
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa
File: 23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa (raw, json)
Hash identifier: qwotHSVlxXeC0JcpZIK19Urk2Ka3hPoiUee8fv7uX3M=
Subject key identifier: 51:A7:AE:A6:F8:1A:02:40:FB:63:6E:05:7B:DC:1D:A1:B7:86:99:34
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EAFE6FF3055982E80D0FE9D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 98.20.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:ff:30:55:98:2e:80:d0:fe:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=25abe97d-a291-483f-abc7-fa55e9ef56fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:06:1b:84:4b:d4:60:63:48:48:03:fb:4c:
fc:c9:32:0e:c1:36:b8:54:73:2c:d9:e0:cd:27:15:
51:02:94:34:54:98:f2:b4:2d:7a:55:11:e3:34:1d:
c2:e4:39:30:ca:21:22:2f:b2:c1:03:b7:0d:7b:b8:
03:7e:c8:04:a8:fa:e8:a0:e9:2e:26:5d:c2:ac:b1:
6b:0c:8d:20:b9:12:eb:3e:fd:98:e0:f2:45:f9:9f:
12:3a:3c:33:cd:de:51:22:ab:b8:5f:27:6e:25:02:
b5:48:5e:10:df:58:25:d9:e7:a3:e4:dd:cd:c1:ce:
c8:d6:ba:2f:6e:63:cc:32:2a:8d:a0:41:0a:cf:85:
9f:f1:31:39:86:37:37:4b:eb:a4:e4:10:f0:3c:6f:
e2:33:24:30:03:e7:5d:ff:39:bd:24:b8:e2:bc:05:
08:a8:35:d2:7e:65:67:2c:a6:0b:dd:a8:70:97:f4:
d6:cb:bd:b2:22:3d:c8:e5:64:01:d3:da:18:0e:2f:
09:20:60:7f:41:f4:52:f3:00:c8:51:dc:a1:ba:16:
11:29:d1:92:67:81:84:c8:55:a0:13:3f:10:e5:f6:
c8:61:2a:95:68:10:62:35:52:c5:b1:a7:bd:d2:57:
fe:92:3e:31:d7:e0:51:20:d5:0f:22:10:59:16:f7:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A7:AE:A6:F8:1A:02:40:FB:63:6E:05:7B:DC:1D:A1:B7:86:99:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:44:f4:c3:11:3a:0a:b3:81:12:22:48:82:ad:9d:c7:7e:08:
e4:59:a5:2f:8c:ad:fe:ed:d1:de:bb:37:15:05:02:4d:f4:a7:
bc:66:dd:58:04:0d:3a:31:79:f4:d6:54:51:e9:8f:c0:a4:bf:
dc:70:14:c0:82:5c:70:af:f7:8c:54:52:ff:b5:77:5d:d6:fb:
b1:9b:5b:3d:bf:90:bf:2d:a1:5e:53:3d:15:14:95:c4:fa:8e:
0d:6c:3e:8e:6d:f1:76:a9:a0:23:00:58:1e:be:3c:97:f9:e1:
53:1f:c9:b9:db:88:2b:db:c7:bb:c8:2e:ac:dd:86:76:aa:8c:
51:98:0c:cc:15:b2:17:0b:bb:12:7b:8d:06:5e:71:70:48:2d:
a7:4b:fc:e5:88:ee:d8:93:36:20:67:4d:79:13:ed:5e:f9:81:
4a:c2:96:a4:b2:6e:a5:50:e1:90:8a:03:4b:fb:7a:d6:04:be:
c3:93:cd:f8:50:7e:f1:41:21:b6:50:a0:77:62:4b:eb:f7:4d:
69:4c:8d:bc:49:a2:96:92:c1:d7:4e:94:40:83:7f:89:01:fd:
a3:52:85:ba:41:30:80:fb:3e:ab:c5:ee:d3:7e:a1:98:77:15:
ce:8d:1e:5d:24:b1:34:9e:37:1e:d1:02:4e:0d:f0:42:6a:e7:
71:47:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:28:38 2026 by rpki-client