
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42336d28-126e-3d39-a701-01430f1bcc91.roa
File: 42336d28-126e-3d39-a701-01430f1bcc91.roa (raw, json)
Hash identifier: egFWc2gp1Xl89+d2cMXho/WSUTfXsVdD+PFrP2F+orw=
Subject key identifier: BA:ED:AD:D5:69:29:2D:F2:51:07:43:0F:0E:C1:CF:CA:83:14:02:8D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EAFE6FE3FA236B31D510986E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42336d28-126e-3d39-a701-01430f1bcc91.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 98.16.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:fe:3f:a2:36:b3:1d:51:09:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=6dcc5dd7-4d85-44a5-a040-1e36571b7188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:26:47:d2:b8:58:17:2d:af:00:b2:b1:8d:
5e:36:95:8d:10:8d:2c:89:7e:ee:67:d4:79:9f:6d:
1a:ea:86:22:80:a1:b7:5a:4a:f3:71:e4:b2:f5:56:
23:54:5e:c9:6d:fa:0b:7a:18:03:a7:93:df:c8:be:
6b:56:c9:9c:da:10:23:c6:65:c2:15:ae:35:cf:c5:
d5:ab:1f:1f:38:96:e7:9c:51:bf:4d:9c:53:69:29:
2b:52:6c:e9:b0:2b:6c:80:19:73:7b:f0:52:81:01:
2a:42:c3:ff:3f:8a:42:d6:ab:04:4d:c8:2d:ba:46:
f0:78:71:61:dc:02:c3:07:97:81:bd:93:d5:6b:7d:
d6:33:86:26:58:cc:8a:44:1a:bd:f6:d7:0a:f5:e5:
c3:85:e1:b9:e3:01:81:02:4c:ef:45:d2:56:a9:5b:
fb:5e:78:d6:47:61:25:86:8e:74:74:91:79:bb:95:
f6:13:42:33:ec:12:7d:65:27:88:aa:e9:44:a5:47:
00:a3:d8:83:84:0a:c8:dd:93:56:6a:4a:0c:9b:ce:
a7:79:6b:d0:28:13:a2:26:75:af:c7:ce:22:89:5a:
c6:e1:1a:ea:0a:de:42:d8:19:33:0e:2b:3a:b5:aa:
f4:52:f9:46:68:0e:56:f3:fb:f7:e1:d6:00:7a:07:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:AD:D5:69:29:2D:F2:51:07:43:0F:0E:C1:CF:CA:83:14:02:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42336d28-126e-3d39-a701-01430f1bcc91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:b0:e5:e4:b4:6c:a0:1a:9b:36:bc:78:fe:fb:f1:73:52:c9:
75:06:84:a8:1e:ee:72:47:83:62:38:78:f5:fe:79:a3:b2:ed:
85:0c:03:b4:55:d6:e7:75:63:c2:7e:fe:b4:bf:32:d7:06:24:
fe:2c:da:54:49:79:74:5c:20:b0:75:6d:80:5c:80:0d:f0:d0:
7b:fe:b8:54:a1:cf:b2:d8:cb:02:91:c6:f2:eb:fb:9e:a3:4a:
4a:33:7a:ad:72:4e:35:49:73:ee:13:43:5f:4c:d2:65:42:29:
89:d3:dc:93:82:e6:93:e3:ec:e3:03:6b:a2:81:d8:81:e1:78:
62:88:ed:76:44:58:7a:f4:10:f5:01:05:56:8e:30:a3:fe:33:
6b:3a:80:ae:4d:07:24:4e:38:51:3d:2f:69:b1:72:ab:e4:e3:
92:c2:92:1f:47:46:e5:21:00:58:e6:3d:5c:49:1c:d3:ec:b4:
3c:5c:57:b7:75:1c:08:8d:cb:29:0a:b2:8a:43:ed:46:d8:f3:
33:54:75:b5:17:d2:78:a4:02:96:66:ac:96:15:95:2b:95:c8:
73:d5:51:f5:ed:5f:0d:ec:9e:c9:5c:3f:69:a4:63:78:69:12:
e2:a7:60:c8:eb:c0:5a:ae:4b:e2:1c:ee:c8:d6:c4:83:ff:da:
32:41:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:46 2026 by rpki-client