
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa
File: 971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa (raw, json)
Hash identifier: 4NJIMavMWfH+B64I1tZhYBMQnTVhPr9S+ct/4qkfUV8=
Subject key identifier: BA:D3:F0:45:1A:E7:ED:2B:75:A8:6B:C8:25:73:F1:A5:75:99:54:13
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CC7775936682E00C7D59B1A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa
Signing time: Sat 07 Feb 2026 02:00:31 +0000
ROA not before: Sat 07 Feb 2026 02:00:31 +0000
ROA not after: Fri 08 May 2026 01:00:31 +0000
asID: 7029
IP address blocks: 173.187.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:77:59:36:68:2e:00:c7:d5:9b:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 02:00:31 2026 GMT
Not After : May 8 01:00:31 2026 GMT
Subject: CN=a298144c-b0d6-4bfb-89a0-ef3511774f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:7b:4b:af:c5:f2:2b:4c:ef:77:b7:4e:f3:
6f:2c:85:0c:55:2e:eb:89:a2:15:a5:dd:56:14:a5:
7f:cb:b2:95:b6:97:6a:7d:5e:bd:a5:ba:47:a7:69:
95:e7:b7:ee:e3:d3:2d:3a:0c:58:05:fc:80:3f:1b:
fd:95:8e:62:58:52:b1:d8:b1:62:c5:ac:83:8b:18:
ef:d4:4e:1b:57:14:76:d9:02:81:80:85:37:4e:f2:
73:a6:f7:4e:6a:d0:66:36:b7:08:8a:fd:bd:15:de:
96:01:f4:9f:07:8f:e8:b7:f9:44:68:a4:ce:6a:6d:
a5:f0:7a:95:bf:ec:0d:1e:51:6e:70:b6:f3:27:03:
25:e4:a9:44:c6:ef:62:43:75:10:fe:43:4f:19:21:
09:01:e9:89:bc:e9:08:18:87:38:b1:c9:11:64:0f:
5a:56:3e:a7:eb:74:6c:4e:09:c8:ca:1c:f0:7f:fd:
7f:7c:2a:df:f1:1d:67:c6:50:1e:2d:e8:e5:18:6c:
f8:97:33:ea:a5:5c:b6:3d:bb:b1:f6:c7:dc:d2:c7:
69:4a:9c:e0:55:d7:af:1f:5d:24:ad:92:66:42:3a:
66:80:05:34:31:10:52:97:07:4e:fd:2a:84:31:b1:
74:ef:68:43:60:21:81:77:9d:af:88:f8:be:e1:19:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:F0:45:1A:E7:ED:2B:75:A8:6B:C8:25:73:F1:A5:75:99:54:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:ea:6b:25:35:58:7b:6b:74:52:93:1a:fa:f5:2d:c8:f4:a9:
96:33:68:4c:2b:7a:ae:11:d8:57:2d:fe:97:f7:ed:91:2d:4f:
be:0f:76:80:0c:b2:6c:dd:d8:1d:a3:5b:59:64:4b:d0:af:73:
f1:30:ec:c1:cb:74:e9:21:b7:bd:78:0a:80:22:3f:96:e2:b6:
66:b2:26:4b:de:e0:12:03:f6:52:3b:33:be:dd:ae:5e:a4:e3:
e5:b3:c6:5c:d6:03:a2:f4:72:41:4f:0e:65:f9:f1:af:93:3f:
6e:4c:37:a2:14:5d:8d:f6:5d:0f:31:a5:4f:03:29:49:3c:8c:
ce:ef:0a:10:06:eb:be:63:f9:2b:98:3d:be:5c:f6:28:ed:d3:
ae:e0:27:3f:f8:b7:d9:61:48:1f:79:60:d0:87:62:48:19:23:
58:0f:62:cd:26:ce:bf:59:b2:ac:ff:bf:a3:83:a8:42:7c:a9:
53:17:07:1e:46:31:b6:56:b4:a1:e7:00:c0:21:d8:2a:9e:7a:
90:f1:ff:8f:4c:e7:15:e3:c0:61:53:41:dc:8b:ba:fe:f5:87:
72:85:80:59:31:9f:93:d9:39:ae:0f:c7:b7:85:27:1b:ad:26:
bd:70:2f:f9:50:a6:1c:d7:71:ee:df:94:41:84:51:fd:5f:00:
bb:3b:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:31:39 2026 by rpki-client