
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa
File: fb908917-c491-34f1-b319-3e29a99f6486.roa (raw, json)
Hash identifier: zEgQUaPGCjRyMVOL4epH6xZtzIXUX1nd1YZYP43FlyM=
Subject key identifier: 1F:27:F2:E9:7E:0D:FF:2C:D8:BA:0C:3A:F1:29:DE:2C:C8:9D:F9:2D
Certificate issuer: /CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2
Certificate serial: 010D0C9F4328584F5B97FEE136F30988230FF5C0
Authority key identifier: 5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa
Signing time: Thu 01 Oct 2026 13:00:12 +0000
ROA not before: Thu 01 Oct 2026 13:00:12 +0000
ROA not after: Wed 30 Dec 2026 14:00:12 +0000
asID: 33553
IP address blocks: 199.191.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:97:fe:e1:36:f3:09:88:23:0f:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2
Validity
Not Before: Oct 1 13:00:12 2026 GMT
Not After : Dec 30 14:00:12 2026 GMT
Subject: CN=d1e13fe5-748c-402f-856d-9708c1412cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:f7:52:ef:53:c3:bd:2f:dd:93:6c:4a:94:
1a:b7:bd:88:f5:5a:5e:b5:dd:b5:ad:79:cd:3b:30:
3b:89:0d:5f:9a:13:9a:fe:a4:87:1c:de:62:b2:c3:
86:06:01:16:69:45:86:93:3e:ec:fe:5a:6e:8b:9c:
36:1e:4a:fc:10:87:67:86:f1:e7:05:8a:04:2b:cf:
2d:86:d9:95:15:30:b5:92:a7:6d:4d:08:cd:f5:62:
cd:e6:57:4f:47:e0:88:a0:3b:a9:41:70:5a:c9:1a:
c7:de:01:15:f5:c7:82:9c:fa:f4:0d:d1:9a:94:ed:
aa:00:e2:4e:84:33:35:05:a5:93:1f:cb:f5:d6:94:
a9:12:07:ae:31:98:73:89:ed:52:b3:0c:20:8c:78:
7b:30:f7:8c:a1:36:4b:e8:1c:9e:4d:87:04:4f:72:
8a:c3:a3:ff:45:34:b9:85:bb:9b:b1:93:00:65:0d:
13:f6:17:66:65:d3:b1:fa:34:fa:92:32:65:3f:73:
56:e8:bb:a6:cd:16:a6:1b:d2:f1:e0:52:20:b5:7a:
83:5d:a8:a5:d8:ad:f8:62:6b:69:ad:27:ba:8d:28:
be:1c:94:bf:dd:8c:86:3b:8d:0b:d5:f0:06:e0:89:
33:45:f3:11:2b:c2:b0:77:62:42:87:a5:01:4b:63:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:F2:E9:7E:0D:FF:2C:D8:BA:0C:3A:F1:29:DE:2C:C8:9D:F9:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl
X509v3 Authority Key Identifier:
keyid:5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.191.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:8d:5d:fd:5f:4b:cc:39:c3:e3:29:ff:32:a7:14:3e:b2:08:
8a:85:e6:84:5a:98:21:26:10:54:a4:d3:ae:23:01:66:5b:74:
0f:52:00:72:f1:37:f6:cf:18:59:90:3f:eb:bc:34:58:47:60:
3b:87:43:d3:b3:6f:71:a7:b1:5f:39:60:87:cb:2f:be:63:93:
61:be:a3:90:20:66:1a:aa:dd:29:23:57:8c:5b:f4:f5:d6:60:
9a:fe:f9:3f:7c:df:77:b0:b1:13:60:b8:53:66:5f:48:bb:8b:
12:62:3f:a9:51:0e:b0:3a:60:6d:47:50:cf:28:c5:da:4e:72:
d3:62:0a:0c:46:a0:8c:1b:65:4a:02:c9:cd:f2:b9:4e:4d:2b:
60:d0:f9:50:b2:34:9e:3d:53:fe:53:0f:7e:9d:1b:86:9a:c1:
98:a0:60:a0:a7:98:e7:07:5c:6e:b9:90:6e:d2:51:d3:b2:f3:
55:72:a7:03:d3:2f:23:fc:21:b4:de:d2:4b:0f:49:eb:de:fc:
6b:11:5a:d6:f8:bd:fe:55:45:f3:52:b2:17:73:71:b4:a5:5f:
bb:a3:ff:ee:2f:23:61:da:a9:45:d8:f2:38:cb:30:c7:7a:fe:
82:10:da:63:ad:f1:67:39:9c:fc:2d:08:ae:d2:fb:fb:4b:2d:
f9:f9:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:36:18 2026 by rpki-client