
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa
File: 9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa (raw, json)
Hash identifier: Ux7P8pbnu7kYVWRcWmbmWE9lBK7nGX3J0p7fW5oUcyk=
Subject key identifier: 7E:93:CB:25:92:95:59:63:82:84:EA:67:14:0A:58:35:39:B7:29:BA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CD6D22482BF80116DEAE7E480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa
Signing time: Thu 12 Feb 2026 14:00:40 +0000
ROA not before: Thu 12 Feb 2026 14:00:40 +0000
ROA not after: Wed 13 May 2026 13:00:40 +0000
asID: 7029
IP address blocks: 71.29.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d6:d2:24:82:bf:80:11:6d:ea:e7:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 12 14:00:40 2026 GMT
Not After : May 13 13:00:40 2026 GMT
Subject: CN=70304628-351a-4495-8e7e-8fb11e40e437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:f8:f4:0d:14:56:09:ee:dc:e0:68:df:32:
99:94:80:1b:0c:79:78:bd:f8:cd:af:68:19:c3:70:
ab:ef:1f:9e:08:74:2c:c8:a8:6b:21:f5:a9:e4:e9:
8f:a6:1c:6f:76:b8:10:fa:86:74:ee:50:46:ad:8d:
01:fd:5c:83:e1:4e:1e:12:99:d5:96:b2:c9:3c:cc:
77:9f:37:37:33:fe:bb:e8:db:fb:96:e1:a9:eb:4f:
ee:05:93:8a:f5:d4:24:9c:02:ed:d9:68:39:00:eb:
9a:3e:59:a3:8a:4b:d7:8f:1e:a5:9c:c2:fc:dd:c3:
a7:c1:b6:c8:fd:81:9c:44:1e:9c:ef:93:c2:05:bd:
e1:f3:47:7d:bc:30:ee:2a:1b:ff:58:c3:e7:36:73:
a9:26:b5:aa:e8:50:e3:f1:9c:79:57:5c:14:db:23:
a1:2c:ca:4e:cc:9e:28:4c:6f:1a:ec:a7:cc:77:37:
87:f8:60:48:bc:6d:0b:a6:7f:5f:53:a4:25:91:1d:
f8:a5:34:ff:76:df:0a:fd:b3:58:c8:0b:a1:9c:63:
cc:11:5d:20:a5:b2:10:a3:e1:38:37:2b:d6:13:3e:
ce:f2:68:1e:97:5f:03:01:49:4c:2b:60:cc:c2:c0:
2b:a7:4f:9a:0e:66:bd:6c:b7:f0:80:45:ab:1e:fa:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:93:CB:25:92:95:59:63:82:84:EA:67:14:0A:58:35:39:B7:29:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:61:e6:06:01:fe:f3:a8:0b:6e:65:56:8d:7f:de:65:15:c1:
fe:3e:df:b7:e3:ff:ff:69:5c:54:3a:da:64:41:8c:96:33:8b:
74:c0:df:06:b7:b7:f1:23:6c:7d:d1:6c:ab:b9:10:e5:c1:c5:
c1:90:cc:56:b0:f5:3a:0d:4c:0b:e0:9a:66:5a:8a:a7:ec:79:
fe:ae:96:8a:b6:ef:78:31:1f:a9:2a:02:dd:b2:d8:1c:42:d8:
d3:fe:b5:c2:34:29:a2:26:e3:99:1b:64:b5:8e:ec:d7:f3:14:
7e:95:99:a7:d5:f9:78:be:96:6d:4e:66:08:55:93:91:89:52:
13:7e:37:d7:a9:24:0c:26:d6:6d:98:f0:3b:e0:72:ed:bf:6f:
77:f4:f6:24:f9:d6:e5:99:d7:56:3f:ef:a8:71:ee:50:8d:83:
1d:05:29:ef:9a:17:d8:b4:db:7c:1b:f2:98:2b:93:9f:6c:f2:
ae:85:db:ed:63:54:33:15:60:0c:ee:1a:1f:f1:98:3e:b5:8d:
a7:4a:55:f4:3a:f2:41:4a:2e:61:ab:91:c4:56:e9:2d:0b:77:
07:bc:25:23:4e:dc:5b:fa:40:99:f0:42:0e:22:ed:f7:6a:21:
d6:06:1e:db:f8:08:61:67:69:e9:3c:fe:c3:80:3e:dc:9c:d4:
56:cd:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:54 2026 by rpki-client