
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa
File: 4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa (raw, json)
Hash identifier: Ru5AHH6BKL0nv9FY8UI5aicwGriXKlT+gB1HcK7BWF8=
Subject key identifier: E3:2D:90:DB:43:AC:ED:D4:DD:57:15:F3:5A:B9:6A:8B:08:2D:9D:AB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EBB11C15DCB936E3CB64C4240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 173.185.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:c1:5d:cb:93:6e:3c:b6:4c:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=c9bfcf50-7fa4-48ce-8431-ae15ac043bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:da:3b:77:63:58:56:a5:d3:a7:18:c6:1f:
0d:fe:5c:43:cd:19:38:c6:af:25:25:57:be:75:4a:
33:6a:d0:0a:c1:5a:d1:df:f0:41:a5:5f:63:36:0d:
95:d6:45:a1:41:ee:5f:05:68:ce:4a:44:b7:b2:83:
d8:6a:8b:fd:85:96:45:85:d6:95:3b:b0:c5:b7:8e:
fe:ad:2d:e1:df:b3:7f:30:cd:5c:3d:a5:31:81:c2:
b0:d5:63:49:ec:fc:88:90:2c:e7:48:73:4d:aa:37:
de:91:96:b0:74:0b:8e:e2:75:06:95:f8:00:a9:0d:
77:19:f0:b5:bb:5c:73:c8:b3:6d:10:48:21:3d:fb:
14:15:82:66:a9:c8:da:47:e6:99:72:ca:c9:e4:47:
7f:3c:88:fa:3b:06:c2:7c:80:31:c1:9d:f0:07:b1:
ab:ff:f3:2f:05:c1:7d:2d:17:55:c4:d5:f1:60:cb:
1e:d6:98:72:ef:c9:19:dc:46:7c:b0:58:86:75:2e:
d0:44:e0:13:e2:b2:f2:53:37:f3:e7:b8:a6:bb:19:
59:e9:29:8b:5c:14:58:bf:93:6e:78:66:63:92:3f:
ae:25:aa:b8:58:9e:6b:f7:7d:fa:7d:8c:41:78:31:
2f:17:fb:74:1f:6c:62:fa:28:5f:3c:33:81:f4:b5:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:90:DB:43:AC:ED:D4:DD:57:15:F3:5A:B9:6A:8B:08:2D:9D:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:22:10:3e:0b:85:59:e8:12:9c:ca:94:89:56:41:5a:65:20:
0b:63:3f:1a:fa:7d:03:46:68:2f:95:45:35:c7:ac:be:cf:5b:
ae:c7:fe:09:81:d0:09:b0:26:47:72:91:f2:27:36:eb:b5:b6:
4a:c1:8f:52:46:a4:d5:23:f1:ea:2a:d8:0d:fe:85:7f:b1:60:
11:64:ab:ff:6e:9f:8b:c0:ea:fd:4f:6d:78:c5:af:fd:3b:8b:
da:3a:9b:a7:4e:a6:f0:4b:fc:51:6f:96:d5:ae:61:86:83:63:
06:90:38:7b:b6:a0:50:a5:34:b5:bb:42:c7:20:5a:fc:fc:bd:
7b:f5:04:5c:cd:f2:76:72:4e:6d:64:39:c0:5f:7d:a1:bb:f0:
05:31:f5:4c:31:c0:6f:1c:84:5a:f8:74:fe:4b:7d:12:6d:c3:
cf:75:97:13:f8:e3:20:4c:52:8c:1d:f3:9a:60:6f:02:7e:75:
e9:1b:83:b1:13:0d:48:4b:e2:76:20:b8:6a:95:7f:ca:4a:c0:
26:bb:6a:5b:23:f1:39:f9:d2:38:cf:50:b3:01:a9:89:bf:fd:
13:20:79:a4:cb:20:80:a5:b9:79:50:40:62:a2:25:2c:93:a7:
ab:8f:fb:9e:b7:26:34:62:e3:86:d8:6d:32:ba:0c:e9:eb:2e:
47:d9:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:16:42 2026 by rpki-client