
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa
File: 50611b44-0c38-38f6-83d0-f8caa46c2536.roa (raw, json)
Hash identifier: XI2o6Yj+CLvqCuTS/ph4kJP/KiyjQoaliUwcPLS9Fv0=
Subject key identifier: 5B:A5:9B:49:FA:E3:4A:8C:69:13:78:CC:71:C7:6D:42:E7:B3:1A:D6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1E67E4FA79567FBAE9C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 173.188.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:e6:7e:4f:a7:95:67:fb:ae:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=31efc034-7a44-4380-8edf-35f3314a77de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:37:56:d0:b1:f7:06:d4:20:08:34:75:e0:
bf:81:26:c9:43:18:13:d4:b9:e6:a5:87:20:17:d0:
8f:61:b1:0d:e4:76:03:c4:21:5f:18:c7:70:2c:c5:
11:f3:17:68:5d:f3:02:14:a8:93:37:5b:e4:f0:a7:
94:1e:ce:2e:9a:3b:cc:e5:e4:22:b4:a3:78:0b:69:
6b:85:e7:79:5e:0a:9c:f0:3b:21:b8:bd:c4:6a:0b:
fa:1d:e6:76:01:3e:ca:1f:75:26:a9:46:23:c2:30:
27:11:01:17:17:0c:b1:d9:bf:f7:8a:11:ac:b4:e9:
9f:d6:97:93:8a:1a:4f:56:15:b4:96:3e:3a:0b:11:
66:a5:2e:53:0c:73:16:3b:ea:76:4c:22:a1:ff:c2:
f9:04:c1:b8:2d:a3:2d:29:88:e4:a4:32:a5:5f:ef:
68:3b:f0:98:b6:44:b4:bd:eb:8d:15:e9:bf:62:ff:
aa:79:c7:9d:9e:ac:7c:10:64:68:c1:ae:15:d7:98:
83:4f:e8:d3:98:34:35:65:c0:01:87:4b:bc:32:13:
8c:2a:d8:61:47:c5:e3:96:e7:45:c9:e8:ef:44:e4:
a5:b4:6f:46:7c:3a:df:46:7a:ed:36:20:09:18:64:
78:04:0c:de:6b:98:04:43:eb:87:b1:19:cd:7a:33:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:9B:49:FA:E3:4A:8C:69:13:78:CC:71:C7:6D:42:E7:B3:1A:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:aa:c6:7a:6b:7c:35:7c:bf:8e:af:06:10:fe:6e:e6:6b:a4:
a3:48:4c:74:20:aa:68:4f:c8:ed:9e:10:bd:6c:3f:e1:86:0b:
f9:97:21:69:e3:5e:5e:0c:38:a1:c3:84:a7:82:11:e6:83:ea:
3a:9f:f2:3c:fa:2e:3c:6c:89:9b:2c:e4:b2:91:fb:7e:58:76:
c6:2a:d6:ff:d9:b0:e8:5a:62:aa:89:d4:68:85:32:93:c1:c8:
8f:d6:cd:7d:97:27:b1:b6:d3:ba:fa:7a:9b:8b:70:bc:b8:cd:
7d:16:5c:37:f7:51:11:15:65:fb:82:fc:a2:b8:d5:d8:78:90:
9f:d3:e8:ec:29:fe:77:85:44:e4:76:0c:a8:ac:40:27:d3:4f:
9f:44:49:61:00:bd:f5:09:e5:e4:32:47:a2:9c:3f:f3:ef:a1:
fc:af:e8:fd:d2:66:e1:f1:9c:c3:8b:fc:a3:6a:ad:3e:ea:d9:
5a:7f:f9:32:f2:21:1e:9f:dd:26:9e:0b:47:5b:fe:05:29:86:
0c:bd:d9:2e:da:4c:6b:cb:3d:4d:2d:33:e5:48:80:96:86:2d:
b2:d1:91:41:7c:d1:1b:fc:5d:fc:6a:c3:b0:ec:c1:74:97:30:
bb:01:bc:73:1c:aa:28:43:68:85:47:52:9c:40:3c:bc:e9:af:
96:ca:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:49:51 2026 by rpki-client