
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa
File: 1ec27b64-b946-30a2-a82f-7c536af28e32.roa (raw, json)
Hash identifier: LROWpRlGwFuxbygNubpe4vGPnC/R9KAX6u775ZZuD1A=
Subject key identifier: 4D:F8:D0:65:1D:BC:E9:4F:F2:AA:10:09:06:32:DD:47:CD:D2:2C:2A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1C7895729E63812AAF700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 69.40.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:c7:89:57:29:e6:38:12:aa:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=7a4bdf47-7552-4a31-98f8-12edb7f0530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e4:da:01:76:e2:b0:7f:40:b1:4e:ef:52:6d:
d6:c9:5a:11:8a:7f:5e:0f:2b:a3:e5:96:1a:be:10:
40:7a:20:37:2b:31:1e:59:2a:9b:f7:5e:95:16:16:
f4:86:fc:c9:4c:a6:d8:9b:b4:33:8b:02:b0:55:dd:
bf:0b:f3:b2:dd:0a:fe:8a:75:fc:24:f6:dc:87:4d:
df:04:0c:34:d7:7c:26:05:19:de:f6:0e:a4:14:cc:
63:2a:fb:87:ff:7a:41:7b:50:ee:b3:98:07:e0:a7:
ec:50:84:63:af:19:54:e3:78:67:72:e1:c6:53:61:
01:35:0d:a8:01:e2:c9:d2:c1:df:09:a4:c7:b2:e0:
f7:ce:76:67:bc:62:4c:e1:04:f3:5c:34:d8:8a:8b:
e0:cb:54:51:6c:6b:aa:a7:5a:61:19:f8:1e:86:b7:
01:1a:c7:96:24:87:29:04:12:fe:80:b9:60:05:fc:
46:7c:ca:f2:f2:bf:be:a1:7d:8f:21:75:88:5e:fc:
e7:e4:40:b7:0f:da:60:b9:12:47:79:58:9c:a1:ae:
c7:e7:48:f3:22:af:18:05:8a:1f:8c:c5:73:cb:e7:
59:c2:c4:62:94:c9:da:6e:69:2c:5e:08:7a:dd:15:
9e:92:82:5b:fb:d8:b9:a1:35:6f:1a:16:3c:e5:bd:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:D0:65:1D:BC:E9:4F:F2:AA:10:09:06:32:DD:47:CD:D2:2C:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.40.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:9a:e5:6b:55:1c:0e:d1:8f:6f:8a:aa:1d:c6:03:b4:49:bc:
89:cb:50:12:7d:c5:e0:1b:39:e2:1a:ea:c3:77:0f:cd:35:43:
78:c4:ec:d6:82:e8:0c:68:16:cb:a9:82:5b:dd:ed:94:2d:d8:
f0:6c:01:5d:99:b8:12:0d:10:19:5e:c0:e1:8e:28:3f:b2:d7:
04:91:5e:6f:fe:7b:0d:dd:b4:72:32:bd:ae:08:90:de:35:bb:
ab:4e:03:63:bc:47:29:7b:81:16:40:31:8d:ed:f2:19:d3:04:
14:f4:94:53:00:cb:29:f3:0c:9e:55:a2:1b:56:6f:fc:d0:73:
19:29:06:89:a5:cc:ac:36:3a:93:9c:2f:b6:42:a4:2d:28:1a:
6c:17:09:da:cc:dc:51:3f:33:d5:10:78:94:97:9c:78:08:03:
73:53:a8:5a:d3:e4:be:7a:52:52:66:f1:53:10:26:20:d9:d6:
78:62:62:76:32:72:2f:cd:35:64:d6:69:ef:34:aa:f4:fb:96:
00:b2:4c:2e:78:3e:ff:80:b3:9d:fd:13:e3:e7:11:53:3f:94:
6f:f7:19:10:61:66:30:80:8b:56:76:0f:03:d5:73:67:75:7e:
c8:83:a1:e7:71:12:7d:06:92:eb:b5:29:f6:6b:2d:35:3d:42:
51:88:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:33:10 2026 by rpki-client