
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3982818d-2738-3f60-bad4-34ef6ab9a4ea.roa
File: 3982818d-2738-3f60-bad4-34ef6ab9a4ea.roa (raw, json)
Hash identifier: Hwvd6NjluDsTXulVkCj9LeyvE04HXtJhl1axhuaq7oE=
Subject key identifier: 78:78:34:A8:C5:A0:60:0E:1E:B3:50:B5:FE:3F:A2:56:E0:6D:65:AB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EBDDC6476AF28B41ABC0E1B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3982818d-2738-3f60-bad4-34ef6ab9a4ea.roa
Signing time: Thu 06 Aug 2026 01:00:12 +0000
ROA not before: Thu 06 Aug 2026 01:00:12 +0000
ROA not after: Wed 04 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 2001:19b0:480::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:dc:64:76:af:28:b4:1a:bc:0e:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 6 01:00:12 2026 GMT
Not After : Nov 4 02:00:12 2026 GMT
Subject: CN=bb5126d7-1487-47e7-a556-028a538fa9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:b0:c1:7c:6d:4c:96:ff:9b:6b:9c:66:b6:
61:0c:44:9e:be:da:1c:5c:11:08:69:c7:fb:e9:62:
8c:5f:d8:18:86:0c:8f:98:aa:0d:53:79:e3:98:95:
e3:51:a6:db:ce:c3:37:6b:9e:85:54:28:11:69:81:
4d:f8:e6:2b:ae:40:40:91:1e:b3:6d:4c:34:8a:b1:
4c:0c:ed:38:02:fa:65:94:19:5d:73:01:95:b7:c4:
43:66:74:62:2f:b7:60:7c:dd:a4:0c:45:68:70:d6:
73:b9:25:b9:f0:e0:b9:c4:ab:ed:6e:e5:61:15:ee:
d7:b7:22:1b:7d:f7:c2:3f:21:f5:72:a7:39:95:f2:
56:67:86:40:91:53:75:fe:6c:b5:43:64:13:05:bb:
a6:b0:0b:1a:3f:50:c5:e7:56:86:36:e2:4d:6e:3d:
64:22:20:63:97:c0:4b:b8:57:fc:1d:e3:5a:dc:4d:
cf:ad:85:d0:1d:c1:e9:0b:a5:08:73:82:dd:19:70:
5a:1c:04:c3:aa:f8:19:a5:fb:42:96:33:88:83:76:
ff:88:ba:d9:b3:b7:44:b3:9b:0d:45:fc:7f:dd:f6:
c6:43:02:d4:37:af:28:6a:b8:96:21:5d:fa:89:c8:
96:b7:0f:3d:1c:52:41:1b:6b:02:be:6c:fc:10:f0:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:34:A8:C5:A0:60:0E:1E:B3:50:B5:FE:3F:A2:56:E0:6D:65:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3982818d-2738-3f60-bad4-34ef6ab9a4ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:19b0:480::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a7:b0:aa:11:4f:10:00:c4:72:3b:cb:36:4b:9d:a8:9b:f0:
10:43:6b:93:3d:06:df:7b:fd:cd:2f:69:bc:6c:52:71:f8:d5:
4c:41:f9:d8:6e:58:f3:1a:e1:ae:6c:61:29:26:2f:56:de:64:
09:80:3e:11:b7:00:2e:6a:5f:0a:24:71:a2:a2:76:46:ec:1f:
f8:16:10:81:d5:a1:a2:55:ed:43:f9:a1:0d:f5:71:b7:a2:6c:
5f:02:a9:9c:73:26:23:a0:42:19:af:01:cc:4e:39:49:b2:54:
7e:31:2d:c2:f5:95:c6:ad:e8:2a:d1:e9:22:db:ab:44:94:1d:
48:af:6f:c8:bc:dd:ee:6e:b6:92:82:f8:f6:07:ba:2d:15:2e:
0c:6a:e2:cc:b1:b1:5e:2e:e0:95:60:79:3e:2e:fd:30:c4:65:
38:82:16:f5:c2:65:b7:bb:19:28:41:a1:0f:d9:ef:5d:af:d5:
8c:4a:1a:cc:30:62:bf:b3:de:68:f8:ca:34:51:fd:08:fa:90:
f4:5b:63:7a:48:71:54:c0:24:00:12:d8:9b:6c:6d:70:da:0f:
81:fc:59:b9:78:25:3b:f0:e3:e6:80:94:b9:6b:e0:e9:25:bf:
da:2e:2f:cd:04:ec:53:72:36:7d:ed:b2:6d:fd:9a:71:f4:b5:
5c:60:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:37:52 2026 by rpki-client