
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faf3492f-7476-3a62-8ecd-c62a28c05672.roa
File: faf3492f-7476-3a62-8ecd-c62a28c05672.roa (raw, json)
Hash identifier: lsMtO4stnertEfbJbO+BJv1Fy/iaZTG17SBVtZOdU/I=
Subject key identifier: E2:88:4D:6A:D7:60:9B:27:53:25:88:2C:09:EA:D5:2A:A6:69:04:EA
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A411F636FE25D2BCFAD00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faf3492f-7476-3a62-8ecd-c62a28c05672.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 12041
IP address blocks: 65.22.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:41:1f:63:6f:e2:5d:2b:cf:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=46d8d09f-3600-4068-9b0c-af24eb1c4167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:b1:52:17:1e:9a:4a:c5:36:ea:c4:82:ac:
f5:cb:42:62:5d:2f:63:06:ea:31:f3:2c:76:13:ac:
e4:fb:cb:f9:38:20:c6:54:5c:69:2b:8a:a1:2e:fa:
9f:54:1b:7c:1a:47:0f:cf:44:44:48:4e:21:a0:b5:
87:d7:c5:fb:43:cd:ba:e9:52:c3:b4:45:11:e9:87:
9d:45:b8:ab:9e:aa:f1:b2:35:04:4a:42:24:81:0f:
01:71:65:dd:53:20:c9:ec:f3:7e:1f:f3:2e:d5:f4:
87:4d:43:24:49:ef:e0:d2:5e:e9:f5:dc:3b:5b:20:
9c:ed:77:a0:14:eb:d4:96:d0:99:7b:d1:86:c1:35:
74:94:05:ff:de:af:39:81:4b:86:2c:fc:c4:24:43:
fa:71:a0:a4:8b:cd:ae:fe:ac:9a:cc:9e:75:1d:f1:
be:99:e9:0f:f9:71:1e:5f:d6:23:26:c8:0a:75:1c:
b8:3d:db:9e:11:ce:e8:44:37:3e:ef:1a:b5:18:32:
43:a9:1b:9f:36:82:a7:86:dd:2b:07:b1:dc:1d:83:
a2:e9:4a:52:20:0a:42:d0:b9:89:43:a6:00:c3:61:
c0:b4:f3:8d:52:33:d5:63:f3:67:33:c4:74:43:80:
f0:30:7e:cd:ba:ed:f3:3f:93:c2:03:6f:da:78:4b:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:4D:6A:D7:60:9B:27:53:25:88:2C:09:EA:D5:2A:A6:69:04:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faf3492f-7476-3a62-8ecd-c62a28c05672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:54:93:4c:92:6c:ff:6c:d9:f9:21:37:8c:3e:c6:4d:67:cc:
82:e6:7b:59:01:60:c6:31:33:44:43:6d:10:d1:e4:d9:3d:0a:
90:45:b5:a8:b0:90:b4:4a:99:6c:6f:50:c0:33:e4:93:dd:36:
50:fe:81:ee:da:57:53:1c:28:55:84:5c:f3:d7:e0:41:48:e0:
3d:23:94:60:d8:0e:3a:00:1a:50:69:53:0f:e0:29:df:a8:8f:
08:93:ab:2e:e9:da:c9:67:db:8b:bf:7b:da:5a:db:9b:79:13:
6c:c0:ea:53:fe:b1:50:99:5e:49:84:3c:26:6a:e8:80:4a:6e:
a4:5c:92:ea:24:c6:70:0e:86:60:e1:9c:c3:ec:9d:4b:48:de:
83:7d:70:a2:55:a4:5c:d1:6d:20:ce:98:21:11:76:fa:21:aa:
db:a3:f5:b4:7e:ad:9a:b7:61:af:97:18:78:39:67:81:46:77:
1b:74:d2:6a:5b:15:58:f7:e7:b4:e7:25:a2:cb:0c:01:00:c5:
9e:1e:ed:03:79:0c:8b:ad:9a:45:7f:a0:9d:5f:11:9e:8a:b0:
fb:be:c1:e5:16:f9:c7:0e:69:15:8d:16:87:ad:5e:41:85:4e:
5f:b6:9f:1e:c7:cc:69:ce:d2:f8:2b:4b:2f:ba:54:c3:a8:30:
58:d5:83:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:15 2026 by rpki-client