
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa
File: 3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa (raw, json)
Hash identifier: hU3p8IJAJSk5J0/L4DZ4+aEspyWOqOs5zyzcVMbUaIw=
Subject key identifier: D3:F9:5D:BE:A7:6C:F2:CE:C7:30:30:36:4D:C9:B1:74:16:34:07:0C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DDA55D8F3EF9714F1880D5980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa
Signing time: Sat 16 May 2026 13:00:31 +0000
ROA not before: Sat 16 May 2026 13:00:31 +0000
ROA not after: Fri 14 Aug 2026 13:00:31 +0000
asID: 7029
IP address blocks: 98.17.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 30 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:da:55:d8:f3:ef:97:14:f1:88:0d:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 16 13:00:31 2026 GMT
Not After : Aug 14 13:00:31 2026 GMT
Subject: CN=7613389f-a7fc-4d9a-947a-ae7c17eb9051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:65:3e:25:18:24:41:42:b3:51:7b:47:3c:
5a:05:47:47:9e:e1:64:02:7c:5f:fc:d6:29:d5:7e:
8b:77:03:5b:a4:66:d1:29:2c:0d:63:d0:f8:17:43:
d3:fb:3b:f4:4a:bf:59:78:17:99:b2:43:4b:73:2b:
5a:0e:d8:a2:e2:30:25:16:a3:5f:3d:5a:01:a2:8d:
13:5d:99:c7:10:7a:eb:80:bd:fd:57:7e:1d:77:a2:
97:34:0d:07:84:27:0c:48:eb:7c:d6:97:11:ea:ee:
c8:0d:78:27:ba:d8:ed:05:45:7e:3f:53:3f:d6:d7:
32:50:ae:99:0b:9f:f2:bd:2e:44:98:70:3e:1f:cc:
79:4d:1d:8d:4a:49:74:a6:1f:45:4e:82:a3:da:b4:
3a:89:ab:f1:6f:10:c3:f4:58:9d:ac:20:09:88:7c:
f6:7f:34:07:3a:bd:f4:60:9d:f0:c1:0f:71:f4:bd:
33:ec:2b:7a:0c:b3:08:be:73:3c:ab:90:a0:6d:ba:
1d:ef:15:bb:92:95:f3:6d:07:55:24:ef:5e:63:39:
10:74:f1:33:ed:46:dc:bf:06:e6:ec:cc:3d:46:bb:
2b:ba:23:c7:89:ee:85:65:5e:48:9d:15:21:2b:2d:
3f:06:4c:8a:8a:db:f0:c6:fe:3d:d4:b5:5b:94:53:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:5D:BE:A7:6C:F2:CE:C7:30:30:36:4D:C9:B1:74:16:34:07:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:3e:f4:ed:33:3c:bb:38:b0:5a:09:be:51:55:c6:55:20:6f:
3c:a6:55:a7:d0:38:53:aa:11:22:e3:5b:84:7c:25:1a:4c:82:
70:84:64:06:9c:e4:ad:4d:41:be:96:e3:06:11:9c:0a:2f:c7:
52:53:de:c2:81:9f:ad:3d:a6:ed:4d:c4:79:00:1b:35:fe:88:
21:da:99:c7:28:b4:f8:87:1d:76:c3:11:7a:98:a8:12:63:3f:
9e:61:5e:5d:0a:bf:5b:d9:2d:3a:a2:b3:a6:07:02:ac:48:f1:
c6:93:40:02:6f:c1:84:3c:d2:1d:2c:86:9d:08:46:9b:d8:86:
0b:e8:55:6b:b0:66:1c:d3:66:b8:85:2c:4d:ae:88:be:c6:ef:
3d:fa:97:7e:cf:fd:6f:ea:03:29:64:0d:38:70:a4:9b:ba:fb:
5d:dc:d1:2a:ae:25:57:8d:05:2f:6a:b5:09:5f:8a:cf:7e:6b:
56:a1:4b:57:b9:0d:f8:87:47:8c:ef:80:0c:37:01:f1:3d:03:
6a:47:c1:8e:4e:08:d0:26:f3:0d:41:59:8a:11:ef:3b:c6:1e:
2d:4a:ab:60:7d:ba:5e:b4:cd:0e:39:7e:eb:c1:8a:54:c7:c1:
8e:24:58:63:5d:df:d6:c0:f9:14:17:83:24:aa:46:2c:bf:17:
b5:7e:75:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVdjz75cU8YgNWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk
NzYxMzM4OWYtYTdmYy00ZDlhLTk0N2EtYWU3YzE3ZWI5MDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VZlPiUYJEFCs1F7RzxaBUdHnuFkAnxf/NYp
1X6LdwNbpGbRKSwNY9D4F0PT+zv0Sr9ZeBeZskNLcytaDtii4jAlFqNfPVoBoo0T
XZnHEHrrgL39V34dd6KXNA0HhCcMSOt81pcR6u7IDXgnutjtBUV+P1M/1tcyUK6Z
C5/yvS5EmHA+H8x5TR2NSkl0ph9FToKj2rQ6iavxbxDD9FidrCAJiHz2fzQHOr30
YJ3wwQ9x9L0z7Ct6DLMIvnM8q5Cgbbod7xW7kpXzbQdVJO9eYzkQdPEz7Ubcvwbm
7Mw9RrsruiPHie6FZV5InRUhKy0/BkyKitvwxv491LVblFPtzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNP5Xb6nbPLOxzAwNk3JsXQWNAcMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2VjZjI3NGYtMGJlZC0z
Y2M1LThhMDEtYWE4N2I1ZjNjZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFc+9O0zPLs4sFoJvlFVxlUgbzymVafQOFOqESLjW4R8JRpMgnCEZAac
5K1NQb6W4wYRnAovx1JT3sKBn609pu1NxHkAGzX+iCHamccotPiHHXbDEXqYqBJj
P55hXl0Kv1vZLTqis6YHAqxI8caTQAJvwYQ80h0shp0IRpvYhgvoVWuwZhzTZriF
LE2uiL7G7z36l37P/W/qAylkDThwpJu6+13c0SquJVeNBS9qtQlfis9+a1ahS1e5
DfiHR4zvgAw3AfE9A2pHwY5OCNAm8w1BWYoR7zvGHi1Kq2B9ul60zQ45fuvBilTH
wY4kWGNd39bA+RQXgySqRiy/F7V+dfM=
-----END CERTIFICATE-----
Generated at Thu May 28 17:09:54 2026 by rpki-client