
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18e7f0fd-1e73-3cb4-a4a8-645103b3bd38.roa
File: 18e7f0fd-1e73-3cb4-a4a8-645103b3bd38.roa (raw, json)
Hash identifier: llwVNeLwITY3HJ4ibHWr44koFBhCutKdm/WyHMNMsGI=
Subject key identifier: 66:F7:3F:A8:F9:18:A0:BC:21:AF:30:7A:FF:15:9A:37:4F:3C:F4:E6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E465AC15E0063257EF870CC04
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18e7f0fd-1e73-3cb4-a4a8-645103b3bd38.roa
Signing time: Wed 24 Jun 2026 05:37:57 +0000
ROA not before: Wed 24 Jun 2026 05:37:57 +0000
ROA not after: Tue 22 Sep 2026 05:37:57 +0000
asID: 7029
IP address blocks: 198.14.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:46:5a:c1:5e:00:63:25:7e:f8:70:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 24 05:37:57 2026 GMT
Not After : Sep 22 05:37:57 2026 GMT
Subject: CN=18f632c2-884b-4fdb-844b-239aad745f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:c3:e6:86:9e:e5:c2:b1:d6:5b:6d:f8:4a:
da:f3:cd:43:be:eb:a7:4d:d2:9d:3e:50:bb:df:a0:
03:ad:f4:1b:1d:59:e0:05:fe:bd:fb:61:ea:02:94:
7a:3d:7a:77:99:c7:e3:c2:10:d4:7f:1a:4c:57:27:
9a:bd:65:a4:d1:a8:d3:fe:1c:62:ce:eb:a2:9c:69:
d7:7f:5f:ed:2c:2b:ec:97:f5:f4:6a:13:eb:81:9f:
39:ea:db:95:e3:c4:a3:fc:b3:9f:90:35:df:6c:08:
2d:a0:b5:36:1b:8e:46:79:52:82:01:43:5f:f3:97:
79:e1:e1:6b:14:3f:75:96:7d:d1:3f:5d:94:03:eb:
04:68:da:33:53:dc:58:d3:84:98:81:c0:ea:7c:db:
d8:51:92:07:14:2f:83:6d:45:51:c0:7f:ac:56:cc:
97:99:39:f5:3e:96:80:f8:80:f1:b5:74:57:f7:e7:
2d:a9:0b:8c:e8:7d:62:2e:73:e6:b0:a2:94:5f:5d:
4f:87:30:54:5d:39:88:5b:39:d8:f6:99:e6:bb:4f:
fd:0b:ba:4f:69:e0:4d:94:4b:18:a5:85:80:92:bb:
45:32:c9:ce:1a:a4:9f:90:b6:6b:40:fd:2f:39:0c:
71:fe:c0:2c:41:5d:a9:dc:d0:54:9b:38:c9:58:66:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F7:3F:A8:F9:18:A0:BC:21:AF:30:7A:FF:15:9A:37:4F:3C:F4:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18e7f0fd-1e73-3cb4-a4a8-645103b3bd38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.14.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c5:b5:0c:59:95:2f:4a:66:35:7c:62:64:21:e7:da:2b:17:
f5:e6:ec:1d:0f:19:9a:4b:5f:52:9f:79:60:b4:8c:21:78:74:
54:46:aa:e4:a3:70:1e:31:92:c9:8d:b3:d1:a1:61:3c:3c:cf:
34:a2:f6:91:5e:4b:70:21:f0:44:e8:cc:6f:27:70:c1:cf:79:
26:0b:4c:fa:4a:92:75:9b:32:e0:b0:df:f6:23:5c:89:e6:36:
fe:49:80:b4:b6:63:7d:8c:a1:25:29:ef:4a:bc:09:3e:76:26:
49:92:a7:51:d2:2b:c2:26:2c:d9:e5:18:c7:59:e9:dc:73:fd:
37:6b:09:11:0a:54:cc:22:9a:a7:3a:3f:90:80:48:40:08:81:
1b:d1:0a:d5:0b:16:13:f4:ae:cf:7b:0c:3b:a4:cd:db:13:4d:
8c:23:4a:44:58:23:0e:d3:d0:08:50:31:70:b6:09:69:2e:44:
4e:26:66:b1:72:c3:4d:dd:6e:fc:3f:20:78:1d:5b:ed:59:e3:
72:25:64:03:3c:ab:cd:83:db:80:55:08:32:6c:d7:a0:55:26:
de:d6:d5:16:fc:f5:69:46:98:84:89:6e:17:87:e1:1c:8c:3f:
49:dc:e5:e5:fc:0f:10:de:41:a6:69:e2:62:64:72:51:40:60:
a9:52:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:48:39 2026 by rpki-client