
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa
File: 27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa (raw, json)
Hash identifier: p2h4kjudBH91FzNfz+pJ6SbHh9xRdkQNo63B+0kkrNY=
Subject key identifier: A0:55:4F:02:D0:34:75:3B:D4:C3:EA:62:9E:B3:4D:67:A1:6D:16:0F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1E4803458F63DD186FB00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 74.223.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:e4:80:34:58:f6:3d:d1:86:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=f3ecdc8e-2e1a-42cd-b0d7-c5978910826c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:3e:e7:07:21:80:0d:6b:4a:b9:db:a8:0e:
3d:86:ac:02:08:d0:a0:ea:18:e1:c9:2c:45:d7:f1:
f7:fa:45:b0:fc:37:1e:02:54:cb:7e:01:5a:95:69:
0a:b6:8a:f2:2e:38:9b:5b:be:9b:53:05:61:a0:ea:
60:46:4f:7d:51:32:cb:10:bf:8f:16:45:f4:f4:f2:
e6:2d:85:27:69:7b:eb:b8:e5:6c:ea:15:cd:6d:82:
25:2d:d4:db:ce:78:99:fd:f2:d5:3e:a0:17:4b:c2:
bf:05:4e:97:bd:8b:3f:5e:7f:fd:f9:76:e8:f8:06:
c0:6e:87:65:e2:50:bc:77:9d:a4:c6:2f:46:51:92:
f6:df:8b:e2:84:24:4d:6f:91:1a:40:ea:89:02:6c:
ae:5e:27:ee:d3:64:40:ac:2a:84:81:cf:e6:5b:06:
14:55:33:7f:5b:a2:ee:95:43:35:dc:3b:99:a3:b4:
32:64:2b:a2:02:1d:b0:49:c0:ff:bf:da:4b:a2:2e:
de:92:ef:57:18:43:d3:a6:5e:29:8c:8f:d7:45:d3:
d0:9b:4e:ba:72:94:3b:1a:1a:de:74:16:eb:a2:0c:
70:b3:ad:7f:a1:52:cd:2f:c9:4f:1c:07:88:d0:de:
5a:59:40:80:fe:72:ea:2d:f6:a2:ae:cb:a6:ec:9e:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:4F:02:D0:34:75:3B:D4:C3:EA:62:9E:B3:4D:67:A1:6D:16:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.223.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:47:e1:de:00:bd:ed:04:3d:9a:70:ca:49:f3:bb:73:c9:70:
6a:da:74:83:a4:32:3b:0b:a8:c1:d4:99:b0:2d:72:b7:96:d3:
53:42:61:61:48:0f:d1:25:bd:ea:77:35:24:48:8b:36:7b:aa:
7d:f5:9a:e5:a0:c4:db:69:7b:85:f8:88:23:58:3b:99:52:6f:
ad:45:b6:01:de:03:0a:35:b6:2b:1b:f0:3b:d8:f9:c9:a4:fa:
bb:86:6a:15:22:55:78:a5:0d:90:3e:00:03:dd:3b:f4:ca:ce:
3a:90:bf:0b:fd:ed:e1:2e:a2:4b:6a:7c:e9:f2:b4:17:bd:ef:
93:8c:75:6d:df:02:18:48:09:b3:89:c4:a9:ef:83:a5:c3:c9:
b6:a0:b3:b3:a4:2f:c0:31:43:33:80:c6:2a:06:30:37:b1:bc:
7d:c7:e7:8f:2b:bc:f0:50:52:bb:53:c1:00:8d:8a:f2:c9:24:
4a:2d:32:b1:4e:46:d8:61:b9:47:0e:90:91:ff:7e:e4:90:63:
f9:78:04:5d:28:a3:b4:fc:3e:7a:0e:8b:e6:74:cf:e5:05:3c:
5e:eb:c2:4a:1b:6f:4b:03:ac:69:53:b5:58:c5:5b:99:4f:3e:
31:20:4c:7e:8c:bc:58:8f:7a:8d:38:38:75:d9:ff:3c:80:0c:
52:a9:92:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:37:57 2026 by rpki-client