
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa
File: 3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa (raw, json)
Hash identifier: LpFmBnAkFvEBpe2nkw0DagnVMy+usb9HAYSiqgbNT2Q=
Subject key identifier: 9C:2F:67:6C:E5:37:28:F5:2C:6A:56:9C:1D:4B:9C:C4:BB:E4:AC:ED
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CF9B7746527F54F630A36D480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa
Signing time: Wed 25 Feb 2026 02:00:32 +0000
ROA not before: Wed 25 Feb 2026 02:00:32 +0000
ROA not after: Tue 26 May 2026 01:00:32 +0000
asID: 7029
IP address blocks: 98.17.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f9:b7:74:65:27:f5:4f:63:0a:36:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 25 02:00:32 2026 GMT
Not After : May 26 01:00:32 2026 GMT
Subject: CN=685cfcfe-a88e-4cc2-96b4-32f862615835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:6d:48:27:40:24:44:ed:77:7f:dc:6b:7b:
a8:64:d3:2b:49:45:d6:b9:e1:56:50:a9:ef:cd:5f:
f2:aa:f5:63:ac:dc:9c:52:de:ee:d5:a6:ac:6c:37:
42:bb:a6:17:11:93:d7:73:3d:f6:6a:e2:90:6f:17:
56:1b:b8:18:ac:86:8d:a7:44:97:27:19:5f:21:61:
87:63:fa:7e:2f:90:54:46:33:92:25:57:61:98:f3:
28:46:b2:0d:ef:20:1b:62:42:dc:be:ce:a7:a7:b8:
71:a2:ee:9d:48:c8:c5:0a:43:27:0f:67:8b:1a:f6:
21:3b:45:ba:e6:62:ab:0d:22:4b:85:7c:cf:7d:80:
01:bc:91:52:df:9d:22:73:df:08:7e:72:7a:49:e3:
ae:7c:c8:c8:75:13:b2:a2:5e:66:b8:4f:86:d6:d2:
e8:33:d2:46:1e:6f:5a:24:b5:0d:b1:36:16:d3:80:
71:b1:ec:f7:33:49:dc:89:ab:12:bd:d9:7b:42:31:
00:9f:a6:9b:3f:4e:c4:6b:0e:65:1e:a1:70:e8:d7:
ef:eb:9e:5b:da:65:7c:ec:fe:dc:90:a1:cc:4b:ab:
57:19:58:37:cf:fd:33:a0:2e:db:05:f9:d5:f5:51:
e6:a8:32:25:8e:0c:21:33:39:5f:b0:e9:39:bb:22:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2F:67:6C:E5:37:28:F5:2C:6A:56:9C:1D:4B:9C:C4:BB:E4:AC:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ecf274f-0bed-3cc5-8a01-aa87b5f3ceee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:72:9e:58:ba:38:38:25:bb:50:0c:dd:84:08:e7:30:88:50:
d2:d8:0d:98:ef:91:86:79:d0:45:0f:50:f4:ec:89:b1:d8:45:
ae:43:fe:0b:26:3d:90:99:fb:7b:84:00:42:54:75:e2:cb:f2:
27:02:6e:7a:93:38:cf:b7:77:83:9d:ba:0f:6f:db:ae:78:1b:
8b:7f:db:1a:59:31:4c:62:49:90:27:1c:04:16:58:9c:0c:0a:
44:32:68:ca:bc:15:e1:73:b9:e3:f0:8c:85:32:b3:7c:33:07:
da:85:49:66:f4:e4:01:a2:29:a3:cb:59:58:62:b5:9b:8e:6c:
e5:f1:92:f8:b6:92:b7:66:15:4d:eb:7b:fb:72:6e:19:0b:6c:
c5:b5:fe:88:01:9e:f5:9c:31:b9:ac:20:fa:98:8a:bd:6b:46:
06:d0:d5:e9:85:41:12:78:d3:b8:17:7e:fb:80:c0:99:ed:ec:
1d:e9:4e:3c:fc:84:e5:b8:7d:96:f0:a2:27:f9:d5:5a:d4:d7:
d1:7b:04:b9:db:8a:67:d7:96:67:b9:b2:4a:53:b0:ae:3b:18:
32:b2:93:a8:15:e9:89:ea:8b:a5:b1:67:e4:f0:d3:a5:9a:86:
c4:4e:80:e1:50:96:44:b6:3e:c2:85:21:21:ae:52:54:27:11:
0b:e6:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:29:05 2026 by rpki-client