
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa
File: 9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa (raw, json)
Hash identifier: ouYvbB+hIjEXS1Tsog4koUq2p3mSodaP6KKiOaxhUEc=
Subject key identifier: FC:26:D6:33:19:00:11:BD:42:FC:CA:72:C9:14:EB:0A:97:58:7F:6E
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A5245E216890660AD8A00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 12041
IP address blocks: 161.232.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:52:45:e2:16:89:06:60:ad:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=387eeead-98cc-4b90-8f5e-f3fa9d54560e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:6d:f5:de:7a:85:88:1c:4b:bd:43:31:f3:
cf:00:c2:62:e9:63:be:e3:f1:7d:14:dc:3f:4c:77:
d1:5f:f9:41:34:f3:28:1d:f3:b5:b4:b3:76:e1:e3:
bf:1d:e2:1b:46:b4:78:ae:31:da:cf:d7:33:cd:f1:
a8:6e:97:58:94:20:fa:0d:db:95:86:93:bd:7a:ed:
2d:5a:6a:98:46:b0:01:ba:99:28:9f:93:e7:f9:63:
eb:39:c7:58:18:f8:27:7c:e7:b9:6c:e1:69:d4:5f:
49:0b:bd:eb:88:45:cf:35:3e:7c:34:f5:16:4c:e4:
1b:e2:a6:17:c5:69:9e:70:69:a6:6e:a6:fa:ae:01:
0d:f3:91:9f:55:b4:e6:dc:b8:6a:3e:d8:d9:0a:d0:
88:d5:9a:21:7b:26:f2:07:9e:ee:19:38:bf:17:fd:
08:d6:a2:e0:e4:b5:0d:45:0c:d3:c2:6f:d7:55:0b:
e3:e9:73:27:6e:93:c7:94:d8:62:c9:6b:af:17:86:
2b:f1:d3:6e:42:8c:82:45:63:9e:db:7f:5d:eb:59:
30:71:ce:90:6c:b3:3e:b4:c1:c8:89:c2:51:a3:4b:
1a:43:fc:2a:5e:0e:f7:bf:13:9e:49:76:cf:be:75:
e4:20:46:f0:bc:5c:4d:b7:88:92:d3:a7:d7:a3:1f:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:D6:33:19:00:11:BD:42:FC:CA:72:C9:14:EB:0A:97:58:7F:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.232.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:67:69:a0:51:64:5a:d4:6c:01:43:ee:7f:be:1c:38:62:eb:
b4:4d:6d:0b:f9:aa:19:70:36:f8:eb:2d:97:f9:af:6c:b8:a2:
0b:0a:fa:dc:42:f1:51:5b:c4:d3:36:d4:97:0b:25:af:03:16:
54:63:9e:ca:51:f3:5f:66:dd:3b:f7:ce:8b:4a:37:41:92:31:
1e:d3:16:20:e9:5f:eb:1a:a4:89:ea:91:54:fe:73:f9:9e:02:
20:37:10:ef:1d:a0:7f:76:b0:41:a1:6a:e5:5b:b9:e4:b8:40:
d8:14:f3:14:db:c4:22:57:0c:a6:ed:75:ad:b3:ed:a6:44:96:
29:3f:d5:31:ff:1a:ec:b6:10:29:fc:66:b2:a7:d1:3d:91:a5:
ff:72:7c:78:a6:1c:05:24:a4:c3:ce:82:b4:0e:eb:6e:c6:97:
7a:33:5f:51:df:c8:80:53:13:78:95:2f:53:8f:7d:03:af:1f:
29:b3:e4:6f:a6:de:cc:ed:e8:69:58:c4:10:a4:81:cb:6e:00:
ea:c7:3c:bb:a6:89:86:8f:21:e9:4b:f3:0a:69:81:89:23:f7:
a2:74:8f:24:21:a3:64:14:f5:1f:77:b0:80:58:9c:6d:d7:27:
56:04:97:3e:fa:ae:2f:25:e5:0b:1d:8e:15:5a:ba:8c:56:98:
80:d4:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:10 2026 by rpki-client