
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8ed688b8-d750-3991-a595-62e70af0be65.roa
File: 8ed688b8-d750-3991-a595-62e70af0be65.roa (raw, json)
Hash identifier: an4JE2oqYkmC21HfE5sJDmozXbYZdtDlQF/kH9H69E4=
Subject key identifier: 64:00:C5:0F:D1:9A:DA:04:B3:33:95:F5:0E:2D:70:28:6A:E9:B3:4B
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584E0436001C1F236ED351C92680
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8ed688b8-d750-3991-a595-62e70af0be65.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 12041
IP address blocks: 65.22.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:36:00:1c:1f:23:6e:d3:51:c9:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=45a589cf-ceae-44e0-b441-5379afc42138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:83:e3:10:42:ff:6f:fd:84:76:d0:39:2d:
df:d2:ad:f6:77:39:2b:42:9c:b5:51:b7:a7:98:36:
69:15:56:d0:3b:e9:04:f4:e4:ae:ec:f4:e4:1f:04:
88:8b:80:30:3d:ab:40:4c:71:05:5b:f5:81:95:e3:
a8:05:0d:9a:48:ad:15:b0:8c:fd:e0:1d:b7:31:6f:
03:bc:3b:8b:40:87:f9:b4:db:0b:72:f0:5e:24:f8:
7e:02:75:d1:ca:43:28:d2:c1:bf:ce:0f:7e:7d:f1:
b6:75:25:ed:e3:e2:19:98:e6:d8:29:00:f0:7f:3f:
1e:18:2b:90:fe:5a:12:0c:26:05:91:26:ff:32:7a:
c8:ac:f9:bd:b1:79:de:fc:59:cd:0f:13:d8:1f:8d:
07:f2:03:8a:fc:68:89:fc:6d:ef:a8:f5:50:31:7b:
38:fb:b1:15:ee:b1:55:cf:c4:5d:f9:c8:1f:b6:b9:
d6:19:3b:32:ea:74:12:02:0e:c6:39:54:c8:08:c5:
db:2a:2e:58:ed:f0:53:fa:52:e3:b2:53:00:76:ae:
c0:04:2c:d0:8d:c5:1b:42:4e:8e:c3:fb:03:b3:d6:
94:4e:f5:3c:8d:95:8d:b1:08:13:f1:45:e1:02:0f:
4c:ac:a9:78:0d:28:38:44:49:b0:14:ca:71:3c:b4:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:C5:0F:D1:9A:DA:04:B3:33:95:F5:0E:2D:70:28:6A:E9:B3:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8ed688b8-d750-3991-a595-62e70af0be65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:a3:60:da:b5:00:4c:f5:b4:05:ad:0a:71:69:1a:a6:e1:4d:
86:0a:e3:51:22:f6:11:db:4d:80:58:32:82:d8:d5:13:f0:26:
0e:72:06:fe:d3:56:bd:8f:61:35:ba:2a:63:ce:2f:ec:7c:64:
de:06:b0:ac:ed:53:a4:04:ec:9a:7d:37:87:2c:e7:67:c8:fc:
bf:c1:1e:be:3c:47:7d:58:11:6d:70:19:fd:c2:9d:2b:1e:fc:
18:1b:ab:56:3b:bd:34:21:10:cc:6b:c8:a9:95:21:c2:36:0b:
c1:3a:e5:25:bd:c0:46:bf:e0:fa:ed:22:14:7b:7e:65:5d:59:
49:01:00:74:12:37:e3:72:13:63:8f:bb:55:3c:93:c7:48:5c:
6b:de:7d:92:fb:bc:f8:59:bd:90:46:56:5f:67:cc:f4:95:ea:
06:53:36:a2:2b:bb:a4:c2:d9:ee:d9:32:81:7b:27:20:8a:78:
4d:1f:fc:f6:ce:9a:77:69:84:61:15:4a:52:7b:6e:ee:11:11:
c2:0c:07:ee:c2:51:6a:0b:f6:7a:8f:39:5c:23:32:f5:3a:bd:
a7:fe:a8:8a:b7:ac:76:ed:58:79:ff:79:77:5b:c3:50:6e:38:
33:ef:cf:04:38:07:f8:07:43:fd:dc:6d:36:11:4a:d0:d7:02:
b4:ad:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:44 2026 by rpki-client