
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/753af894-1bb4-36e3-92ad-15cbb18e73fe.roa
File: 753af894-1bb4-36e3-92ad-15cbb18e73fe.roa (raw, json)
Hash identifier: d7DVIUCmdF38NV24tuwhCm53lSdK9A1RiN/lHOncoh8=
Subject key identifier: 16:46:52:69:59:18:89:03:E0:3E:8E:6A:61:47:8D:35:4A:03:B3:8F
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584F498A39180516163EE4366F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/753af894-1bb4-36e3-92ad-15cbb18e73fe.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 207266
IP address blocks: 2001:500:a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:39:18:05:16:16:3e:e4:36:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5845a8e4-4d9c-4f2c-ac7d-631f369ea187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:a7:c8:0c:8a:09:53:05:e1:43:a8:95:fa:
45:d5:ef:19:39:1f:46:6f:90:63:31:0d:ec:d6:fd:
2b:95:2a:99:0e:88:c3:77:6e:84:0f:9f:c2:71:1f:
be:9e:97:35:33:84:a6:1a:b4:ec:62:02:13:ea:be:
39:c0:30:87:4b:57:55:98:fb:51:fd:21:80:05:23:
a8:af:6c:a8:cb:cc:ad:7a:4b:d9:1b:eb:42:95:da:
81:67:05:08:5c:4f:5d:7e:15:cd:15:ac:07:02:76:
05:8d:4b:7f:46:fc:1a:eb:01:4e:f5:c8:44:b0:bf:
2d:c7:f7:4c:ae:a0:7b:7d:85:5e:80:18:35:b7:ee:
86:48:36:28:9d:63:22:fa:37:c1:c3:22:55:95:de:
23:23:b8:40:7c:66:6a:5c:07:26:97:10:2b:c5:be:
9c:b6:93:ba:60:90:99:1b:81:5d:87:26:47:3d:19:
e7:d4:a0:9e:cd:38:fb:43:69:89:c9:c4:fb:ff:e6:
7b:aa:95:ac:10:10:0b:40:14:cd:66:96:0e:b1:7f:
b8:cb:df:52:db:4d:fb:8e:ea:72:bc:8a:f2:15:5d:
19:a1:64:1a:30:c2:5d:ca:16:f1:8f:29:01:e6:3d:
e8:4c:45:fb:ef:fa:c1:6f:fc:83:cf:4c:69:77:e4:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:52:69:59:18:89:03:E0:3E:8E:6A:61:47:8D:35:4A:03:B3:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/753af894-1bb4-36e3-92ad-15cbb18e73fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:a4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:85:cc:75:24:20:0e:c8:ae:1c:ff:23:c8:69:92:46:1f:aa:
f9:1b:dc:fc:23:0e:91:63:f6:01:1b:48:58:ea:05:d2:d5:6a:
20:3d:88:3c:04:46:e1:59:73:1e:d2:1b:6e:4f:df:9d:cc:c8:
06:11:9e:8a:79:6c:21:f1:b1:b7:5a:21:fe:84:89:1d:9c:bc:
f2:06:6d:a9:78:e2:e0:c7:97:f1:6d:41:b6:bf:3b:e4:8e:91:
82:2e:4b:11:d4:8f:e9:72:44:d1:cf:55:12:29:e8:a0:0f:06:
fe:4a:3b:07:12:fb:0a:ab:9b:68:ce:a0:57:7c:bd:0a:50:3d:
8f:72:fa:aa:ec:5d:ff:3a:83:3b:9e:e9:ef:4c:85:d4:64:a8:
5f:84:b2:86:2d:f7:2c:9f:60:ca:dc:89:67:26:2b:fe:f9:3c:
81:58:b5:a5:d0:96:28:e1:0c:ed:7b:a7:47:21:6c:c8:85:16:
d7:78:c8:dc:01:fe:6d:d4:77:40:cf:d9:5a:a9:c3:06:e7:93:
b2:db:a7:6d:d0:eb:4c:fd:6e:b6:19:f6:92:e4:63:a0:e6:63:
d8:e1:fe:84:c0:de:74:8a:f1:6b:0f:30:70:cf:c7:9e:8b:d2:
44:65:c1:21:79:05:22:96:59:b3:1c:ed:cd:6a:65:db:ce:61:
0d:97:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:44 2026 by rpki-client