
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa
File: 764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa (raw, json)
Hash identifier: /4xdGjJWr685zF38AdqJK4ShqFgBzB3STm6UzNRxAg4=
Subject key identifier: 38:A4:43:83:B9:40:04:61:DC:53:FF:D6:2D:AE:56:91:57:4D:1B:49
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A4D4340BCF8452EE438C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 12041
IP address blocks: 199.249.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:4d:43:40:bc:f8:45:2e:e4:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=f8035d92-9a52-4b59-8659-b27c6265de14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:81:db:12:8b:5b:12:ae:2e:52:69:3b:bf:
e5:29:f0:5a:54:2a:b3:cc:5d:c0:6a:20:9d:f2:8c:
3b:c7:cb:e6:da:c2:cf:14:b4:f6:af:87:f7:71:3d:
98:05:bc:c2:0e:62:3d:3a:21:d3:5f:e9:0d:ab:1d:
e8:57:fa:35:94:01:d5:b7:24:b2:89:4a:c1:32:de:
81:1b:4a:4d:da:fd:63:58:08:df:d0:33:cc:d0:52:
6a:30:12:2b:49:c8:d0:f4:28:8a:fa:5a:48:41:c6:
90:9b:48:ee:86:fe:55:3e:2e:10:eb:4a:39:47:0e:
6a:e2:2b:1b:71:ff:49:64:37:4c:bf:b0:25:82:c3:
44:6a:42:a1:44:96:1b:e3:26:09:36:97:4e:b5:78:
f1:a6:c6:cf:b9:b1:3a:6b:f3:63:01:a3:7c:cd:ee:
98:57:4f:55:75:60:d9:85:51:66:a7:eb:c5:d0:e8:
cb:97:1e:03:ee:08:55:39:47:6a:98:64:69:e4:87:
6e:ae:99:85:1b:44:cb:7f:91:45:3e:33:9c:6c:ac:
ce:9e:d5:9c:76:4e:1e:0b:76:63:55:55:db:34:24:
87:94:6d:6a:3e:6e:66:1a:d1:78:c1:7d:a9:88:a5:
1d:85:f9:84:46:6b:d9:6d:ef:69:e6:7a:12:71:15:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:43:83:B9:40:04:61:DC:53:FF:D6:2D:AE:56:91:57:4D:1B:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:50:e5:96:05:2b:de:c6:c7:38:29:5a:cf:48:97:14:14:cc:
c3:b5:79:59:50:0d:08:5d:60:67:81:d7:7d:17:70:f9:da:14:
ba:6f:aa:1a:f2:cc:8f:b0:0a:ef:81:8e:7c:75:0f:91:e6:bc:
ea:35:26:0a:e3:d7:1e:78:f8:66:21:2d:e6:3b:60:58:1e:27:
78:83:14:db:70:d5:a8:07:d3:a9:2f:5a:a9:ce:67:57:50:85:
bc:85:e5:1b:93:36:dc:a8:f4:e4:fc:eb:dd:3c:bb:a8:ed:13:
3d:46:31:40:46:94:81:c9:97:16:4f:de:35:a0:4a:17:3c:d7:
8e:43:bd:36:99:e8:4a:b2:9e:78:c5:ae:6b:b7:a9:7d:73:85:
8f:48:60:e0:51:d1:f5:2d:8f:66:85:2c:e8:7f:93:4b:c4:93:
25:a4:c3:e6:06:53:02:ca:42:24:57:38:34:cf:1e:d0:2f:97:
1b:7b:9a:4d:a4:4d:54:ce:f2:50:45:fa:27:d9:fc:d3:ae:f9:
f8:90:53:64:12:1e:0e:f5:9f:71:bb:34:e4:98:59:2b:b6:be:
54:16:59:cd:a1:ae:37:10:82:41:74:bf:33:af:6c:9c:d8:3c:
4f:00:9a:14:b4:37:ca:44:ae:92:57:e7:57:5a:e8:91:ab:91:
78:6a:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:56 2026 by rpki-client