
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80fafb82-827a-3c74-a085-14686e70fb4e.roa
File: 80fafb82-827a-3c74-a085-14686e70fb4e.roa (raw, json)
Hash identifier: cUyH8fmvvOmTFLfZABHXRKJnH2uP89pD5hEFgDOUG2M=
Subject key identifier: 0A:88:72:67:A9:61:31:FD:93:0E:AB:C5:0F:A7:DA:76:E7:B2:AB:6C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F0242388BF8EA6FB390B5D700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80fafb82-827a-3c74-a085-14686e70fb4e.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 7029
IP address blocks: 75.89.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:38:8b:f8:ea:6f:b3:90:b5:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=57b29016-a0e5-4eb3-b92c-6a3f7e4dd25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:51:d7:60:50:dd:e6:8e:ac:9c:19:56:c2:
6a:f1:ed:d8:5e:fb:0b:0c:5e:47:bc:0f:68:1e:28:
ee:fb:e4:ca:2f:ba:9d:6f:79:89:72:ea:6b:c4:d7:
b0:62:75:35:cd:d2:08:09:1c:1d:5e:c9:af:c1:e2:
7c:6f:ae:e2:40:cb:c0:99:46:03:75:94:b5:65:16:
e8:7c:e5:43:a8:75:59:fd:6d:57:3d:27:dd:0c:42:
18:74:36:f0:8d:44:89:a4:cf:84:dc:c8:8a:f0:85:
88:11:1f:7f:38:82:e4:fe:17:23:9b:64:aa:cf:e8:
e7:e2:e3:ae:37:3b:35:31:12:78:29:23:ef:e8:65:
01:4c:2b:0d:c1:88:c7:0c:cf:86:bb:ec:e0:3a:99:
35:db:a0:95:cb:b4:e8:22:a0:61:fc:de:54:aa:fb:
5b:7a:31:83:de:25:c4:6c:e3:0f:2f:1d:96:18:3b:
cf:7e:9e:96:37:23:1e:29:50:0c:0e:83:ec:c8:4d:
0e:60:50:93:e7:20:d6:8e:4d:a4:fa:fe:c5:3c:3c:
76:26:29:92:3f:ff:65:a8:5a:3c:4f:cc:f8:a4:8e:
76:cb:f6:69:5e:3f:1c:db:e5:a2:ea:ae:d1:0f:86:
72:64:46:e8:b2:ce:6d:e7:11:ca:05:24:a7:d3:5a:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:88:72:67:A9:61:31:FD:93:0E:AB:C5:0F:A7:DA:76:E7:B2:AB:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80fafb82-827a-3c74-a085-14686e70fb4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ec:fd:21:6c:79:69:a6:ac:e9:b5:98:3f:01:1d:07:24:b2:
76:f7:65:b6:a9:a3:80:99:9a:5c:50:42:92:83:4a:8c:ee:16:
bc:b3:6a:f7:6c:e5:3f:a9:98:6b:16:dc:13:02:12:28:e9:2a:
63:97:f8:0e:58:1b:a5:94:69:a1:09:12:38:ae:68:17:b8:51:
f2:c4:d4:39:40:a9:70:5c:97:39:ff:59:ac:c6:60:15:e9:40:
54:b0:8c:e8:0e:af:79:56:04:86:60:6c:6c:80:b4:20:b4:dd:
57:8d:c6:e6:bd:15:de:2a:f1:98:bb:8e:33:b7:34:7d:6f:9c:
21:42:bc:8a:e4:5d:a3:11:2b:ad:a1:a2:7d:9d:20:2a:c3:16:
27:27:8b:5f:02:93:ee:fd:a1:d3:97:68:f5:38:68:db:a4:c6:
aa:19:c6:74:40:c9:f2:61:7b:86:1f:5d:e8:c8:b2:63:2b:0e:
82:70:c4:cf:25:38:d0:17:ca:4b:05:36:ad:a6:1f:ea:a7:ae:
b2:1d:5c:2b:a0:42:08:90:fb:96:3a:89:25:24:51:09:d6:11:
d6:85:ae:d1:80:d3:e7:80:25:de:80:4a:73:43:32:fa:f7:c9:
5e:ca:27:e5:07:b1:19:3a:94:68:fa:8b:67:6b:9f:6c:ad:3e:
4a:72:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:43 2026 by rpki-client