
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa
File: 8af95620-011e-3ede-9167-cda01e18c471.roa (raw, json)
Hash identifier: j92vMEzqC2/2vLAq9wewcym8NlxJLAMl1ma9DfpLOs0=
Subject key identifier: EF:E4:5E:33:9C:4E:BC:A6:B5:2C:0D:31:C8:B7:0F:50:F3:45:B8:DE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EBB11C0F5271458C66FDF94E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 69.40.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:c0:f5:27:14:58:c6:6f:df:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=88e0b23b-1ebf-423c-97f0-0716d7f6f4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:d5:c0:25:99:66:c3:47:db:ca:03:fb:ea:
61:66:5c:47:40:10:75:34:d5:93:7b:2e:88:10:37:
66:00:4a:b9:71:e7:32:4f:31:b9:09:3d:ee:6f:4d:
8c:ec:ed:88:c0:1d:50:9b:57:fe:cf:e3:a8:9b:0e:
58:26:5d:f7:3e:69:9b:1e:15:d0:09:91:bf:8d:2d:
56:0d:4a:d9:14:fb:47:57:e9:33:e4:47:d0:a3:1d:
bc:5b:fa:4a:42:f6:4f:2d:71:aa:74:54:d2:83:d8:
14:4a:1c:fc:71:d3:ee:35:3d:38:df:8e:97:b0:a4:
de:4b:3c:ab:c3:e2:e5:e4:88:a6:f6:d8:28:85:ec:
95:d4:b3:09:64:7d:1c:ea:a3:13:45:d2:8b:7c:7e:
a2:52:7c:a5:85:0c:37:6f:59:01:f2:df:81:d3:60:
8a:8e:d5:bb:e1:24:ab:2d:56:92:fe:32:6a:3c:21:
08:46:2d:54:e1:09:d3:5a:28:47:f3:6d:17:b9:c0:
75:90:b5:25:f7:9b:ad:99:c8:2b:33:1a:2b:39:d7:
0f:b4:27:36:e1:1f:26:f4:af:15:fd:f9:b5:f9:8b:
9d:e5:2e:f8:47:76:ca:42:27:4d:ba:9c:01:bc:13:
78:78:e1:12:ee:ee:8e:49:97:de:43:72:b2:5f:3e:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:5E:33:9C:4E:BC:A6:B5:2C:0D:31:C8:B7:0F:50:F3:45:B8:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.40.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:08:50:c6:7a:87:a3:83:2a:ef:fe:fc:a1:53:0b:74:c4:a4:
64:b7:b8:2b:04:c8:bc:de:81:46:5f:7f:6a:73:61:66:f5:f5:
e4:6d:3e:f6:3b:40:82:6f:48:d3:89:23:04:e7:cd:79:98:c7:
26:61:37:e8:45:ee:ad:f1:ae:82:aa:72:64:aa:e3:ba:aa:80:
6f:6b:39:f3:ea:25:f8:08:c5:85:e3:cd:9d:62:18:b4:89:e1:
42:9b:04:16:ed:49:64:77:d5:26:1e:6d:42:ad:2d:8b:76:28:
f6:6d:4e:f8:42:60:a0:81:81:34:9c:c3:fb:e0:5e:3b:61:32:
a1:63:2a:9a:31:fb:8f:56:db:c6:ce:33:49:07:2a:c0:74:c6:
6c:4d:76:7d:08:43:95:b3:6a:3e:7d:6d:a3:5e:0d:b8:42:c1:
58:dc:93:d1:7a:ea:53:fc:a2:cf:50:aa:0d:33:4a:36:de:86:
6e:af:ca:88:bc:3f:80:71:29:ea:87:89:3b:2f:1c:0f:90:56:
3d:99:90:a3:a7:76:b1:43:5d:f7:1e:28:6a:a6:cd:3c:b7:ab:
c2:85:00:ad:bd:4f:f0:4e:16:1d:8d:0d:a5:58:6f:c4:33:50:
7c:12:66:3d:ff:ac:95:c1:5d:0d:f6:df:33:a1:23:5b:1a:24:
af:89:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:38:48 2026 by rpki-client