
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11d4d8a1-5262-3ece-8765-bd5719959100.roa
File: 11d4d8a1-5262-3ece-8765-bd5719959100.roa (raw, json)
Hash identifier: k7XHWktYKdtEg81uODrbPN7B0EDgRhtqyq/APFSQK1M=
Subject key identifier: 0D:02:78:57:8F:E4:22:C9:E5:FA:35:01:30:36:0A:54:33:00:83:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1E2A88AE71C00DE1CFCC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11d4d8a1-5262-3ece-8765-bd5719959100.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 66.55.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:e2:a8:8a:e7:1c:00:de:1c:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=6d7a6ee3-6a80-45e2-aa3b-648805af1fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:8e:d4:02:8d:d2:dc:9b:cd:54:c2:89:15:
df:46:05:82:ef:0c:c9:24:7b:c0:39:af:47:3f:23:
06:06:ca:f4:78:92:e9:8f:6b:92:e7:a2:7f:26:19:
26:8c:af:b6:ef:4b:35:53:54:43:17:a0:cd:4f:6b:
09:37:0f:a9:20:56:f9:b7:83:18:78:e4:a2:52:a8:
7f:e0:42:05:54:6a:08:07:2f:9a:fc:ac:6b:73:1a:
dc:43:9d:95:e0:80:5b:19:5e:5f:15:7e:41:d4:9d:
e9:41:0a:b6:67:e9:7d:de:d7:b3:ba:79:8f:19:24:
57:3e:cd:7b:89:cd:b6:cc:bc:5c:81:b3:56:02:c2:
17:e1:57:1a:f6:25:ad:5c:53:05:85:59:00:79:0c:
e6:7a:e9:2b:c8:22:71:19:19:2d:fa:be:ac:77:c6:
0d:a6:1c:3e:f0:92:e2:d5:b0:57:4d:27:72:d1:9e:
7d:bb:16:e1:c0:b1:a9:e1:56:52:f4:82:69:a0:cf:
cd:a7:ad:e5:d6:a1:cf:50:ee:17:48:0f:56:0a:c1:
61:d9:5d:62:0f:9e:a7:3a:76:7d:e9:b1:75:fd:ee:
49:7d:30:32:38:84:f0:c0:90:13:9b:92:7e:53:55:
20:fb:69:3e:3f:ab:fc:e8:a9:87:c4:54:5d:5e:83:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:02:78:57:8F:E4:22:C9:E5:FA:35:01:30:36:0A:54:33:00:83:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11d4d8a1-5262-3ece-8765-bd5719959100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.55.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:4f:53:a2:5c:b4:50:b3:9d:5d:a2:55:2d:9c:9f:c1:f1:15:
d6:ec:7e:fd:ad:05:67:d4:4d:97:66:af:95:56:ba:69:10:ae:
e7:cd:a3:b0:2b:d2:81:92:93:81:02:51:76:0c:d4:cd:55:16:
69:e0:ef:c3:42:79:92:21:d3:ee:38:c3:21:aa:ef:3a:36:33:
66:50:4e:0e:f7:9f:43:91:24:04:2d:27:97:3f:08:cb:90:56:
99:f5:b4:e5:60:08:ab:37:1c:ef:5f:fc:fc:d6:ef:02:92:2a:
72:ad:4f:08:82:00:34:44:36:71:5c:8e:ee:1b:69:14:d6:71:
a8:88:58:fa:cd:7e:52:9a:38:4f:fa:43:a8:74:7c:11:67:28:
86:97:54:de:19:f1:12:99:b5:6d:1b:df:8c:4c:ce:6c:46:31:
80:e5:e6:fc:81:7f:39:b0:7d:ac:b0:0d:4d:8f:44:81:a6:52:
cc:78:6f:fb:9c:bc:7c:38:8f:5e:cf:fd:98:ea:a5:6c:14:cc:
85:8f:d5:53:98:3e:2d:38:fd:72:6d:2b:a7:ed:30:f3:32:f0:
b3:ee:52:af:82:25:5b:b0:18:b8:26:73:08:08:9e:0c:21:24:
6c:27:f0:cd:42:0e:63:3f:6e:78:ec:ef:e7:f3:20:fd:af:18:
4e:90:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:21:03 2026 by rpki-client