
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa
File: 13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa (raw, json)
Hash identifier: midcRsNM+BEr3YxB0om1UZz0G2I3Fca9X40W0tNoJaY=
Subject key identifier: 0E:C1:31:F3:3D:B5:B4:6D:79:CC:07:AD:A1:5E:36:5F:A2:05:0B:56
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E35FFB55E52DB8865DA5DCF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 7029
IP address blocks: 40.132.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:35:ff:b5:5e:52:db:88:65:da:5d:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=0a69fffc-356a-457c-8187-58e8762015c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:f3:50:a4:10:20:f4:d8:a3:77:5f:0b:f6:
47:f7:dc:3d:2b:a6:89:31:71:2b:ec:3a:30:d4:09:
47:63:fd:cf:0a:cf:eb:16:20:85:3c:fe:23:ef:60:
b1:91:2e:20:ef:b1:69:c2:1b:5f:1f:06:76:68:60:
6e:08:e0:11:33:d1:fa:d5:52:41:82:c6:e0:72:67:
c2:e1:8a:04:62:3f:b9:d6:02:15:be:22:e5:80:f3:
5a:4b:1c:bc:b1:e0:94:80:b3:a2:0e:34:cc:3f:ef:
92:ac:d1:89:dd:f5:9c:78:61:28:86:89:c6:95:cf:
fb:d3:aa:aa:c0:2e:00:2d:8c:e1:0d:6a:dd:86:f9:
c0:6e:4a:1b:de:a0:ea:a5:7c:97:a0:a7:05:c7:ac:
19:09:0b:72:10:8c:ee:eb:64:f4:98:ea:da:84:34:
8b:7b:2d:bc:19:17:6a:52:42:af:73:1b:9a:03:a6:
57:2e:8d:a7:56:4e:11:04:40:db:7e:8d:86:6d:30:
1c:bf:db:8c:32:c5:d9:e8:d2:ff:5b:26:b2:2c:6f:
43:80:4d:81:58:ef:e0:c5:16:1e:f9:e4:28:a5:ca:
5c:68:d6:e8:ff:b8:ae:29:1c:ae:32:94:0c:ea:05:
65:2b:3e:1c:32:5d:75:5b:7d:f6:d4:77:c5:3f:9e:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:31:F3:3D:B5:B4:6D:79:CC:07:AD:A1:5E:36:5F:A2:05:0B:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.132.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:d4:26:92:2b:bf:1c:b1:f8:73:74:c1:12:5e:75:38:55:40:
a0:d1:8b:f2:e4:24:96:17:30:78:81:23:29:88:b8:b6:ca:50:
50:13:28:a9:aa:6e:ca:01:c1:34:2a:2a:32:e8:d5:eb:16:fb:
fb:16:c9:94:04:cf:45:6a:24:16:0c:07:19:f4:f9:54:c9:11:
8f:50:46:50:36:01:2e:33:91:01:96:3b:48:58:d6:ad:1f:3c:
c6:88:b0:c9:1e:c0:0e:11:68:c6:c3:7a:fe:3f:2d:bc:67:65:
33:c5:65:0d:be:b5:8b:96:d2:32:02:22:95:cf:a7:58:18:12:
8e:30:e2:53:e5:eb:7c:6c:b5:d9:1e:63:60:89:78:9d:83:51:
64:49:91:53:b2:97:19:68:1a:d5:20:9d:c0:2a:4a:da:d7:f3:
41:4f:76:cf:ce:e5:c2:6e:b2:33:73:43:40:59:dc:d6:57:95:
f6:29:92:14:37:22:b9:07:fd:36:98:c6:fc:67:ea:de:a5:5e:
1e:cb:cb:79:f5:3f:2c:5b:52:27:0b:ad:f0:95:c6:f4:95:d7:
9b:58:85:10:da:4a:19:51:46:e6:6c:0d:28:54:5a:94:68:5c:
b6:cd:6f:03:fa:84:65:ff:d4:d0:97:08:0e:f3:3e:cb:7c:8a:
0f:8e:e5:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/7VeUtuIZdpdzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
MGE2OWZmZmMtMzU2YS00NTdjLTgxODctNThlODc2MjAxNWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwHzUKQQIPTYo3dfC/ZH99w9K6aJMXEr7Dow
1AlHY/3PCs/rFiCFPP4j72CxkS4g77FpwhtfHwZ2aGBuCOARM9H61VJBgsbgcmfC
4YoEYj+51gIVviLlgPNaSxy8seCUgLOiDjTMP++SrNGJ3fWceGEohonGlc/706qq
wC4ALYzhDWrdhvnAbkob3qDqpXyXoKcFx6wZCQtyEIzu62T0mOrahDSLey28GRdq
UkKvcxuaA6ZXLo2nVk4RBEDbfo2GbTAcv9uMMsXZ6NL/WyayLG9DgE2BWO/gxRYe
+eQopcpcaNbo/7iuKRyuMpQM6gVlKz4cMl11W3321HfFP57qFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7BMfM9tbRtecwHraFeNl+iBQtWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNhNDc0MGItNjY3NC0z
ZGFlLThjMTktY2RmZDQxZjRmYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKISoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjUJpIrvxyx+HN0wRJedThVQKDRi/LkJJYXMHiBIymIuLbKUFATKKmq
bsoBwTQqKjLo1esW+/sWyZQEz0VqJBYMBxn0+VTJEY9QRlA2AS4zkQGWO0hY1q0f
PMaIsMkewA4RaMbDev4/LbxnZTPFZQ2+tYuW0jICIpXPp1gYEo4w4lPl63xstdke
Y2CJeJ2DUWRJkVOylxloGtUgncAqStrX80FPds/O5cJusjNzQ0BZ3NZXlfYpkhQ3
IrkH/TaYxvxn6t6lXh7Ly3n1PyxbUicLrfCVxvSV15tYhRDaShlRRuZsDShUWpRo
XLbNbwP6hGX/1NCXCA7zPst8ig+O5cA=
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:49:58 2026 by rpki-client