
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa
File: 54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa (raw, json)
Hash identifier: otkrXl+Kix7Guq/rpKYr/5mYFTpFgn1901jYU+ggxmw=
Subject key identifier: BC:68:02:BB:D2:58:D2:74:6C:8A:B0:A3:E8:47:5A:A0:78:5D:48:05
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DE15070B92E98CBC3389C7940
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa
Signing time: Tue 19 May 2026 01:00:24 +0000
ROA not before: Tue 19 May 2026 01:00:24 +0000
ROA not after: Mon 17 Aug 2026 01:00:24 +0000
asID: 7029
IP address blocks: 66.32.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 30 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e1:50:70:b9:2e:98:cb:c3:38:9c:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 19 01:00:24 2026 GMT
Not After : Aug 17 01:00:24 2026 GMT
Subject: CN=c0ff1197-2405-42c1-88de-cce1b7fcd61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:46:f8:36:58:ff:f9:3f:58:bd:88:20:e9:
85:48:2e:9d:b5:c6:21:15:4a:70:c0:39:0d:06:7c:
29:98:27:56:06:52:13:85:fc:bb:d3:62:0d:c5:ec:
09:3e:c2:73:33:1c:80:e0:4e:c8:0f:50:cd:e5:2c:
1a:a0:f7:01:1f:55:1c:e4:38:c0:0c:71:8e:92:5a:
2a:5e:cc:46:6d:82:a9:39:0c:cd:7b:aa:5c:5d:03:
37:8b:48:6f:11:6d:6f:03:64:0d:96:79:ea:d5:b3:
7a:e7:49:28:67:63:47:03:2a:0a:87:e6:9b:60:f9:
b8:38:33:e1:fc:e2:b8:ae:23:ab:dc:93:1a:2c:70:
4d:f1:c3:13:b1:e6:88:74:ef:d3:8d:5e:bf:a3:1c:
db:28:08:72:76:b9:1c:47:45:6e:b7:aa:64:7f:7c:
81:5d:45:16:4f:45:a9:e4:a7:56:39:ef:47:6b:ea:
62:bf:e0:cf:72:59:6b:b5:2e:0d:03:fc:af:c9:54:
2a:84:58:cb:d5:2f:4f:6e:6f:c9:85:f6:c1:05:4c:
45:ab:6e:4c:3b:ad:f3:62:f0:da:e4:d2:6c:4b:0f:
f9:25:55:e9:ce:af:bc:f0:f7:2b:90:d6:b1:a3:e6:
45:eb:d6:a7:5f:19:df:e2:8f:64:d3:46:c0:8c:6b:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:02:BB:D2:58:D2:74:6C:8A:B0:A3:E8:47:5A:A0:78:5D:48:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.32.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:41:06:6f:1c:86:dc:7c:37:9e:03:7e:00:90:ab:e4:2d:1d:
29:56:de:15:cc:59:3f:7a:fd:8d:59:5d:1b:04:d4:08:b9:69:
75:60:55:0f:f2:3e:68:ca:81:7d:aa:dc:fa:62:ce:f1:98:a5:
f1:e2:c1:0b:78:38:55:aa:ec:bf:dd:88:ff:de:ba:72:26:5f:
0b:32:df:4c:96:2c:80:32:b2:c2:74:f6:54:bf:fd:97:27:ed:
30:30:3c:ea:16:28:c7:59:a3:81:d6:a8:f9:66:c7:89:ea:9b:
70:5d:3e:75:33:74:66:81:76:b3:ce:73:da:16:aa:15:86:7b:
90:0c:a8:c3:eb:f1:a8:4f:33:02:93:d2:e0:29:9c:a2:68:90:
db:06:f4:ab:fa:06:8b:07:5e:17:fa:46:bf:70:9e:81:3f:12:
d9:00:f3:a0:dc:c7:bc:53:7d:45:c7:31:71:a5:35:71:5b:1d:
59:04:10:7b:1d:7f:fd:73:bb:5a:b7:89:43:5f:9d:b6:4e:6c:
7c:80:fa:89:c9:0f:40:eb:55:23:3c:0a:fb:41:eb:a7:6d:c7:
fc:5c:06:3c:cc:bb:2d:68:de:b6:20:21:e5:d6:8f:96:0b:f6:
44:a2:ca:91:f6:6b:7b:f2:fe:cd:12:6c:28:0a:d8:c4:c4:b4:
54:86:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:11:41 2026 by rpki-client