
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e8ac31c-4fa1-39bb-b6d5-3a9c2b05ace8.roa
File: 6e8ac31c-4fa1-39bb-b6d5-3a9c2b05ace8.roa (raw, json)
Hash identifier: GXob4BV4wDbNChS9cL3xbWuT3X0eaFan+hzVOgD3P20=
Subject key identifier: 47:BA:F1:A6:37:87:A5:9F:2D:F9:D7:71:CE:2C:72:DD:35:F9:00:0B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EAE819505FBF3CCE624D52300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e8ac31c-4fa1-39bb-b6d5-3a9c2b05ace8.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 7029
IP address blocks: 98.23.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:95:05:fb:f3:cc:e6:24:d5:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=4778e085-ee3b-4eb6-b379-7729e511f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:22:4b:d8:96:ac:d9:ae:b0:d3:b7:2f:be:
c8:f9:75:bc:df:a1:8b:a4:8b:01:9a:80:bc:d4:c1:
39:0f:79:5e:85:df:4d:62:a1:e2:2f:58:f9:9f:b6:
3f:1f:6b:24:86:19:c1:5a:c6:ca:f6:c9:0e:52:68:
5d:1d:57:73:12:e9:1d:06:c0:66:4d:25:92:b1:58:
1d:b2:1b:d2:8e:c1:f9:0b:29:56:05:a4:b3:10:4c:
f4:90:2f:9f:74:5b:fa:f7:b8:a5:5b:6b:73:09:cd:
fb:a4:07:cd:ac:30:ab:51:7d:16:cd:72:7f:f9:3b:
5b:01:6c:e8:ef:63:12:2d:ce:d8:3e:f7:f3:22:3b:
6c:2a:26:4c:68:41:77:81:8d:e4:25:b7:d5:87:38:
22:f4:e7:ec:eb:21:ba:6e:fe:2c:9c:d1:19:81:bf:
70:6c:35:b0:91:f4:f4:ce:83:75:53:47:fe:6b:49:
7d:15:a7:ed:f8:16:90:8b:0e:39:3a:91:d1:72:f6:
f7:8c:72:c9:3f:86:19:73:15:bd:1e:2d:d0:c2:9a:
39:46:38:68:ab:c1:dd:0b:9e:37:01:fc:dd:ea:d1:
5d:30:f0:1f:40:a1:81:4f:3b:b7:3d:38:36:55:95:
3d:18:13:75:13:3b:bf:24:0d:43:45:aa:09:33:76:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:F1:A6:37:87:A5:9F:2D:F9:D7:71:CE:2C:72:DD:35:F9:00:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e8ac31c-4fa1-39bb-b6d5-3a9c2b05ace8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:9b:b0:18:ec:35:af:06:36:1e:58:f9:e7:19:9e:32:24:d7:
1d:04:f3:ca:40:b4:ba:10:b2:80:d5:c7:cd:3b:cd:3c:9d:4d:
18:8c:a3:10:fa:78:16:d6:ac:3d:2d:19:b2:ec:99:a0:1e:a1:
ce:c1:62:d8:88:59:81:c9:a3:7c:9d:d8:6a:c4:ee:2b:c6:6f:
b5:18:e7:e9:4a:a2:4b:ed:8a:9e:ec:84:20:2c:03:21:a0:f8:
b7:40:94:da:53:41:8d:0c:90:34:80:06:83:39:1e:97:e5:b7:
fd:ed:e9:cf:b8:2a:1e:56:60:f5:fa:dd:c4:03:70:37:55:80:
e2:a3:13:82:79:83:b4:8e:bf:87:1b:e2:1b:b8:ac:0a:7f:81:
85:f9:e7:42:74:a0:66:69:a5:04:24:fa:58:71:bd:d7:d7:ac:
64:4c:48:6f:bb:b0:fe:7b:1d:ca:e3:bb:66:f7:4c:cc:f4:96:
04:87:80:99:26:d6:b2:91:51:16:de:df:55:f3:61:fc:18:51:
7d:bc:9e:35:a4:49:1c:9e:1c:66:c3:5c:98:aa:c9:3c:66:21:
67:4e:fe:db:a3:8b:69:fc:f0:6b:46:68:ac:d9:7f:0f:b2:c0:
87:ce:49:a6:7e:e7:64:cb:a9:8b:a2:02:60:c2:15:c2:4f:26:
a9:00:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:49:27 2026 by rpki-client