
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa
File: 9432961b-b9f4-3427-913a-57bfde8f4d9f.roa (raw, json)
Hash identifier: cD/oTE244gUMDo5IkAmmvQhy0r+l7f3jfg1k/0NQFrk=
Subject key identifier: B7:95:4A:D0:98:A1:0A:BA:29:91:E9:8C:7F:D6:65:C7:A4:29:F4:B5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1C8B5A12C266877629CC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 98.17.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:c8:b5:a1:2c:26:68:77:62:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=5124b2a4-5709-4297-8081-22dfafad0b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:a0:0d:cd:77:3b:cf:65:91:2f:74:77:cf:
c5:d6:ef:3f:d1:f3:33:36:c5:02:56:45:af:47:fe:
25:bb:7e:99:94:f2:34:7b:67:35:ed:85:00:d1:5e:
6e:e6:a7:f1:ec:0c:e4:85:83:ba:8b:7c:85:79:6c:
19:7c:de:b9:96:d1:b0:bc:c6:da:b2:6b:4f:7b:d7:
50:76:a6:f6:a6:50:b2:51:a4:c6:ee:1a:fc:67:f3:
0f:03:36:d5:b5:77:9a:ed:97:b1:58:b0:53:11:a4:
7d:47:2b:3f:7b:3d:3f:67:d7:6b:2e:e8:f4:f1:0a:
28:5e:e6:d6:d2:f0:8d:7b:e6:a0:cb:84:11:ff:f8:
35:5b:24:fe:32:bb:84:49:22:01:22:d5:9a:39:c1:
eb:a2:71:af:25:fa:ee:bc:2f:0e:f0:6e:ef:3c:94:
fb:78:de:09:f6:0e:10:93:5a:78:79:30:17:7d:18:
71:30:39:c1:d5:e4:14:09:fb:b8:51:68:a2:0e:f1:
5a:d0:6a:8b:01:73:ad:4f:5d:e9:11:43:05:39:f0:
d6:c3:a7:bd:06:ad:ad:3e:84:a1:fd:81:51:d4:6d:
30:3f:85:57:f9:46:25:66:13:66:87:11:c8:18:a3:
60:8c:bc:ee:67:1a:36:fd:7d:c4:b4:0c:55:03:57:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:4A:D0:98:A1:0A:BA:29:91:E9:8C:7F:D6:65:C7:A4:29:F4:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:56:d9:0a:ed:d4:c6:f2:16:63:55:dd:29:54:07:3b:14:0e:
52:b5:a7:d6:4a:bb:e3:be:48:0d:48:56:0a:89:e3:95:89:2a:
64:5b:5f:0a:c6:c6:80:d4:d1:e0:69:8c:97:49:e8:3a:86:84:
eb:87:60:0c:a9:43:0a:ff:a4:51:f0:60:b1:b6:3f:a9:4d:c0:
e2:1d:52:19:3b:13:a4:f2:7c:7a:52:a9:0f:98:f5:4b:cc:02:
85:a5:2a:5b:b5:5b:48:9a:1a:f6:1a:2b:70:4f:08:b4:d8:80:
d5:92:00:a3:23:07:d4:de:d5:22:fa:93:15:d3:ad:d4:4f:57:
76:2d:ea:4e:c4:24:bb:85:7e:54:e3:62:23:0c:ef:f1:f1:46:
88:e2:83:fc:85:0e:ec:49:6c:01:09:18:e0:1b:a7:15:04:b9:
87:1a:6a:03:c4:9f:3e:ae:d3:b7:5b:e0:3f:70:80:d9:03:2c:
9e:7e:b5:ba:3b:e0:15:78:a3:10:ed:42:77:ef:a5:49:24:a7:
89:f3:7b:f1:fc:39:69:43:2d:58:57:51:37:65:51:78:30:98:
72:db:92:8b:0f:5a:89:75:b3:97:c0:03:aa:c9:ec:68:90:69:
52:89:4e:56:fb:cf:28:8e:71:12:8d:7a:7e:15:b9:e4:62:fa:
3f:44:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:36:07 2026 by rpki-client