
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa
File: 8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa (raw, json)
Hash identifier: A+s0BNPLE6DPTiHImZymbJAcirfbAMb8y0ZSUdOj5d8=
Subject key identifier: B5:3C:4D:C7:8A:BA:0A:7D:9B:07:39:9B:D7:A8:E4:C1:49:57:05:47
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E2809BE299C5331DF9DC8BFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa
Signing time: Sat 13 Jun 2026 09:00:12 +0000
ROA not before: Sat 13 Jun 2026 09:00:12 +0000
ROA not after: Fri 11 Sep 2026 09:00:12 +0000
asID: 7029
IP address blocks: 209.2.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:28:09:be:29:9c:53:31:df:9d:c8:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 09:00:12 2026 GMT
Not After : Sep 11 09:00:12 2026 GMT
Subject: CN=7ec0277c-7654-43a8-b491-ae0b12e2bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:f8:74:64:de:4a:0d:f6:f5:82:dd:76:83:
6c:99:45:fb:90:bf:52:2e:45:b3:fb:9d:10:f1:26:
c2:11:31:3b:91:02:78:74:5c:39:3a:79:f4:0e:74:
ef:62:84:7b:58:c9:41:07:77:4e:73:3b:fb:a2:bd:
40:8c:3a:9b:6b:e1:0b:e2:20:d8:3c:10:4c:14:be:
42:36:4f:28:e8:5e:ec:13:10:73:57:94:b8:57:6f:
fc:e1:38:9b:cc:3f:9d:02:2d:c4:b0:ca:df:e7:1f:
67:53:a7:38:36:08:d6:ce:d6:d2:92:e7:d6:df:5e:
e0:14:cb:c2:53:a9:e8:17:f9:6b:df:89:e1:9e:58:
61:0b:3f:8d:34:02:55:9c:1a:85:7b:6f:27:30:c1:
92:7c:9a:e6:a8:2d:dd:19:4c:f9:1c:63:52:af:54:
0c:6e:4b:2f:df:89:8e:4c:8f:d7:61:6e:17:1a:6f:
2c:16:5c:98:8e:a9:d7:bf:21:f5:bd:50:8b:af:af:
81:ae:9e:a3:5f:dd:d8:0d:54:69:78:c2:30:4d:5c:
b4:8d:84:e2:e3:d8:d8:c7:80:42:e9:97:cc:7b:a1:
61:52:4f:58:02:c7:c4:9b:01:08:91:64:8e:4a:49:
39:b5:56:8c:31:e9:22:cb:ea:5a:82:01:48:eb:b4:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3C:4D:C7:8A:BA:0A:7D:9B:07:39:9B:D7:A8:E4:C1:49:57:05:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.2.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:5a:10:1f:44:44:f1:f9:d6:7b:0f:d8:16:d3:82:ae:e7:36:
37:ba:34:df:83:77:79:78:7e:be:9a:9e:b0:13:0f:0b:bf:85:
59:94:19:c0:21:e9:3e:b5:ed:79:72:1f:f2:c1:6b:1c:40:dc:
16:69:4a:e4:f7:98:27:73:ec:fb:9a:b2:de:4c:2e:eb:11:35:
18:32:e7:f2:4a:c6:f1:8d:d3:dd:ac:07:fe:38:9f:22:88:0c:
73:80:b9:81:e5:6c:6c:4d:db:bd:b0:38:3e:e2:61:36:12:75:
83:aa:63:c6:23:ce:a0:d0:ea:77:d5:22:a5:04:55:18:a7:dd:
9f:58:31:0f:9a:bc:dc:3f:25:18:a7:e9:03:a5:8b:e0:0c:8e:
b0:b8:62:50:3d:dc:05:bc:ce:c7:3c:a7:21:06:63:e4:18:c6:
51:17:f2:52:14:9e:60:78:f4:d5:9b:a1:34:5c:e3:f3:a4:b3:
2b:ee:98:ad:59:49:de:ef:b7:07:a3:48:90:32:da:5c:b3:98:
25:32:39:47:59:0c:e7:a1:04:2b:04:84:0d:d6:7d:e1:8c:b9:
94:00:25:98:74:87:2c:02:5a:fb:03:df:fb:df:29:b2:54:50:
69:ce:fe:f7:63:b5:b2:75:a9:20:bc:06:10:49:be:e7:3f:61:
46:46:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:53:47 2026 by rpki-client