
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e2dd796-731b-39b6-b703-bef30dc59710.roa
File: 4e2dd796-731b-39b6-b703-bef30dc59710.roa (raw, json)
Hash identifier: L+SzxcDIH2ZGfEj3JhFg0Q0eaTo6TP5YFiBLJQHatGI=
Subject key identifier: EE:F2:DD:44:F4:DB:81:BB:70:0E:68:53:1B:5F:BA:A3:C8:F3:4E:DF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CB3112E1113192D158A581A60
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e2dd796-731b-39b6-b703-bef30dc59710.roa
Signing time: Fri 30 Jan 2026 18:38:57 +0000
ROA not before: Fri 30 Jan 2026 18:38:57 +0000
ROA not after: Thu 30 Apr 2026 17:38:57 +0000
asID: 7029
IP address blocks: 173.186.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b3:11:2e:11:13:19:2d:15:8a:58:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 30 18:38:57 2026 GMT
Not After : Apr 30 17:38:57 2026 GMT
Subject: CN=28d98861-5251-4c7e-8542-f6858fefbc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:68:87:c3:20:c0:e1:da:4c:3d:84:f8:11:
7c:1c:54:48:f6:a6:f8:89:a3:82:ec:87:8d:83:32:
c0:60:4b:4b:9a:59:28:73:38:94:f6:22:f9:31:e8:
a7:9b:88:9b:3e:c2:37:c3:0c:42:a4:ac:ac:ab:02:
33:a7:48:2c:00:2f:c5:7b:77:19:c5:e1:cc:da:43:
dc:a7:3b:01:aa:b5:e6:a1:1a:f7:f2:f9:c7:99:ca:
c5:c5:d4:bb:b0:38:1f:30:c1:00:33:54:59:fd:2b:
cc:ce:69:c1:bd:91:46:93:1e:61:5f:c5:5b:a8:c7:
45:6f:9d:c0:1e:ca:8f:cc:b8:7b:cb:3a:a7:f5:f8:
fd:98:02:82:0a:0e:75:92:e4:ed:84:2d:17:25:3b:
d0:d2:f1:9c:e4:c0:41:6f:a0:5d:ba:1d:ca:fc:03:
07:ef:66:72:20:56:50:3d:38:fc:67:12:2a:d1:19:
be:a3:e0:f4:fc:2c:5e:03:de:d3:38:4c:c9:23:87:
b8:c0:da:7f:43:07:0f:e5:d6:83:d5:89:b4:3c:5f:
18:18:25:35:ee:ea:dd:05:c2:43:71:77:05:5b:e8:
e4:b9:02:d0:2c:23:f7:55:ef:70:d6:b5:15:56:92:
e1:c5:49:5e:74:e2:06:f7:a5:8d:c6:cc:bf:ab:dc:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F2:DD:44:F4:DB:81:BB:70:0E:68:53:1B:5F:BA:A3:C8:F3:4E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e2dd796-731b-39b6-b703-bef30dc59710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2d:1b:00:a7:2a:61:70:41:aa:d0:9b:bf:ee:c5:ff:71:82:
41:25:68:5a:d7:c6:d0:b1:a9:67:e2:0a:8a:12:c9:e3:1d:e0:
f0:f2:38:8e:28:b6:61:d2:30:34:2d:5e:86:73:dc:b7:08:78:
9f:36:6a:03:a0:b4:e7:cf:2c:d5:12:ca:60:20:7e:87:48:53:
7f:20:32:5b:ba:8f:cc:72:af:e1:63:a1:cb:39:30:b4:99:36:
44:8c:22:b3:36:1e:06:48:f5:9e:92:d2:0d:1b:72:46:b6:04:
b6:bb:50:a4:9b:82:1e:b0:07:b7:cb:1a:aa:26:5e:31:0d:d3:
b6:4f:86:aa:70:d2:2e:8f:21:23:40:aa:23:88:91:6c:cd:ef:
ad:24:c5:46:df:5e:b7:ac:e5:fa:07:d7:53:66:c7:14:8d:83:
09:15:a1:48:0a:80:3a:20:00:b0:81:52:32:e8:44:6c:0e:cc:
cd:8d:90:d5:8d:2e:0e:f4:98:29:be:42:18:f9:35:83:97:74:
04:b0:47:3e:7a:6a:3d:6a:8b:df:f2:cb:d1:3d:2d:84:6f:a2:
f5:b3:b4:70:db:11:3f:51:4c:19:7a:7f:7d:a2:7d:23:7d:e3:
39:73:e7:e9:ef:fa:2b:24:a3:62:a6:86:d3:9c:94:df:dd:53:
4d:78:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:40 2026 by rpki-client