
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa
File: 3b03f92f-103e-3d7e-abfa-c7431f00a281.roa (raw, json)
Hash identifier: FxcR2PbxCnSBdIYPw1FL0lSbLBzRiklx3uFGt1sHNNo=
Subject key identifier: 64:33:93:99:68:00:A4:B3:0E:98:20:E8:C2:7D:CC:26:83:6A:BA:26
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584E04362D869912C5B272E02480
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 12041
IP address blocks: 199.249.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:36:2d:86:99:12:c5:b2:72:e0:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=0e0a59ee-02d0-4a0b-87d2-7e53828e932c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:b2:01:b6:75:aa:3c:2e:db:c0:09:28:73:
cc:52:4c:92:fe:de:8d:d4:e2:bb:12:e9:13:6d:7b:
43:1f:ac:dd:db:1b:05:b7:76:b3:c5:39:82:fe:8a:
0b:5a:00:43:a7:69:f7:98:53:78:4a:75:5e:3b:05:
07:d9:5c:af:fe:60:5b:69:2e:1e:e5:a0:37:e3:85:
1b:97:b9:e4:bb:1d:77:16:15:e0:c8:25:57:2e:e1:
14:94:a0:23:b7:30:75:0d:b6:91:c9:5c:95:82:78:
f6:95:d3:96:02:e5:9b:ee:b8:46:3f:41:73:dc:30:
6c:f4:9b:e5:c4:13:ee:67:07:90:fa:fa:77:42:ca:
85:23:a5:20:f4:63:2d:69:90:e7:60:86:72:c6:fb:
c9:f8:70:db:1b:f4:8b:70:a3:c8:0c:92:52:5a:8e:
71:82:16:c7:fb:06:7b:0f:6e:76:aa:f4:bd:50:15:
2d:f0:04:88:a0:1c:8e:4d:5c:b0:c7:4b:5a:35:9a:
d9:61:d8:49:3e:f1:cd:b6:82:02:8a:e5:be:94:64:
68:de:a6:84:68:0c:fe:d9:4a:03:5f:b4:b4:bc:25:
cd:1a:c1:3f:bc:95:c0:e3:0a:17:31:33:c7:2c:a5:
e6:25:2a:58:0f:85:29:3f:47:aa:ea:00:d3:43:f8:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:93:99:68:00:A4:B3:0E:98:20:E8:C2:7D:CC:26:83:6A:BA:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:fb:98:19:c8:57:f5:5a:b2:0e:d5:e6:a6:9f:9b:4f:c4:2e:
1a:e5:e8:2a:a3:a9:92:28:23:e7:20:8a:08:5f:01:40:6a:45:
f5:3e:85:a6:70:56:f0:c3:a2:58:a3:f7:90:63:2f:31:df:66:
28:f0:ef:bf:b4:00:7d:ce:4a:22:30:91:71:fe:dc:9c:d4:37:
20:8f:87:cf:ea:d7:67:56:90:46:bc:5b:45:d9:32:3c:1a:cc:
88:35:bf:a5:11:49:f6:0d:93:e0:f6:17:98:f0:5c:64:c8:86:
04:15:f3:75:32:a9:cf:ff:20:21:e1:4d:c9:18:bc:f8:11:f3:
63:09:29:37:f5:bd:5c:3f:e4:52:27:d1:b3:4d:f6:76:62:1e:
0e:07:b1:3f:39:5d:32:ba:c8:6c:9d:2a:08:45:0a:b7:c4:75:
42:71:2e:2f:1c:56:5f:7d:60:91:9d:35:08:38:ad:b3:03:e6:
12:f3:6c:58:5a:b4:2e:48:90:23:e8:d9:95:94:ce:43:ea:14:
44:a9:c9:82:86:1b:6f:e1:e5:81:ad:1c:69:39:7b:b0:99:2b:
f4:10:fc:d0:ca:d7:4d:c8:a6:21:8b:0c:68:bb:4c:1d:68:ce:
20:b2:dd:40:bd:7a:00:66:5d:c6:11:48:ae:bd:00:7e:ed:f4:
f4:d7:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:20:29 2026 by rpki-client