
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa
File: 36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa (raw, json)
Hash identifier: aW3W91EyNi3OAtwIoxbME7ilgVKuNzR07lsFQ3G7ryM=
Subject key identifier: 4F:D4:DC:8E:7B:82:29:D1:9C:E2:71:59:73:B9:CC:83:35:5B:3E:43
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1C5336AC859CAF147CF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 1818
IP address blocks: 40.136.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:c5:33:6a:c8:59:ca:f1:47:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=d11c1401-f904-465e-9306-2b31106db6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:e6:27:53:25:32:e1:4c:13:c4:73:f7:9f:
e6:a1:4f:fb:8a:8f:51:ed:41:24:26:78:86:7c:43:
2d:01:89:a3:ea:ab:45:60:b3:b7:0b:17:bb:33:e9:
66:dd:46:7c:47:7d:5a:28:0c:c5:eb:3f:a4:23:d2:
28:1e:41:9a:49:0c:ec:22:b2:d1:64:67:71:9d:97:
64:39:a4:ad:90:ad:b4:20:81:33:c1:8d:a2:e8:f1:
83:3f:59:66:40:b6:56:6f:44:ff:81:08:86:bc:ca:
4d:1d:37:2d:40:25:15:75:7d:dc:63:78:e4:a9:f2:
ef:ee:7f:65:fa:62:b0:ce:6e:13:a6:ef:ca:d7:17:
e4:0a:3b:82:43:4f:fa:6a:32:09:fb:9d:71:52:1b:
8d:39:df:16:8d:c2:04:44:b1:8a:f7:19:8d:56:fe:
11:18:31:9c:b5:69:8d:1a:68:2e:04:1a:6e:1c:8e:
9c:0f:6c:0c:f4:55:2f:e8:a6:ed:91:26:bd:de:79:
5f:16:14:ee:fb:e0:33:3a:bc:bd:a5:1f:14:cd:ad:
78:8f:b5:04:64:78:9d:27:c6:c9:d6:85:29:df:01:
99:bd:b8:f2:e6:c7:3a:6a:ef:c2:7a:e0:4c:e1:b9:
b8:11:65:4e:40:68:15:b1:7b:9a:79:2b:4a:d4:d4:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:DC:8E:7B:82:29:D1:9C:E2:71:59:73:B9:CC:83:35:5B:3E:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.136.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:64:22:2b:28:9e:34:78:0c:c9:44:b4:48:4a:c3:66:f9:c2:
b4:9c:d7:e3:84:4b:ad:c4:3a:9a:7c:55:4b:9a:f4:d0:a6:ea:
9a:9f:82:f4:d7:d4:69:9d:ab:18:7a:dd:73:74:c3:3f:a9:cf:
a5:5f:b4:6f:9d:77:4c:6d:8e:d1:59:a7:96:15:88:4c:a9:dd:
11:51:0d:4d:b2:34:92:40:10:62:d3:4e:66:7a:6f:6d:ff:7b:
10:cf:03:c2:9c:23:12:3e:fb:52:35:47:11:0b:73:ab:78:40:
92:51:f1:7a:e6:55:90:95:f9:18:7b:78:cb:99:81:23:b1:0f:
a5:a0:b4:5c:d9:66:64:3d:52:99:3a:10:10:52:37:95:98:56:
53:80:50:7c:9c:f1:0b:73:7a:eb:da:ec:c5:d0:03:b0:c8:4f:
c0:62:00:82:4b:da:3e:a0:9a:bc:03:8f:02:53:db:24:2a:98:
dd:24:4b:1c:6b:36:af:11:fe:d2:13:ed:36:2f:71:61:0d:94:
7c:d0:ec:f4:8a:09:7c:b7:e6:c0:76:82:2d:f7:aa:8d:d2:64:
43:c5:0d:7f:bd:32:4e:5c:f6:da:51:a1:9e:17:f9:cb:89:dd:
80:af:ce:5e:40:c2:db:39:6a:74:53:9a:c2:35:24:6a:f3:8a:
6e:48:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:14:40 2026 by rpki-client