
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
File: 5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa (raw, json)
Hash identifier: H3ZGA0Ba1kkF6ymojyZFPuBj7PfBW1vsL8fHSFR2aRU=
Subject key identifier: 3C:AA:9E:48:DD:8D:84:0A:95:A6:56:EB:93:FB:5F:56:BA:3A:B5:11
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CF42227929B419A1FCC92B440
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
Signing time: Mon 23 Feb 2026 02:00:31 +0000
ROA not before: Mon 23 Feb 2026 02:00:31 +0000
ROA not after: Sun 24 May 2026 01:00:31 +0000
asID: 7029
IP address blocks: 173.187.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f4:22:27:92:9b:41:9a:1f:cc:92:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 23 02:00:31 2026 GMT
Not After : May 24 01:00:31 2026 GMT
Subject: CN=67572f72-772e-46ac-b0b0-03510a95ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:f8:bc:28:42:e2:b1:77:bc:ed:2b:6e:3d:
50:47:0c:87:40:70:c8:32:40:9a:cb:cb:ce:8b:f1:
89:2d:e2:c8:53:a6:e5:aa:17:08:c0:7c:3e:37:ac:
b0:c2:d0:10:97:7a:f7:b0:a0:60:c8:62:e1:65:81:
4d:13:14:70:1b:62:ea:61:af:50:55:ed:20:4d:bd:
4b:49:30:a2:3d:89:1a:b4:e9:f0:f4:50:03:3f:5d:
94:52:1e:c9:c8:02:30:7e:39:4f:72:b0:aa:1a:0e:
4e:bf:df:5a:5f:70:cc:05:d3:2d:80:ed:de:c5:54:
4a:61:85:13:cd:a8:cb:36:e7:4c:80:e4:3f:7b:f2:
be:a6:4b:4b:e4:96:c2:1e:a8:8a:0b:2e:50:b4:0a:
b2:43:47:2b:7c:79:61:78:fc:95:5d:8f:9d:ce:bf:
da:0a:92:44:ad:ff:4f:e6:11:db:a8:51:9d:03:36:
12:b1:41:d2:45:e6:67:90:6b:b9:d4:af:70:31:a7:
29:df:4d:5d:8e:c3:8f:5d:14:fa:8f:3f:b7:9e:58:
c9:e1:05:8d:42:24:de:61:5c:95:12:e6:60:e8:95:
99:f2:9a:d8:98:a6:be:db:21:a2:4f:66:8c:44:8c:
52:15:ee:af:0e:47:dd:17:f6:85:22:81:48:d9:08:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AA:9E:48:DD:8D:84:0A:95:A6:56:EB:93:FB:5F:56:BA:3A:B5:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c8:98:fe:47:47:e6:fb:1e:8a:b6:24:39:70:2b:bd:a0:00:
a5:fe:0f:8f:20:2b:3c:fb:0d:35:ce:64:da:9a:c0:df:25:0c:
99:e6:99:49:9d:e3:f8:d3:36:78:2e:9b:7d:bf:0f:df:fc:a5:
0a:40:f9:4a:f4:37:4f:35:4d:79:35:ed:f6:3f:e9:49:2b:9c:
0f:15:f5:24:b7:4f:30:41:af:1e:7b:3d:f8:53:64:56:46:1c:
8f:42:94:fc:40:7c:d0:73:1a:fc:e9:9a:61:e3:6a:2b:b6:61:
1a:8c:51:9b:e9:85:8a:d7:fe:55:71:75:e1:ac:b1:9f:ef:95:
7d:10:1f:74:0d:3c:9a:51:da:b4:25:ee:a1:1f:7d:24:71:f2:
88:7a:ab:30:79:00:46:8e:12:00:5c:e6:8c:1c:fe:ef:b5:8c:
43:52:ff:53:e2:c3:a5:d6:30:74:e9:a8:72:af:4e:ee:5a:ca:
37:aa:41:35:34:4b:04:9e:47:8b:16:a5:20:be:0b:7d:d1:a4:
2e:4f:5d:28:b9:5f:bd:8b:04:5a:9d:57:94:56:41:1a:fd:3a:
15:a8:0e:9a:9b:0d:aa:9d:48:6a:f6:95:d4:ff:35:09:a3:10:
75:56:42:30:45:0a:bf:8f:23:08:ca:46:e9:a0:b7:36:30:ad:
66:28:ca:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IieSm0GaH8yStEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
Njc1NzJmNzItNzcyZS00NmFjLWIwYjAtMDM1MTBhOTVmZmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QL4vChC4rF3vO0rbj1QRwyHQHDIMkCay8vO
i/GJLeLIU6blqhcIwHw+N6ywwtAQl3r3sKBgyGLhZYFNExRwG2LqYa9QVe0gTb1L
STCiPYkatOnw9FADP12UUh7JyAIwfjlPcrCqGg5Ov99aX3DMBdMtgO3exVRKYYUT
zajLNudMgOQ/e/K+pktL5JbCHqiKCy5QtAqyQ0crfHlhePyVXY+dzr/aCpJErf9P
5hHbqFGdAzYSsUHSReZnkGu51K9wMacp301djsOPXRT6jz+3nljJ4QWNQiTeYVyV
EuZg6JWZ8prYmKa+2yGiT2aMRIxSFe6vDkfdF/aFIoFI2QjKHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyqnkjdjYQKlaZW65P7X1a6OrURMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWNlNDRkNGQtMTg5YS0z
MzU5LTkzZmEtOGNiYTdiNDM5MWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXImP5HR+b7Hoq2JDlwK72gAKX+D48gKzz7DTXOZNqawN8lDJnmmUmd
4/jTNngum32/D9/8pQpA+Ur0N081TXk17fY/6UkrnA8V9SS3TzBBrx57PfhTZFZG
HI9ClPxAfNBzGvzpmmHjaiu2YRqMUZvphYrX/lVxdeGssZ/vlX0QH3QNPJpR2rQl
7qEffSRx8oh6qzB5AEaOEgBc5owc/u+1jENS/1Piw6XWMHTpqHKvTu5ayjeqQTU0
SwSeR4sWpSC+C33RpC5PXSi5X72LBFqdV5RWQRr9OhWoDpqbDaqdSGr2ldT/NQmj
EHVWQjBFCr+PIwjKRumgtzYwrWYoyqs=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:31:56 2026 by rpki-client