
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e9912fe-c007-388a-8ee3-e874128890bc.roa
File: 6e9912fe-c007-388a-8ee3-e874128890bc.roa (raw, json)
Hash identifier: e06SeJFWNIRbh7cGJ3J+SACYZgcC+oclIqUUtbQIDhw=
Subject key identifier: CE:3C:6A:5D:2E:63:DC:7F:62:AD:9E:12:3A:18:57:5E:E4:92:3C:F2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1EAD50D5788B9C666D3A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e9912fe-c007-388a-8ee3-e874128890bc.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 22312
IP address blocks: 66.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:ea:d5:0d:57:88:b9:c6:66:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=fcbea8a7-f4f8-4235-a69a-b87dc0e82238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:a6:ed:c2:60:a2:b2:1c:91:97:48:72:08:
f8:db:2c:37:6b:1c:ae:9a:45:38:7b:7d:44:f3:13:
fe:fc:df:80:11:39:ea:cb:19:6d:3e:8c:e1:25:7c:
5b:89:2d:83:f7:79:a3:95:c1:14:96:52:32:c0:51:
19:ef:2e:5a:3a:d9:f7:3f:5e:22:39:a3:c0:7f:b1:
3b:af:64:32:73:15:81:52:69:88:5f:b5:51:a6:78:
7a:5c:69:1d:36:b7:d4:90:f2:03:f3:a5:64:20:92:
d6:a5:23:fb:5f:48:dd:b5:f9:ba:e4:91:ca:be:d1:
90:3b:b4:79:8f:66:e6:0e:2c:a5:f9:02:ba:bf:90:
fe:1c:88:c2:bf:44:b6:33:e6:1c:cb:aa:87:74:93:
ce:f8:83:94:83:f8:8a:1b:12:d0:1e:2f:69:ae:2e:
90:65:21:c0:dc:91:57:6c:14:ab:41:1a:71:c6:b0:
05:31:43:33:10:ef:c0:d6:23:46:7a:d0:f0:98:f5:
44:1c:64:42:2f:0b:38:3d:6d:87:b5:67:06:c4:53:
6b:71:5f:4f:d8:7c:6c:6d:8c:fb:e6:d7:3b:a3:b9:
b3:ee:4f:5b:1a:98:f2:0c:dc:00:cb:63:11:65:a3:
28:da:ff:59:a8:61:11:97:5b:58:cf:60:8c:b7:94:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:6A:5D:2E:63:DC:7F:62:AD:9E:12:3A:18:57:5E:E4:92:3C:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e9912fe-c007-388a-8ee3-e874128890bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:40:f5:be:8f:b0:56:cd:26:6e:38:0d:29:b5:bd:ac:a4:e3:
f6:52:da:86:2e:bd:50:94:fc:30:b1:bc:d2:94:71:f8:63:c4:
21:8d:a5:84:f1:6d:2d:36:bf:b7:d2:b0:29:d6:73:09:1b:94:
07:f4:46:6b:65:dd:8c:5a:5b:33:d7:b2:81:99:3e:a2:00:97:
4c:54:cb:2f:43:77:76:1b:c8:c7:5d:48:ec:6f:75:a1:cd:6a:
bc:a0:09:ac:c1:c7:b9:ec:eb:5b:49:ab:cc:95:e0:c4:87:dd:
46:4b:2f:60:7a:5a:33:62:a6:23:e1:43:78:3d:6d:e4:bf:ad:
a7:08:9e:fe:47:57:2a:7c:1e:5b:98:80:85:28:38:ec:d9:b7:
f2:86:a5:a8:5f:29:2e:03:80:f4:5c:90:92:89:b0:dc:33:43:
07:90:63:7e:f6:cb:8a:d5:f7:19:29:ae:b6:74:b0:dc:4a:99:
e2:80:b1:4c:3d:6c:81:41:fd:b2:cd:eb:17:cc:6f:85:5f:a6:
12:fa:50:49:0f:a4:40:b5:5a:57:78:c7:fd:03:17:d3:bc:45:
6f:a6:82:4b:12:45:ae:46:19:1b:89:63:7f:f0:8d:81:90:22:
5c:4c:26:91:41:5a:8c:e6:29:a9:9e:aa:7e:77:29:12:f6:0b:
1c:e6:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:02:12 2026 by rpki-client