9E:07:96:C3:96:D3:C4:1B:F7:AA:6D:0C:1B:19
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A1E727F17BB79191C2540
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 12041
IP address blocks: 65.22.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:1e:72:7f:17:bb:79:19:1c:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=20239b44-4021-4c84-b0af-fcbf55d42ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:01:9d:a0:32:01:06:16:6c:fe:9f:0a:c0:
b8:66:56:52:63:64:16:ec:b8:a8:fa:e4:23:94:63:
2f:09:44:26:12:93:fe:67:86:0f:3b:ad:df:fe:c8:
01:df:e1:2b:e8:fc:d7:49:63:32:f8:8e:21:a8:49:
fa:3f:d5:ae:df:35:7a:1c:72:3e:d7:97:24:18:57:
5c:9c:23:6c:49:5a:35:de:13:fe:34:bf:ea:42:fe:
09:21:a6:d9:80:38:c6:cc:ce:4c:f6:19:a0:5e:34:
c7:9d:1f:31:bb:6f:2d:f2:e3:0f:af:f2:fd:2a:04:
d6:81:be:f8:e9:f1:61:5d:53:1b:22:8c:f3:c3:72:
0d:07:54:0d:08:6a:bd:c4:51:36:43:b6:73:b7:9d:
d9:dd:75:74:69:ae:44:92:fb:8a:2a:74:82:0e:db:
5a:94:16:78:ab:12:df:22:d8:5c:96:c2:b4:05:46:
48:e6:99:86:c9:f4:e1:be:72:cb:37:9d:c2:68:80:
1d:89:c6:4f:c6:8e:b9:02:0a:3e:13:e3:d4:93:ac:
6c:41:fd:b5:f0:51:bc:5c:9c:b6:f8:44:c8:fd:63:
05:a4:35:c1:7c:82:aa:0c:2b:8a:3c:f6:f0:21:a2:
8f:0f:e0:a0:44:26:5b:d9:ae:90:1e:1c:c7:e7:04:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:1E:F9:2F:74:9E:07:96:C3:96:D3:C4:1B:F7:AA:6D:0C:1B:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:8e:5b:ea:f6:a7:f8:30:76:30:60:be:bd:7b:48:fa:b2:03:
67:26:ce:f5:79:05:b1:fa:98:d9:37:20:63:20:eb:a7:92:81:
31:5a:41:38:f5:61:15:8c:0d:ff:45:53:95:f9:0f:81:c3:32:
7d:a7:6c:5a:5e:17:47:74:0d:9b:3a:f6:84:d0:59:5d:9d:6b:
64:56:32:ce:ba:68:62:db:7f:53:70:a7:0e:7c:e6:31:37:72:
73:8f:42:7c:01:e5:7f:9f:92:19:23:e2:5f:43:1a:3e:c2:1c:
82:08:27:1c:ab:e5:32:bc:8b:20:5e:50:23:52:14:36:2f:6f:
2e:21:eb:a8:0c:1d:0d:bf:63:bb:57:f5:23:fd:fe:dd:b7:a5:
37:aa:f7:af:a9:9d:ca:53:df:a1:2b:8f:68:4a:79:bd:82:1e:
31:2b:90:35:eb:1c:8a:4d:7f:75:d8:a0:36:a3:7f:ce:21:13:
7e:53:c9:4b:94:39:9e:e5:39:7f:4b:23:d0:5b:c5:d5:c2:ec:
3d:ad:dd:c9:f6:58:88:da:3e:2e:2c:ae:d8:8b:c6:39:7f:0b:
a1:10:ff:a4:e9:f0:f1:26:22:98:cd:1b:41:b0:1c:5a:31:72:
ea:9b:15:74:8f:a3:1c:48:83:dd:6d:64:18:68:dc:80:49:ee:
e7:be:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:52 2026 by rpki-client