
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/213d2988-c57f-31d0-9dfe-945523d580a2.roa
File: 213d2988-c57f-31d0-9dfe-945523d580a2.roa (raw, json)
Hash identifier: 7+Z4ffiX7IhUv90pSAbqEisBHMHTeIG6q2TtCIRM3Ds=
Subject key identifier: 4D:5C:EC:C7:8B:5C:F2:D8:6B:A1:05:BB:7B:04:40:88:7F:2E:23:F1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1E4B896AEA67859C16100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/213d2988-c57f-31d0-9dfe-945523d580a2.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 75.89.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:e4:b8:96:ae:a6:78:59:c1:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=8e5652a5-7d0b-46c8-ba08-a61bf2a8be48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:82:2a:0e:93:88:22:36:14:3b:47:ef:e2:
e3:74:e2:19:01:18:fd:87:97:44:4c:ad:82:0c:6a:
2d:50:1c:8d:7b:1f:85:42:61:b6:d7:bb:2f:74:7b:
33:93:eb:ea:ec:b0:9c:f7:2f:b7:39:a7:aa:aa:aa:
5d:5c:91:ff:6e:10:e5:8e:71:67:7d:d2:3f:00:2c:
3a:54:13:ce:03:73:83:cb:b3:fc:02:d5:3e:b4:6d:
5a:53:88:fb:75:9b:d6:f1:14:3f:d4:12:6a:c7:46:
ca:24:31:e8:35:2b:01:91:4d:29:90:8e:39:39:19:
94:c4:be:ed:68:e4:51:5d:f1:3a:15:e7:b4:8d:ca:
97:b6:2e:39:b2:09:e6:85:d1:89:a9:24:01:bb:38:
35:4c:6a:5e:15:d8:4b:34:fd:f2:57:5d:a6:86:96:
7a:ef:8b:32:7a:94:94:3c:0a:c6:2f:52:fc:46:06:
1a:e3:42:a1:e3:e7:64:f8:c0:fc:b4:f7:3f:ea:23:
07:79:fb:ca:f5:98:6b:d3:f6:64:40:92:9f:77:09:
be:71:9c:e7:1e:f6:56:8b:96:17:55:55:1a:7d:c2:
f3:c9:5b:17:1a:e0:4f:df:e0:43:ec:67:5c:5d:5f:
33:a5:c3:26:70:31:8a:36:9e:c8:53:27:e7:77:45:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:EC:C7:8B:5C:F2:D8:6B:A1:05:BB:7B:04:40:88:7F:2E:23:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/213d2988-c57f-31d0-9dfe-945523d580a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:16:ba:2a:77:0c:ab:81:f4:90:8f:a8:c5:ac:bf:2a:05:a5:
9c:d9:f3:bb:66:75:84:cb:4b:e0:a7:66:41:2c:d9:cc:68:18:
8a:5b:a3:37:bc:2b:6b:c8:33:07:2e:89:92:8c:b3:cb:1e:09:
b7:94:11:8a:ee:4b:9a:6a:20:61:43:63:96:4f:d2:88:85:92:
47:60:f1:2d:35:96:b9:ef:30:ce:15:67:79:b9:9f:aa:dd:9e:
f7:c9:16:b8:4d:5e:2f:2e:7b:82:fc:0f:77:e8:0b:7f:0e:5c:
f6:c8:13:ae:b2:a4:ff:a5:f6:11:87:e5:3c:4e:6c:fa:1d:9c:
3b:56:f0:d0:07:ad:97:8b:a7:64:45:55:0f:2d:57:43:7b:fa:
40:42:5a:bd:a0:01:09:e0:7f:9d:a0:83:91:93:aa:67:9d:e5:
36:dd:57:be:87:56:11:fa:fc:f8:c4:db:43:5b:5e:35:f0:fc:
ca:59:04:31:6e:9e:43:70:9c:0a:27:4a:15:af:85:99:f4:d5:
dc:e1:89:2b:aa:17:f4:ed:ff:02:49:7a:b8:4d:b6:a1:2f:3d:
29:0d:24:88:a1:cb:98:31:a7:ad:15:2e:08:36:a1:6f:bd:84:
03:9b:32:b0:91:30:fd:2c:a3:ea:86:61:b3:60:09:a9:32:06:
3f:d8:a5:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseS4lq6meFnBYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
OGU1NjUyYTUtN2QwYi00NmM4LWJhMDgtYTYxYmYyYThiZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqiCKg6TiCI2FDtH7+LjdOIZARj9h5dETK2C
DGotUByNex+FQmG217svdHszk+vq7LCc9y+3OaeqqqpdXJH/bhDljnFnfdI/ACw6
VBPOA3ODy7P8AtU+tG1aU4j7dZvW8RQ/1BJqx0bKJDHoNSsBkU0pkI45ORmUxL7t
aORRXfE6Fee0jcqXti45sgnmhdGJqSQBuzg1TGpeFdhLNP3yV12mhpZ674syepSU
PArGL1L8RgYa40Kh4+dk+MD8tPc/6iMHefvK9Zhr0/ZkQJKfdwm+cZznHvZWi5YX
VVUafcLzyVsXGuBP3+BD7GdcXV8zpcMmcDGKNp7IUyfnd0Ua6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1c7MeLXPLYa6EFu3sEQIh/LiPxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjEzZDI5ODgtYzU3Zi0z
MWQwLTlkZmUtOTQ1NTIzZDU4MGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1nwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0Wuip3DKuB9JCPqMWsvyoFpZzZ87tmdYTLS+CnZkEs2cxoGIpboze8
K2vIMwcuiZKMs8seCbeUEYruS5pqIGFDY5ZP0oiFkkdg8S01lrnvMM4VZ3m5n6rd
nvfJFrhNXi8ue4L8D3foC38OXPbIE66ypP+l9hGH5TxObPodnDtW8NAHrZeLp2RF
VQ8tV0N7+kBCWr2gAQngf52gg5GTqmed5TbdV76HVhH6/PjE20NbXjXw/MpZBDFu
nkNwnAonShWvhZn01dzhiSuqF/Tt/wJJerhNtqEvPSkNJIihy5gxp60VLgg2oW+9
hAObMrCRMP0so+qGYbNgCakyBj/YpR8=
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:08 2026 by rpki-client