
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e32e510-f5bf-3b2b-939f-b3844414f23c.roa
File: 4e32e510-f5bf-3b2b-939f-b3844414f23c.roa (raw, json)
Hash identifier: dR4lLRyT4CcAb1aqZ8qRAmXQ1kLmtXdYQZ2OpIL1DcI=
Subject key identifier: C4:04:CF:51:6A:EA:29:3C:D0:34:19:1D:9D:23:41:23:53:20:FE:91
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CFC823C33E764AA71303A7940
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e32e510-f5bf-3b2b-939f-b3844414f23c.roa
Signing time: Thu 26 Feb 2026 02:00:32 +0000
ROA not before: Thu 26 Feb 2026 02:00:32 +0000
ROA not after: Wed 27 May 2026 01:00:32 +0000
asID: 7029
IP address blocks: 71.31.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:82:3c:33:e7:64:aa:71:30:3a:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 26 02:00:32 2026 GMT
Not After : May 27 01:00:32 2026 GMT
Subject: CN=c0e07411-4fb1-43ad-b281-d08e00e724c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:8f:17:8e:7c:d0:94:33:48:d8:3d:2d:1e:
34:d3:9f:17:43:3f:36:c0:18:dc:c5:b7:a1:c2:f1:
44:47:5f:b0:82:f1:4f:be:6a:88:9a:14:f6:15:aa:
a5:2a:db:02:8b:bc:37:b4:0e:a0:d4:40:e3:ce:50:
b4:c4:25:1a:b8:da:28:41:3f:d7:93:ae:28:ce:cd:
f6:2b:12:bc:18:f5:05:f7:1a:86:ef:d1:2c:76:84:
79:be:56:61:e6:12:4c:69:a6:f0:3d:4f:6d:93:93:
d6:78:d5:d6:ca:51:fc:1e:5c:d9:d3:3c:c9:34:f3:
1f:7e:3b:af:89:14:18:0c:ef:08:48:89:4f:cd:64:
54:32:10:37:f2:9e:69:cb:4d:49:75:0b:59:f8:06:
a6:ec:a7:d1:5c:37:33:9a:07:d2:e8:d0:fd:67:7f:
bf:da:ec:52:2a:d3:49:bc:e7:4e:80:c8:93:55:da:
95:eb:6e:df:fc:54:34:4f:d6:f3:d6:cd:ee:04:82:
2c:dd:cd:9b:01:29:21:50:87:8d:7c:c6:75:45:66:
cd:cf:51:86:c2:43:98:d0:df:c7:ba:37:16:11:a0:
47:cc:47:55:e8:be:02:64:51:64:ba:5e:3d:d1:16:
60:e6:38:e2:21:43:f0:a9:11:2b:9d:ef:62:2e:d2:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:CF:51:6A:EA:29:3C:D0:34:19:1D:9D:23:41:23:53:20:FE:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e32e510-f5bf-3b2b-939f-b3844414f23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:a1:19:17:a4:bd:f3:f3:39:41:95:35:f6:48:38:1d:ef:62:
58:30:c9:e9:0a:39:29:d1:84:5b:be:9d:ea:1b:d2:75:5c:03:
04:2a:b1:ab:f0:7b:a6:b3:64:4d:5b:37:fb:4c:e8:88:a4:cd:
74:bb:4b:ca:30:63:9f:9b:6e:56:09:d9:98:ac:54:b1:62:db:
fe:4e:2a:19:c6:5c:4d:74:f8:de:b3:6d:0f:ed:3e:ad:19:d2:
64:a8:23:38:11:36:bb:38:01:36:f4:a0:24:e0:5c:79:6e:d3:
59:b6:b8:10:41:38:1c:45:00:42:da:da:22:f4:a2:f8:54:39:
ad:fd:9d:d0:90:0d:02:b0:7f:15:9a:af:2c:87:14:83:29:9d:
62:39:f0:44:c5:b7:ce:e3:38:6f:03:ba:13:34:ec:e8:86:9b:
14:04:ca:fa:3f:ce:50:ac:09:a7:8c:ea:89:c9:78:28:17:75:
d2:50:64:18:88:c5:3a:29:02:65:34:af:a6:c5:b4:14:94:3d:
95:56:ed:85:ee:47:ef:94:aa:8f:0f:91:8e:7e:7e:e3:be:78:
ac:79:7f:bd:b8:bf:d7:3f:24:dd:fe:51:6c:51:77:b2:29:39:
b9:f6:c2:e2:38:ac:27:57:cf:eb:6e:dd:61:49:81:10:7c:06:
18:fb:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:33:12 2026 by rpki-client