
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa
File: 5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa (raw, json)
Hash identifier: 4U4z/kdNk+8yhzmmP25lJwZumfF5GKqojK7mdFbqePA=
Subject key identifier: F4:4B:DF:C9:86:50:5C:E3:E8:89:EE:10:1C:37:A5:74:82:88:5F:1E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F6C58345B397C27C6CE464700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa
Signing time: Wed 07 Oct 2026 13:00:13 +0000
ROA not before: Wed 07 Oct 2026 13:00:13 +0000
ROA not after: Tue 05 Jan 2027 14:00:13 +0000
asID: 7029
IP address blocks: 209.2.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:58:34:5b:39:7c:27:c6:ce:46:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 7 13:00:13 2026 GMT
Not After : Jan 5 14:00:13 2027 GMT
Subject: CN=e859192e-5faf-4e9a-b327-46826247eb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:46:1a:b2:99:15:f2:5b:cc:c8:d5:32:17:
e4:e4:9b:ad:56:29:81:21:ad:46:69:2f:10:8d:2d:
ba:53:bf:b2:93:fd:4f:6e:dc:f4:0e:a2:90:3d:52:
3b:21:2d:19:cf:0e:97:64:f4:47:9f:7b:2f:32:52:
e6:86:59:04:37:ac:55:76:a4:dc:13:e8:fa:db:ab:
de:3b:9e:01:77:5e:22:17:5f:e3:1b:a9:21:95:e0:
1b:ad:76:12:4e:2d:a0:af:09:e1:2b:f4:d3:46:6d:
bc:37:6c:f9:23:b0:ad:5b:60:3d:9f:1f:e2:a8:48:
41:06:f8:63:0c:0e:53:6b:72:ad:c1:18:fa:1a:69:
9d:70:8b:7d:23:d1:86:c9:14:95:07:9c:18:67:03:
54:8f:56:f2:c1:a8:15:b4:97:3b:bd:b1:8e:a4:db:
ed:ec:5b:ec:b8:2d:bb:cd:22:fa:92:a8:b6:f8:d1:
05:7e:cd:45:8e:47:3a:c4:12:d4:14:ee:47:6d:16:
f0:c9:eb:95:cc:c8:4a:a8:48:e1:21:36:90:9a:ed:
9e:2a:0f:b4:ea:68:2e:ab:4c:2b:86:58:41:e3:01:
38:94:d2:b3:14:0f:ae:dd:ed:50:2d:9e:6e:97:d1:
df:6c:f1:ff:da:59:e9:e0:eb:ba:95:2c:c8:b3:0c:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:DF:C9:86:50:5C:E3:E8:89:EE:10:1C:37:A5:74:82:88:5F:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.2.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:61:82:65:ad:c2:de:95:72:da:f2:91:8f:f3:b0:77:e8:e9:
56:50:61:18:60:5b:ee:ef:2d:24:98:85:1e:36:c0:e1:df:46:
98:9a:67:35:a4:ef:e5:1c:ea:7a:eb:c1:8a:65:a4:4c:ae:f9:
2d:8e:1d:20:3e:5b:68:f7:73:85:79:ac:c8:2b:fb:50:5e:2f:
6a:15:9d:13:87:5c:f6:02:24:f0:99:30:e4:23:ef:a4:2e:23:
ec:02:03:5b:38:11:f7:83:38:b1:5a:a7:21:99:03:01:57:2b:
17:f4:49:5f:21:6f:f0:f6:e6:9f:59:93:b8:3f:0e:a3:81:f6:
3e:ae:34:26:7c:0d:71:3a:14:b5:5e:62:7e:5a:db:cf:73:2e:
63:e5:0d:ad:12:5a:e6:44:ae:f9:30:c3:d9:f2:0f:03:0b:d6:
c7:dd:28:60:ac:12:bc:5f:2c:13:6b:11:35:f0:21:95:b9:32:
51:1d:40:75:8b:98:56:cb:92:9e:a7:ed:e6:ec:80:ea:8f:6d:
f6:c5:17:fd:83:ed:b6:8f:a5:bd:36:a0:ce:48:ff:4c:56:1a:
27:1c:ef:29:a3:eb:f2:37:05:89:04:01:b7:04:a3:10:54:d1:
99:9a:65:d9:e8:ae:eb:88:7d:ce:0f:75:9c:0e:ed:c8:3a:bb:
c9:76:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:04:22 2026 by rpki-client