
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa
File: de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa (raw, json)
Hash identifier: b68n58KFJN+6S3BcQNnmTbooLfnuKwSg1/AFND/ziF8=
Subject key identifier: 48:21:29:E1:5E:3D:5C:A9:AD:45:43:59:20:60:C9:21:E9:63:AF:EE
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D2379F187705A21AA202859C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 12041
IP address blocks: 199.249.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:79:f1:87:70:5a:21:aa:20:28:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=041c19fb-682d-4648-a8f5-bf1f3daeb613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:89:e2:56:f3:4d:1b:24:20:47:62:a6:d5:
a6:8a:58:19:78:41:d3:0a:4e:d7:64:f2:a7:f8:f2:
56:f1:7f:23:71:aa:13:b8:f2:04:c0:b4:2d:88:fc:
9c:64:5f:a7:6b:b0:e5:2e:2c:eb:eb:ed:ac:2e:d8:
01:45:57:0d:0a:6e:6e:4d:90:05:4f:25:67:e5:a5:
5b:84:01:92:6a:45:76:01:87:b9:45:ab:7a:e3:bb:
a7:6b:83:9a:cb:c1:db:ac:d0:9c:12:21:54:d0:73:
9f:78:fe:76:46:fc:df:a1:08:52:c6:ef:85:e8:95:
f4:8f:e9:cc:24:72:16:03:d1:19:49:c4:8e:2b:5c:
a8:71:6d:64:62:31:46:7d:87:d9:b9:c8:01:88:79:
87:b3:25:e1:49:39:47:ac:d9:65:61:67:7c:05:16:
b2:cb:36:2f:58:97:f1:53:cc:ad:6d:0f:c2:61:ef:
53:da:f9:44:0d:38:8f:ad:5b:b2:03:b1:19:c6:b9:
c6:bf:a4:f9:fe:f4:ce:a2:0e:4a:4a:e3:3b:6e:13:
7e:fe:49:d1:98:0b:97:63:07:97:04:59:48:ea:20:
a4:a7:22:93:48:11:5c:48:c8:cb:c3:38:ce:ff:b6:
75:11:1a:9d:a5:80:95:08:5c:14:91:72:92:53:43:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:29:E1:5E:3D:5C:A9:AD:45:43:59:20:60:C9:21:E9:63:AF:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:81:13:d8:63:24:39:fe:2c:ac:dc:50:e6:11:ca:7c:89:30:
b9:a8:24:89:7e:7d:ee:1f:09:9a:a1:2a:70:29:f4:ab:44:28:
94:39:3a:98:2b:e9:4d:1f:c1:03:93:64:d8:38:a5:1d:06:eb:
3c:b7:1f:81:a7:14:a8:2a:4e:12:76:f8:0c:46:4a:ae:64:2c:
1b:78:9e:79:3f:f1:a1:57:8f:fb:05:f1:50:69:b2:d9:b9:b6:
49:68:22:09:10:ca:db:12:58:f5:90:0b:17:0c:a7:a1:11:51:
ad:ee:4d:fb:67:90:d1:55:33:7d:45:4d:7b:1b:ea:8b:09:81:
9f:86:ef:47:9d:9b:99:85:27:40:53:14:7c:81:4d:44:e6:54:
d8:59:dd:42:01:c2:7f:a6:18:0e:69:9c:44:46:0a:46:c4:ae:
67:6c:f4:1d:69:c7:ac:41:b6:57:96:75:44:f4:ac:c2:3b:69:
6f:6b:1b:2c:c8:b6:29:d1:76:d9:18:2f:62:8b:f2:42:ba:e0:
91:07:22:9b:82:74:b2:65:97:58:a6:e1:cf:15:77:97:fb:5b:
f5:69:c3:bd:e9:e3:0c:9a:16:5d:98:07:c2:11:31:52:20:a1:
ae:36:92:7f:93:b1:db:ab:2e:d8:bc:8f:55:e6:89:4d:bf:6f:
1b:d2:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:08 2026 by rpki-client