
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b9b73ea-c7d4-3fa3-a75d-a619d96ac8ec.roa
File: 8b9b73ea-c7d4-3fa3-a75d-a619d96ac8ec.roa (raw, json)
Hash identifier: U4iDFvcb8NzZxLtFyDwRVfN6uW9rKLhUwChR4C9lERY=
Subject key identifier: 5B:82:0B:C5:D4:67:1F:DA:CB:79:88:8B:E6:87:FC:12:D7:1C:40:C8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E2D9F43C046899EC2B1638500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b9b73ea-c7d4-3fa3-a75d-a619d96ac8ec.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 7029
IP address blocks: 173.191.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:43:c0:46:89:9e:c2:b1:63:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=f976cd30-d4ca-46ab-b705-a7a29145dcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:ac:c2:61:b9:d7:02:00:18:18:7e:3f:f0:
bf:96:43:ed:63:a5:d4:cf:06:b5:77:db:49:81:40:
2b:66:ec:ca:f2:a6:3c:a0:b9:23:a2:0a:79:cb:4c:
ce:1a:fd:57:0c:22:7c:93:74:37:bd:c5:62:69:4e:
c3:4f:94:5a:69:0a:d5:64:01:c0:3b:94:2f:d8:30:
4d:1c:b2:9c:39:90:28:db:bc:a3:2f:40:6e:d3:03:
e1:93:3d:20:a6:d1:73:3a:ec:e7:5e:f5:ca:77:3b:
f6:d7:a2:c5:2c:03:14:96:b1:de:b8:b0:3d:85:d7:
08:64:61:43:b2:7d:da:b5:11:02:a7:de:2f:59:bd:
7b:4b:f1:a1:c8:ca:83:ea:9c:d3:98:32:e8:91:10:
f8:4b:5c:ec:03:79:6f:a6:96:5e:09:d1:7b:d2:1f:
51:bf:61:06:95:1a:f7:12:60:de:70:1f:4e:c5:7d:
fd:49:5f:2d:71:96:69:4e:8a:02:c7:6d:60:26:1c:
35:bb:a0:84:c1:52:c4:45:f6:a5:bd:3e:6c:b3:f0:
20:3f:bd:42:68:19:5e:f3:76:75:81:39:b1:57:41:
7d:3f:e6:8a:5c:ad:b7:5a:1f:b1:86:1c:a4:1c:34:
f6:c4:72:49:45:8c:d0:99:0f:33:9a:02:34:e9:84:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:0B:C5:D4:67:1F:DA:CB:79:88:8B:E6:87:FC:12:D7:1C:40:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b9b73ea-c7d4-3fa3-a75d-a619d96ac8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:0b:a3:5a:3e:2f:85:e4:75:dd:35:47:16:bf:e3:89:6a:1d:
bf:39:b0:b4:7a:37:14:bb:7c:07:2f:83:3b:b3:df:e1:b3:26:
5e:ca:92:cc:ed:b8:92:50:da:9a:4b:2c:6f:ff:1e:00:6a:10:
26:f4:a6:40:83:eb:ce:b2:99:c0:92:08:87:06:2f:80:b0:66:
95:62:c0:7b:47:95:b4:8f:38:1f:c7:98:2d:75:e7:ca:30:f4:
21:e6:5a:a7:84:93:1a:6a:90:39:6c:42:17:f7:14:ea:43:ad:
f2:28:30:d1:b3:ff:d8:e9:e3:e1:bc:af:67:08:e3:f5:8c:4e:
aa:d5:f3:a3:7d:09:26:6a:81:65:e8:a9:07:ee:33:90:d3:19:
c0:67:64:73:17:09:c5:ac:60:29:df:d7:6b:6b:fa:71:e1:c1:
13:a7:94:c2:f4:f5:1b:e2:15:e5:5f:a8:03:e6:a5:33:b6:db:
b6:59:48:9f:90:a3:43:59:cd:94:89:82:2a:45:ad:9c:0a:11:
d4:de:4b:69:79:5a:ab:26:76:9a:d0:77:fe:89:7b:63:c2:0d:
df:ae:5e:13:90:6a:3d:02:25:97:be:47:df:7b:78:a5:bd:b4:
ce:83:cf:83:7e:d2:3d:b8:3b:bc:6a:e4:be:cf:79:78:6a:d1:
85:47:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:50:17 2026 by rpki-client