
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa
File: 3a5e724c-cda9-381f-a608-217725a36708.roa (raw, json)
Hash identifier: X6tAveEiaFwvOpIFKzPMVqx1gt89a6NckehjKchG9R8=
Subject key identifier: 3A:1A:AD:75:1F:4D:32:9A:62:DD:D5:41:4E:E2:41:7A:27:E2:8B:09
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E6C6F73FD61DF6C34FE36FC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa
Signing time: Tue 07 Jul 2026 21:00:13 +0000
ROA not before: Tue 07 Jul 2026 21:00:13 +0000
ROA not after: Mon 05 Oct 2026 21:00:13 +0000
asID: 7029
IP address blocks: 173.185.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6c:6f:73:fd:61:df:6c:34:fe:36:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 7 21:00:13 2026 GMT
Not After : Oct 5 21:00:13 2026 GMT
Subject: CN=eb08dc6a-c84a-4c92-8cd3-cf67d11bfccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:1c:18:1d:e0:55:b4:2a:9c:31:3f:06:d8:
9c:68:89:b9:b2:57:83:37:89:44:5b:47:7a:04:5b:
8b:2a:28:8f:48:e5:f2:40:55:b4:7c:af:fd:57:1f:
9a:c6:2d:98:4a:31:8a:64:63:d2:25:dd:e3:e7:8c:
44:e9:6a:2a:2e:b0:63:ad:c5:45:f5:75:90:33:43:
7e:fd:f5:9d:3a:eb:ff:1b:7c:4f:86:49:c3:60:3b:
87:64:af:3b:1e:01:de:ac:06:a5:41:4a:94:f2:ae:
c9:5f:e2:0e:67:44:31:98:3c:87:94:3e:1b:3a:d1:
cf:0c:a6:ce:3e:e3:96:51:15:e3:a8:59:26:48:4a:
91:81:06:05:cc:08:90:d8:aa:8f:58:a8:27:8e:bd:
f0:de:51:a1:49:2e:bb:95:3b:9b:3e:cc:4a:0b:e0:
2a:85:38:b6:2a:bd:f9:8d:ec:c6:cb:04:c9:59:35:
eb:8e:c6:e3:47:d6:31:56:55:25:55:54:53:34:fe:
bf:1c:28:58:8e:35:0d:49:60:68:7f:58:69:7b:6f:
fb:51:9b:5a:08:92:9a:8c:74:70:2e:fe:98:ad:30:
73:02:1d:ff:28:e7:90:e2:92:0f:fd:10:8a:b9:46:
20:47:5a:03:c2:01:f6:6e:63:05:51:45:ce:9c:8d:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:AD:75:1F:4D:32:9A:62:DD:D5:41:4E:E2:41:7A:27:E2:8B:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:6b:7f:7c:e4:66:44:35:20:59:9a:b2:9b:17:4e:96:d9:cc:
8c:a0:27:87:6e:87:a1:5b:b9:e4:b2:3b:56:2c:a2:21:7e:a7:
fe:e1:6c:d5:ec:93:5d:52:1b:5f:85:37:3e:9d:f0:09:99:a8:
d6:14:a1:e6:5c:16:18:da:50:49:d9:dc:16:52:90:3a:48:a2:
6a:02:b9:6e:ca:b2:45:84:f8:13:ae:d2:91:c5:ee:dc:7f:b2:
2e:20:9e:52:e9:99:1f:79:e1:1a:57:a3:c4:0e:8f:31:59:a5:
26:9c:e2:86:04:27:8b:d1:77:4f:2b:01:0e:1b:d9:ca:e0:bb:
b4:cb:47:6c:ca:7a:e8:1f:9e:71:5f:0d:02:be:8d:a6:64:31:
0a:37:8c:37:3b:24:fb:36:94:ec:76:0d:7b:16:03:1c:34:8f:
36:cc:bf:75:fd:b4:24:36:ae:09:9f:4e:54:9c:dc:ad:11:1f:
46:af:52:83:87:98:48:fd:a5:fb:d4:2f:0e:5d:8b:43:77:9a:
25:36:f2:09:bf:6f:c3:85:98:f5:70:15:4a:be:43:75:8d:f5:
5d:b8:fa:ef:91:44:b1:e2:a9:55:e3:ee:57:ff:ae:c0:70:2f:
fb:12:cc:82:0b:3a:5f:95:21:1f:64:d9:da:82:16:52:dd:5c:
50:aa:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:54:58 2026 by rpki-client