
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6117e7fb-7d9b-3ced-b218-995516e7afe3.roa
File: 6117e7fb-7d9b-3ced-b218-995516e7afe3.roa (raw, json)
Hash identifier: RX6GJ2yPSriAAn/0WeqMtmGdWb4bKPC2vl94VGQKt9I=
Subject key identifier: E0:1C:39:6A:F3:BB:76:B8:5D:82:E7:0C:D9:2B:3F:41:CD:DE:CD:C4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D55BA4023ABF0A8ADB267D7C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6117e7fb-7d9b-3ced-b218-995516e7afe3.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7029
IP address blocks: 98.16.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:40:23:ab:f0:a8:ad:b2:67:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=78a1330a-0916-4c83-b22a-b8ad4c62a37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:23:d9:ff:09:8e:b6:55:8a:47:2e:90:b5:
b3:c3:70:ec:b1:9d:b6:9e:64:ed:e3:c9:5b:66:3e:
86:8c:28:00:cb:96:11:5f:ae:2a:be:41:b6:01:79:
7d:f3:09:1a:64:3e:1e:3d:8a:8b:aa:13:4a:31:19:
56:61:cf:a7:b0:c2:da:92:10:4f:06:71:a2:cb:22:
b3:61:b8:de:22:11:d1:33:06:19:6d:68:60:8d:76:
cc:c3:8c:f0:8e:ff:61:0a:22:e5:64:d6:94:6c:f7:
3a:ab:44:60:37:f4:0c:9f:94:ef:79:67:cb:9f:88:
fb:09:c7:d1:c1:d4:ae:7d:2d:45:d3:b8:14:5f:0d:
ce:fe:26:bf:ad:bb:55:00:d3:e2:3e:98:53:7e:9f:
bb:16:b8:42:59:c5:18:20:f1:ec:fb:56:01:0d:15:
dc:69:68:9b:68:78:36:8c:ee:69:7c:8a:0c:aa:5b:
86:9c:86:57:27:8d:60:06:3d:b4:45:e9:1b:3e:96:
b6:c2:26:60:fe:be:ce:ac:72:0a:3f:b6:91:63:87:
a4:e9:19:9c:38:52:2c:41:ac:f2:48:1d:1e:cb:8a:
af:06:06:2e:9d:89:be:71:1a:9f:ea:a3:73:01:27:
10:7c:79:b8:00:e8:4d:f9:90:73:08:a5:a7:9c:ce:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1C:39:6A:F3:BB:76:B8:5D:82:E7:0C:D9:2B:3F:41:CD:DE:CD:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6117e7fb-7d9b-3ced-b218-995516e7afe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2f:fe:8a:8b:de:a5:66:01:43:ae:68:2f:bd:07:ed:23:e7:
27:70:61:0f:31:29:e0:cd:73:fd:37:21:d2:f1:29:95:c8:d3:
43:d8:9e:15:b8:07:b4:8e:4d:b6:5f:c9:90:e3:ff:81:38:a4:
86:9e:c7:1e:66:c1:eb:d8:67:ac:07:44:c6:56:55:a3:21:51:
71:70:ed:31:9b:5c:f1:47:bf:00:70:1d:61:da:bc:1f:4c:a1:
90:72:2b:af:0a:c9:9f:ca:3e:57:1f:8d:69:a4:04:85:a2:be:
d4:91:8d:ad:50:63:65:1d:d5:61:2f:f4:ae:37:34:84:00:92:
6c:f8:05:76:5f:a8:7e:28:62:53:05:7a:9a:3e:7d:7c:b5:29:
98:3b:c7:79:b0:17:6e:d4:ac:98:10:2b:6e:72:ec:1e:91:88:
53:4d:6a:5e:0e:9b:2d:d4:d0:2e:bf:f3:c5:dd:c3:2d:cc:88:
36:fe:f1:72:d5:91:6f:86:76:1a:d4:ae:69:67:1f:08:82:26:
f7:c3:e7:14:50:36:4a:bc:92:f8:d6:32:ff:24:df:a3:c0:41:
21:a2:b1:e9:69:0d:e0:ca:cb:8c:eb:a9:bc:78:5b:3e:8e:bc:
ca:24:8c:9b:c3:f0:a3:24:df:8a:01:9d:c3:cd:a9:4f:5e:84:
10:e3:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:41:14 2026 by rpki-client