
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa
File: a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa (raw, json)
Hash identifier: UkfYjsB6T8gmKqH0BMMzmLskIqpmLB5wOJLr4Dc9JjQ=
Subject key identifier: 4E:67:10:AC:FB:5F:F0:04:75:C0:97:EC:22:71:20:40:B8:E4:28:C4
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584F4974A08308284D000A10BCC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 12041
IP address blocks: 65.22.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:a0:83:08:28:4d:00:0a:10:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5b21a2d8-65b1-4fc5-8b67-13963084e3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:77:56:3c:c8:44:3d:d3:72:d5:b8:d6:e4:
15:c0:45:36:65:75:72:8f:b9:ef:62:66:d7:f1:64:
3d:ed:48:65:e5:29:43:7d:c7:0b:2c:10:b9:2c:8b:
29:35:15:2c:21:ed:19:f3:50:1c:b2:13:bb:7a:9c:
bf:40:37:bb:66:87:9c:87:ae:54:c2:1b:f9:ec:cf:
89:b5:f5:3d:37:d8:fe:df:27:f7:65:c6:d0:e4:49:
a9:50:d9:eb:ed:43:cf:8d:15:9b:5a:08:9b:91:63:
26:9b:e5:6e:64:37:cc:81:bf:c1:07:68:e5:6d:a5:
9f:ca:df:5f:dd:54:b7:f3:bc:23:42:d5:82:66:88:
9a:f6:5d:45:f7:1a:5d:ab:2b:5b:34:c1:ab:60:67:
df:4a:93:e9:c6:55:11:fc:27:9f:c4:17:c4:9d:c3:
4f:90:b7:b4:b8:e5:06:a6:48:c3:b8:df:ea:c9:b0:
df:1d:9b:dc:20:c8:35:ae:6c:12:9f:1f:19:de:0e:
6b:c0:39:0f:8c:18:cd:e1:48:aa:26:7b:e2:8c:ef:
90:4f:5b:d3:10:89:f8:f1:83:c2:c8:8d:9a:a7:30:
b4:0c:6e:2d:62:cb:58:30:2b:ea:62:cb:92:07:59:
a1:cb:fc:48:21:d2:4a:90:de:7d:11:2a:48:5e:04:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:10:AC:FB:5F:F0:04:75:C0:97:EC:22:71:20:40:B8:E4:28:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:0e:c9:52:38:db:40:8d:dd:ae:e2:4e:83:cd:2f:1f:fe:9a:
75:49:31:eb:ec:51:e4:1c:05:f7:37:1e:33:1a:02:24:ee:2e:
cb:75:07:22:7b:0f:38:66:18:af:27:ca:d0:e6:69:70:84:ad:
44:03:f0:59:c6:97:42:c2:53:5b:3c:d9:1e:df:1f:3a:59:36:
ed:b9:46:6c:41:7d:2a:cf:a2:5a:6f:73:3d:b4:25:a6:b7:40:
46:54:7a:c0:95:7c:e0:b1:63:19:a2:2d:52:ae:84:17:98:19:
35:be:58:46:20:d4:14:22:4f:a4:82:db:d2:7d:a3:6f:bb:8c:
23:77:c1:d1:d2:c4:3d:f2:80:7f:36:fb:ff:91:6b:f2:8b:c8:
03:67:ed:5d:91:f4:e3:1d:26:7a:86:a0:fd:02:d1:e8:a9:64:
05:ff:df:32:f6:e7:c2:7c:23:21:78:16:39:6f:92:82:f9:5c:
e9:00:b4:d5:e7:f8:6c:92:27:62:28:af:e9:1a:4f:94:68:ec:
3c:3b:6e:e1:b1:ff:6c:d9:91:12:3b:90:fd:31:18:9f:54:3c:
c5:e1:43:60:83:0a:46:7e:0b:f1:9a:9b:61:48:ff:a1:01:1e:
bf:4a:e7:69:08:a9:88:70:e2:1d:7b:e3:1a:66:f8:a7:7e:0e:
03:c8:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:28:03 2026 by rpki-client