
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
File: 3bdc6966-5141-3334-888e-7e197a25c456.roa (raw, json)
Hash identifier: IuR2RlJ/0PmP46LA+Qnaa5pid02kyaKjpb3uya74MJE=
Subject key identifier: 82:31:47:3C:61:D4:26:0F:D2:DB:6C:BB:62:E6:93:9F:BD:E9:71:39
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E5FDF6D5FA18FBF8F72D0D280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
Signing time: Fri 03 Jul 2026 09:00:12 +0000
ROA not before: Fri 03 Jul 2026 09:00:12 +0000
ROA not after: Thu 01 Oct 2026 09:00:12 +0000
asID: 7029
IP address blocks: 71.31.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5f:df:6d:5f:a1:8f:bf:8f:72:d0:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 3 09:00:12 2026 GMT
Not After : Oct 1 09:00:12 2026 GMT
Subject: CN=ad9b74ec-d6c9-47cc-8d7f-fd3cca1801b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:34:14:e2:46:6e:3a:16:cb:cf:d2:12:60:
8c:a2:ce:e7:7b:35:88:e5:6f:10:aa:0d:8a:ab:e5:
41:08:d4:bb:91:94:22:33:7b:c2:6d:04:39:0b:63:
59:c8:b2:18:63:ff:51:e1:80:b8:85:1c:4e:bf:9c:
4c:86:40:77:ce:4f:b1:2e:be:94:77:56:84:09:51:
4d:e8:75:b7:6b:f0:a8:9c:a4:34:e6:80:01:8c:25:
60:3a:27:58:3b:ce:f8:f1:b4:2a:eb:97:a2:66:97:
83:b8:e0:55:be:bf:b9:28:97:64:19:b3:1e:7e:75:
40:92:80:64:5b:a9:5c:27:ab:f1:61:d9:15:2f:0c:
ae:d5:7d:51:2c:b7:81:67:92:60:9b:60:75:47:4a:
22:53:c3:36:af:88:76:40:82:78:86:51:3d:a5:16:
7d:2d:15:c4:42:db:05:c7:57:f6:22:d4:d9:2a:45:
4b:9f:4e:87:ca:00:71:db:73:19:2c:45:54:59:2f:
84:c4:9a:d9:f8:1a:0d:71:e5:48:73:17:24:08:b1:
d8:76:d4:11:13:53:e6:cf:9d:88:23:eb:6a:01:2c:
d9:0c:6c:7b:6c:7f:7b:41:88:11:80:70:93:aa:8d:
71:2b:92:2a:3b:6d:c2:04:e8:29:78:74:38:b7:c1:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:31:47:3C:61:D4:26:0F:D2:DB:6C:BB:62:E6:93:9F:BD:E9:71:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:99:73:dd:c1:9c:c0:9e:b2:63:89:ae:61:8f:75:70:dc:39:
0f:ad:2a:ae:9e:97:44:0f:02:09:eb:73:f3:3d:ab:16:fa:ef:
92:eb:2c:bb:06:19:84:aa:f6:1b:17:b4:5a:38:39:fc:a6:b7:
fd:20:4d:23:b5:26:0e:a5:59:9e:6b:5b:f0:59:60:ad:6b:98:
27:af:6b:d3:70:13:22:90:50:73:37:e0:de:46:9d:50:87:bd:
c0:a5:66:a3:06:14:5b:2b:66:28:d6:d6:a9:d6:80:8a:2e:3a:
ee:ef:cd:54:73:91:6a:4f:e8:5e:e4:36:f6:6d:e0:58:fc:6b:
17:97:88:91:b1:ad:cc:7e:bb:63:6a:7a:b4:57:3a:4f:1a:84:
40:d4:0f:03:81:24:7c:3e:48:ea:31:9f:0b:5c:5a:a8:a8:da:
c7:a3:fb:67:ed:4f:29:9b:fa:b5:1c:2f:b3:b1:53:5c:b9:7a:
f8:89:04:b3:0e:8c:b6:7e:24:be:d8:9d:5b:65:90:9d:2f:63:
e8:b2:d1:52:5f:c2:6a:a6:79:e4:f0:8e:91:05:24:1a:2b:27:
43:1a:b7:53:b8:55:b4:46:c7:b1:75:3d:41:a6:b3:26:70:c8:
a9:33:be:3e:7f:1a:5b:39:a1:fa:bc:71:eb:98:22:85:cd:49:
9b:36:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:57:22 2026 by rpki-client