
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa
File: 1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa (raw, json)
Hash identifier: 35Yz7DOJRIPWJ8WTKx5kePZ6MD1JcYiK7z0Qyj8T82M=
Subject key identifier: BA:B5:DE:C9:EA:EC:55:6A:0F:F4:3C:60:DD:56:22:ED:22:FD:2F:0B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1E390077F519329337A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 69.66.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:e3:90:07:7f:51:93:29:33:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=d5a174f9-5276-4a86-ac79-62351ffbea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:44:93:94:98:91:a6:a7:4a:26:e4:69:22:
f6:09:dd:49:d1:7c:11:53:32:35:27:85:c8:36:90:
e0:b4:cd:0d:78:72:aa:1e:e8:8f:36:39:7d:a5:4c:
a2:bf:bf:cb:19:e2:bc:4c:20:24:fe:22:13:cf:6e:
c6:92:ec:3f:d9:ed:87:fd:50:70:91:ec:94:1b:7a:
45:72:11:fd:6f:0a:32:52:db:a9:86:f0:6c:ed:f1:
72:75:54:49:2d:bf:7b:38:2f:51:5e:fc:e1:1b:e5:
64:cb:aa:90:31:91:45:c1:97:65:b7:80:76:46:16:
90:0c:d6:79:08:49:7a:6d:1d:e3:b6:18:82:2e:ce:
3f:ed:88:92:43:67:67:66:ce:b5:23:93:9b:13:ed:
2c:a1:d0:ce:2e:f2:d9:bf:36:dc:1d:c7:9f:b1:40:
1d:17:78:69:da:9f:e9:40:2e:1b:f1:51:d6:0e:c4:
de:7b:48:6b:4e:d0:aa:77:f4:ec:a2:44:24:2c:d2:
ad:ca:ff:bd:f8:bd:31:d6:23:9a:22:dc:bb:2f:8d:
e4:72:b6:ea:5a:f0:21:27:76:da:7a:32:d0:ae:05:
69:17:b8:5d:26:77:67:37:c1:dc:5d:69:2d:86:b6:
ea:cb:06:56:4b:76:93:65:3c:48:97:8e:0d:99:a1:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B5:DE:C9:EA:EC:55:6A:0F:F4:3C:60:DD:56:22:ED:22:FD:2F:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b1:86:b5:a4:48:03:00:3a:67:59:25:26:6b:bd:e0:a0:7a:
f8:93:51:d5:fb:26:e4:3b:0c:8b:be:e5:f8:da:51:1f:7d:41:
f6:7d:ef:82:2f:4f:83:19:39:b1:76:4f:bc:21:52:25:29:bc:
9f:91:a5:16:3d:87:79:6b:96:50:04:20:27:7c:fa:79:ff:28:
8a:be:af:20:12:f7:bd:eb:8f:9f:0c:ec:9d:7e:78:89:1e:a2:
01:e8:2a:6d:9b:47:e1:25:30:53:21:21:6a:36:de:14:e1:92:
e5:c3:bc:5e:ee:78:2a:ec:b6:88:50:a2:93:22:69:b4:a7:59:
90:8d:5e:02:a8:d6:e0:fa:9d:1d:f9:a1:d2:77:aa:dd:6f:ce:
b7:d9:06:cc:b8:dc:ed:87:6a:94:34:ae:2e:1b:84:99:1d:fb:
00:55:a5:91:79:3d:79:2f:4d:2a:c0:42:66:29:8f:db:c7:f3:
24:de:e0:46:06:cf:14:67:85:e4:4f:46:96:5e:b8:14:49:6d:
39:72:64:c5:45:2a:23:66:93:36:ae:41:00:1e:42:74:66:c3:
1a:a9:da:44:b4:1c:fd:e1:94:24:e4:bf:1b:30:1f:da:cd:0d:
34:cf:02:e9:99:da:bf:fc:77:ec:71:cf:fc:09:d6:50:b4:cf:
5b:23:9f:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseOQB39RkykzeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
ZDVhMTc0ZjktNTI3Ni00YTg2LWFjNzktNjIzNTFmZmJlYTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFFEk5SYkaanSibkaSL2Cd1J0XwRUzI1J4XI
NpDgtM0NeHKqHuiPNjl9pUyiv7/LGeK8TCAk/iITz27Gkuw/2e2H/VBwkeyUG3pF
chH9bwoyUtuphvBs7fFydVRJLb97OC9RXvzhG+Vky6qQMZFFwZdlt4B2RhaQDNZ5
CEl6bR3jthiCLs4/7YiSQ2dnZs61I5ObE+0sodDOLvLZvzbcHcefsUAdF3hp2p/p
QC4b8VHWDsTee0hrTtCqd/TsokQkLNKtyv+9+L0x1iOaIty7L43kcrbqWvAhJ3ba
ejLQrgVpF7hdJndnN8HcXWkthrbqywZWS3aTZTxIl44NmaH1kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLq13snq7FVqD/Q8YN1WIu0i/S8LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWNlZWUzZjAtNzEwNS0z
ZTZhLWJlYzctNzhmYTFmNGQ3YjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRULoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2xhrWkSAMAOmdZJSZrveCgeviTUdX7JuQ7DIu+5fjaUR99QfZ974Iv
T4MZObF2T7whUiUpvJ+RpRY9h3lrllAEICd8+nn/KIq+ryAS973rj58M7J1+eIke
ogHoKm2bR+ElMFMhIWo23hThkuXDvF7ueCrstohQopMiabSnWZCNXgKo1uD6nR35
odJ3qt1vzrfZBsy43O2HapQ0ri4bhJkd+wBVpZF5PXkvTSrAQmYpj9vH8yTe4EYG
zxRnheRPRpZeuBRJbTlyZMVFKiNmkzauQQAeQnRmwxqp2kS0HP3hlCTkvxswH9rN
DTTPAumZ2r/8d+xxz/wJ1lC0z1sjn+o=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:48:16 2026 by rpki-client