
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa
File: 877abb4a-c6fb-3cc9-82bf-8650167161b6.roa (raw, json)
Hash identifier: z6vXruKAsI16yV3k8bfDYcOJBZ4TMFDACwc+BBdmoZc=
Subject key identifier: 1D:A6:AF:19:67:9D:27:AB:9F:43:C7:0F:28:72:41:CD:84:40:A1:2A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EAFE6FAF0E16F7136FF2CAC40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 98.17.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:fa:f0:e1:6f:71:36:ff:2c:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=d5c58e5c-1248-4485-a2c0-fc685947b5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:93:ce:4b:11:6d:33:ea:49:aa:81:b9:3e:
19:a2:e7:2a:54:f0:b0:a3:91:46:10:5d:a4:93:85:
ea:e2:be:26:95:82:72:25:06:ef:3a:92:8d:ce:ca:
c2:b6:16:9a:bc:fb:67:c4:2f:f7:32:8a:83:67:37:
30:59:a3:7c:0f:46:65:07:8a:73:85:99:8d:5f:3f:
a6:18:a4:48:0c:3c:5c:2b:50:06:59:4d:ab:6f:eb:
9b:09:2e:a0:b3:78:39:ec:7b:79:65:11:fa:4f:99:
0e:1a:89:f7:0b:53:6f:31:17:a4:98:44:38:b4:58:
e1:05:71:b4:c4:88:b9:de:ec:ac:ab:ea:72:03:f9:
60:b3:42:be:4b:28:a4:01:11:05:3c:8c:03:c2:e8:
c5:cd:bb:53:76:a3:3e:93:f8:e0:74:f3:10:15:bd:
34:fc:75:a7:49:5d:bd:4c:d5:fe:3a:99:00:98:32:
c4:48:a7:03:57:7c:cf:36:96:fb:16:2e:b1:e0:b1:
c4:1e:ac:5d:8f:04:93:fd:06:48:06:35:9e:ba:10:
86:40:19:fe:bf:4a:a6:e6:61:30:53:a5:2a:fe:45:
40:ae:13:85:ea:76:40:b1:38:0f:ae:00:0f:b2:d7:
26:30:1d:14:e8:84:e1:5d:c3:c9:e8:1f:bb:7c:59:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A6:AF:19:67:9D:27:AB:9F:43:C7:0F:28:72:41:CD:84:40:A1:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:eb:e2:e4:0c:af:30:b5:58:35:3d:21:93:24:b1:c0:a4:19:
e5:8b:f2:79:f1:b6:67:5a:4f:45:42:82:47:45:28:4d:0d:cb:
65:1f:cc:32:46:1b:73:12:d5:8b:65:e2:2e:52:45:0c:2b:45:
fb:f3:24:98:e7:a5:3f:ae:a2:5a:65:7d:64:44:be:2f:e3:9d:
7e:02:a4:fb:1f:13:ec:72:ea:29:fd:e1:24:a1:54:6e:f4:b5:
39:9d:f3:5c:95:c7:d1:c7:09:86:4f:fe:b6:ac:3f:ba:f1:b3:
60:3e:95:f8:bb:d6:f7:94:80:5a:2a:1f:a8:ba:32:5c:d4:bc:
66:be:5a:12:a2:ce:35:54:0c:74:8e:5f:2c:bc:27:82:9b:88:
56:f9:80:f9:4b:03:3b:61:63:88:74:26:6c:de:48:3e:70:da:
81:03:40:90:41:a0:59:4c:ef:ce:fe:a9:e4:7c:54:07:90:90:
4b:dc:6e:17:a6:0e:13:b8:0e:75:86:7a:f0:fb:8e:50:87:3e:
a8:86:cb:f3:7b:92:e0:26:72:a5:1d:39:9a:1c:4b:7a:cf:47:
94:17:57:76:2e:97:6c:cb:0b:04:58:00:f8:c3:5f:1d:00:ee:
43:ac:c5:61:44:75:04:d4:50:0d:9a:5c:ca:5e:17:6f:b9:e5:
96:3e:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:33:17 2026 by rpki-client