
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa
File: 8b432e27-f978-3a71-b9d3-3a44510323be.roa (raw, json)
Hash identifier: zTXWf4Nya4UuJiJSaBD+08H2Z+rfZY8XK1PQzBz+IP0=
Subject key identifier: 80:A2:99:0A:38:52:62:35:31:69:64:CB:52:2A:47:C4:20:6D:FE:38
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CF9B796DE91F077810B235880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa
Signing time: Wed 25 Feb 2026 02:00:32 +0000
ROA not before: Wed 25 Feb 2026 02:00:32 +0000
ROA not after: Tue 26 May 2026 01:00:32 +0000
asID: 7029
IP address blocks: 71.29.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f9:b7:96:de:91:f0:77:81:0b:23:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 25 02:00:32 2026 GMT
Not After : May 26 01:00:32 2026 GMT
Subject: CN=0ab5344d-a6ec-4101-942e-3e518c81ae24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:d3:4d:2f:98:0f:57:93:28:2c:45:75:75:
7f:da:c6:81:e9:3f:8a:6d:32:4e:26:33:55:b2:70:
12:57:55:99:d5:ad:b0:de:6f:ec:2f:51:bd:8e:7b:
52:bb:ad:24:2d:f3:fc:bd:5c:78:3e:d3:ce:40:1e:
b3:92:77:50:be:bf:f9:6f:14:2c:3d:40:8f:1d:9b:
c5:03:6a:9e:51:6b:ee:95:e1:49:55:ec:3d:0a:41:
9f:7c:61:18:86:21:64:ff:67:51:ab:1b:59:1c:75:
a3:d2:2a:fb:1f:39:82:97:54:56:ee:cc:28:74:0f:
6b:47:6e:66:86:3c:33:e1:f9:44:8d:0d:f7:60:74:
b0:35:7c:cb:f2:32:b5:dd:a5:85:3a:39:3a:09:5e:
47:45:77:f9:46:b0:6c:ca:73:09:fb:3f:08:d9:29:
78:45:56:b6:e6:60:ab:2c:33:37:5c:8c:7d:6c:e2:
d1:a3:f2:2f:47:e2:bb:57:71:a9:1d:3e:f6:5b:d7:
51:15:e0:4b:d6:bb:ec:7e:c2:de:11:da:b4:fc:8d:
78:0a:f0:62:f4:1c:9a:b5:d9:af:f5:8e:13:3f:8f:
03:ba:91:08:a2:c7:54:2d:04:19:9f:35:a9:8e:10:
0f:aa:3e:4e:a9:13:e6:20:09:6b:ba:e8:d4:a4:00:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A2:99:0A:38:52:62:35:31:69:64:CB:52:2A:47:C4:20:6D:FE:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b6:ce:ce:b3:96:cf:95:03:d6:3b:61:79:31:46:53:68:7d:
1d:c2:eb:2f:b9:bd:6b:1e:8d:55:94:72:0d:93:5b:f1:b6:ac:
46:a2:2c:25:3a:fc:c3:78:4f:d4:32:7b:22:fe:42:85:eb:c6:
e9:9a:67:3d:6a:f9:b4:f4:39:5c:e5:c1:23:27:11:42:38:99:
b6:b5:ec:73:3f:59:85:f7:58:3c:dd:46:64:2e:d4:aa:88:cd:
1c:48:d0:fc:54:6b:1d:01:fa:76:37:9e:74:6a:f0:23:6c:4b:
51:0a:6c:ae:bf:23:8a:75:92:ea:0b:c5:d9:bb:95:60:bb:fa:
7d:bf:de:de:fe:28:88:b2:c9:d8:0f:96:b2:2f:26:89:8a:39:
95:fd:49:e6:0d:cc:32:6c:7d:1a:f6:72:e4:e3:e0:a0:f2:9e:
e4:a8:86:bd:f1:a0:ec:32:f2:5a:f6:56:58:13:8d:2d:2f:b0:
3f:58:3d:f4:8c:f8:8c:b8:39:3d:fc:80:30:62:1c:9c:cd:1d:
fa:88:34:d5:25:1f:c1:65:6d:24:ee:c4:70:06:74:4a:c0:75:
64:3f:f3:b0:4c:9c:79:d0:b3:6b:bd:25:ea:14:be:22:34:8f:
1e:a5:26:fb:fc:5c:d6:6b:68:92:b7:7c:52:b4:ac:59:b8:23:
ed:63:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:34:48 2026 by rpki-client