
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/559776fe-5bbf-3462-a46f-db16636a2b0a.roa
File: 559776fe-5bbf-3462-a46f-db16636a2b0a.roa (raw, json)
Hash identifier: z3FgDvGVEWcYatcglJm97S46OKSxzuMQ33olEsHZulE=
Subject key identifier: 60:5A:C3:A0:E3:8E:4F:FC:D5:79:6A:37:5D:94:87:6B:45:DC:BB:F6
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A45E183DFF1ADB5094F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/559776fe-5bbf-3462-a46f-db16636a2b0a.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 12041
IP address blocks: 199.19.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:45:e1:83:df:f1:ad:b5:09:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=0bb4dede-21c9-4a83-b08d-789e7431e927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:8f:da:e0:13:fa:14:87:55:54:7b:99:63:
79:6b:ac:e3:cc:1f:b4:76:d3:8c:f8:32:96:0a:b9:
9c:f6:7f:fd:de:08:27:a7:35:ff:f7:91:e5:d8:1b:
b8:10:2e:7f:1f:6f:d5:98:26:4c:09:41:4c:d6:5a:
33:fd:b9:c6:70:ae:d8:6c:ba:a0:ca:81:4f:6b:58:
f7:9c:87:80:15:cc:c3:09:12:13:63:bc:24:44:19:
ec:c4:19:ea:aa:f9:74:32:4f:8a:87:c2:fb:32:93:
28:0d:06:61:15:13:3c:33:3e:d0:2d:6e:7c:ff:4d:
52:7e:41:16:6d:9c:66:23:57:3b:f4:81:a4:c5:02:
59:1d:8f:f7:5a:d1:29:1a:19:58:45:9d:23:1e:cf:
5a:a3:48:87:4b:58:d6:2b:fb:0d:da:cc:a1:1d:e8:
ea:61:04:01:3d:c6:62:80:da:67:49:d0:77:94:c9:
39:71:69:4d:0e:ff:b5:be:81:2a:14:89:d5:13:86:
40:28:91:1e:74:17:8c:d0:2f:53:a6:28:82:59:ca:
a5:f9:31:e2:d1:05:6e:db:39:1c:b6:47:ff:b7:49:
62:c5:43:4e:06:9e:a7:74:f6:42:9a:06:9a:8e:bc:
6c:9d:5c:aa:48:53:24:24:a4:ae:75:98:d3:bb:d7:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:C3:A0:E3:8E:4F:FC:D5:79:6A:37:5D:94:87:6B:45:DC:BB:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/559776fe-5bbf-3462-a46f-db16636a2b0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.19.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:3d:bf:9c:46:8e:e9:10:a2:25:4c:1f:f9:bc:30:44:db:89:
c6:a3:0e:7f:1b:d8:c3:58:35:17:70:37:04:6b:3a:af:45:3a:
43:1a:81:74:7e:ee:5f:ad:0b:e3:e7:2b:1a:8f:26:ff:a2:b1:
4f:d3:72:87:9e:06:42:61:b4:f4:1f:d9:95:e9:ff:de:a7:7f:
f7:96:e5:7c:b2:0c:6c:ea:85:db:e1:1f:ca:91:7f:22:d4:32:
aa:5d:72:2a:32:0e:f4:07:7b:18:bc:7b:91:19:ad:ed:f5:85:
b6:50:ec:84:ab:68:bb:9b:2b:5d:d0:df:55:fd:54:fd:d1:cc:
e4:77:cd:2a:2b:61:13:71:5e:87:f3:23:87:4f:02:c3:91:94:
43:2f:ca:bc:57:68:8f:c9:34:f1:f3:6d:34:17:04:c7:8d:e5:
4d:4e:bd:cd:7c:b8:3a:d6:15:d4:11:09:c8:dc:73:29:6f:bb:
35:38:51:f2:29:32:3d:92:b8:6b:a4:1b:18:54:7b:ae:af:c3:
5b:f0:57:86:bd:48:4c:50:98:13:5a:72:14:94:24:62:a5:c3:
4d:17:90:0f:e1:de:ed:2c:2d:8e:74:a7:01:2f:b9:a4:7d:fd:
f4:2f:26:1e:5d:0e:e2:1d:70:87:c3:1c:ba:42:d5:a0:d4:47:
f8:2c:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:36 2026 by rpki-client