
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa
File: 152d5f6f-78f2-31d9-8757-11d8cefc505c.roa (raw, json)
Hash identifier: QFQgdCBZcmgywKFSKDg/hxvwvSCgKHag+NiCeQbjDYA=
Subject key identifier: 6B:40:32:7E:12:68:C2:76:78:A7:B7:A3:A9:D9:D8:AB:6D:51:FC:9A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CFC823852CC150576A5B92280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa
Signing time: Thu 26 Feb 2026 02:00:32 +0000
ROA not before: Thu 26 Feb 2026 02:00:32 +0000
ROA not after: Wed 27 May 2026 01:00:32 +0000
asID: 53271
IP address blocks: 67.62.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:82:38:52:cc:15:05:76:a5:b9:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 26 02:00:32 2026 GMT
Not After : May 27 01:00:32 2026 GMT
Subject: CN=8ff99a07-72dd-46eb-86ce-197aa94894e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:dc:81:0d:15:18:36:af:f0:54:cc:a8:f7:
bb:0c:8b:c6:45:64:dd:0a:86:96:cf:b1:a8:3f:09:
33:61:97:f5:f3:12:d4:2c:b0:99:e1:9e:79:a3:f3:
c4:52:65:a3:3d:dc:27:88:31:63:56:1a:77:28:f5:
26:ff:11:52:ea:4b:36:59:50:60:cd:bc:24:d7:e2:
3d:1f:f1:2e:fd:24:c3:4e:2f:38:8c:4e:21:ab:29:
f9:71:57:c2:cd:ed:9d:b1:5b:7c:7d:93:8d:8a:ec:
6a:5c:95:86:92:0b:00:b7:df:df:31:2d:f9:d7:cb:
66:2c:87:55:f9:92:4b:96:ab:b9:ba:74:df:fa:fb:
5e:f8:f7:d7:09:6a:ad:e0:75:13:91:93:97:ff:5c:
0a:24:c6:16:83:88:ea:45:4d:07:3b:a5:03:8e:28:
7b:50:01:46:6e:74:af:42:1a:84:d2:8a:3a:57:e2:
56:60:fd:9e:54:44:81:42:b6:b4:8b:4d:4f:31:20:
03:c9:68:c0:f0:fe:bd:0d:f3:b1:61:96:c9:39:85:
e8:71:26:77:0e:b5:92:6d:f3:1f:f3:78:b8:15:8d:
1f:0c:05:c1:75:c0:fe:a7:9b:ad:da:1e:d6:98:d0:
29:c5:88:92:01:62:6b:c1:41:11:a4:f5:0c:8e:37:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:40:32:7E:12:68:C2:76:78:A7:B7:A3:A9:D9:D8:AB:6D:51:FC:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.62.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:13:85:68:8a:a1:1d:06:93:2d:5e:8d:f2:27:1c:29:6c:aa:
42:66:73:9d:c2:e7:5e:51:19:b1:cf:e0:bb:e9:85:d6:db:99:
e8:3f:66:c7:f4:d2:1a:eb:0e:ce:7b:ea:61:0e:80:7c:aa:ea:
56:54:71:46:75:5a:be:4a:8b:4c:c5:c8:20:b7:3b:b0:60:46:
54:40:f4:3a:d2:c7:1d:a5:97:88:41:43:54:e1:23:78:cd:68:
f0:7a:8c:13:8a:34:f6:5c:13:aa:4b:cb:f6:ab:de:5a:4c:7d:
cd:0a:b3:5c:e4:1e:8f:cf:1c:52:ed:d5:bf:10:85:4e:dc:8b:
d0:cc:ea:72:cb:11:17:20:62:33:51:97:79:9e:d6:a7:a9:2f:
43:8a:0f:c0:bc:6e:ac:b7:36:05:d2:e1:02:2f:37:ae:1b:c0:
c0:a6:0a:bd:0c:e9:49:a3:b4:27:b6:6e:98:94:f7:16:0b:ea:
95:a1:bd:5b:ce:e1:de:59:c1:98:ce:de:8d:0e:3e:d0:d5:1f:
24:a2:c6:c9:6d:77:4c:ef:54:b5:61:92:38:91:2d:54:97:d7:
a1:2a:a8:70:ab:af:fe:3c:55:73:86:cd:92:46:ee:02:75:1f:
f9:25:cd:52:ef:e6:b2:b4:c7:9d:9c:5f:a7:70:b9:84:6c:9b:
5f:22:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:31:49 2026 by rpki-client