
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa
File: a08d7a45-9754-3d49-ace8-857d310736ba.roa (raw, json)
Hash identifier: zD7C1Xlht4WoTOy21DxEsrDUCUss/vmds/zv8GvAnXM=
Subject key identifier: 2A:EB:DD:C3:BE:E1:A1:15:CA:FD:33:FE:56:37:12:D0:E6:B6:8C:3B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EA8EC4E2033843040F88D515C
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 7029
IP address blocks: 75.89.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:4e:20:33:84:30:40:f8:8d:51:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=5e6f0b8e-ae82-4ed2-bb0d-c47ebc1b16b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:b9:b2:dd:0b:aa:bc:ae:a1:91:6b:49:07:
72:49:c7:17:3a:da:c8:39:cf:d5:a3:1c:eb:f7:d7:
e3:7f:35:83:4e:f8:c0:52:2a:9c:9c:67:6a:1e:9b:
fd:10:75:01:e6:c5:ab:f9:de:ac:fb:71:1d:80:21:
04:c0:42:7e:ea:97:d9:e6:6d:97:34:0a:1c:50:8b:
cf:18:f7:18:0e:74:1a:a4:7d:89:08:16:0c:82:ee:
1c:3d:f5:7e:dd:08:a5:3e:b8:7f:46:85:02:a2:5c:
27:a2:7f:8d:55:7a:f2:c9:e1:f8:3c:9d:75:2f:e0:
8a:e5:c3:db:88:be:a0:eb:ea:14:97:3d:73:3e:35:
43:18:87:a0:4f:d7:09:ee:af:23:b3:9a:e6:01:6b:
a7:24:82:ef:bf:eb:1b:ce:41:e7:68:1f:e3:07:fb:
28:b3:70:76:e6:5c:18:91:07:08:04:e8:99:be:ac:
93:ac:83:64:b1:b3:43:dc:d7:0c:03:0a:a5:be:ba:
df:2e:34:40:a5:18:0b:c1:49:57:2e:bd:70:2c:dd:
9c:07:45:85:04:23:1f:33:69:23:e5:5b:4c:22:9d:
e9:89:e4:63:c7:ab:83:8b:c0:b9:0c:69:32:7c:2e:
7d:91:f3:2b:82:2d:1b:2e:11:cb:3c:46:26:c1:a5:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:DD:C3:BE:E1:A1:15:CA:FD:33:FE:56:37:12:D0:E6:B6:8C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:df:e6:23:f2:c9:1c:ac:18:16:ca:ff:41:7f:0f:b1:1d:dc:
23:05:59:a9:9e:43:72:7e:77:00:2e:ed:7b:93:8d:04:69:90:
c0:17:ac:f3:58:ce:7d:44:8f:6d:5c:a3:a8:f5:a4:64:c3:af:
c9:37:f2:be:0e:8a:fa:c4:55:9e:1b:c1:93:e8:80:39:56:3c:
96:c1:fe:f2:eb:27:78:30:6e:1d:ad:af:df:23:5c:4a:72:2b:
13:2f:ba:88:f0:9d:5a:82:e1:75:e8:a8:9f:e5:3c:17:9a:79:
31:63:6e:5f:c1:b1:86:45:11:e1:13:e6:a1:e3:51:3a:bd:cb:
c8:24:10:1c:22:ff:32:28:cf:21:15:c8:4d:20:06:a4:c3:53:
d2:d4:35:0a:40:40:8c:b0:cf:28:32:2d:e8:93:b7:db:87:ad:
f4:79:41:ad:66:ae:d5:68:c3:44:a5:dc:81:3d:53:0d:c9:7b:
24:3f:df:66:51:1f:bf:18:09:c2:f0:bc:ab:c4:c9:78:54:66:
74:c5:cf:90:c9:6d:77:2f:73:ee:fd:ae:8e:75:12:14:69:54:
2f:9c:89:af:d0:a6:53:e0:cd:4f:60:12:16:d3:6e:d2:17:81:
31:6b:ec:db:1e:44:5c:ef:be:84:e3:e6:43:47:45:4b:56:36:
42:91:10:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7E4gM4QwQPiNUVwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk
NWU2ZjBiOGUtYWU4Mi00ZWQyLWJiMGQtYzQ3ZWJjMWIxNmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv25st0LqryuoZFrSQdySccXOtrIOc/Voxzr
99fjfzWDTvjAUiqcnGdqHpv9EHUB5sWr+d6s+3EdgCEEwEJ+6pfZ5m2XNAocUIvP
GPcYDnQapH2JCBYMgu4cPfV+3QilPrh/RoUColwnon+NVXryyeH4PJ11L+CK5cPb
iL6g6+oUlz1zPjVDGIegT9cJ7q8js5rmAWunJILvv+sbzkHnaB/jB/sos3B25lwY
kQcIBOiZvqyTrINksbND3NcMAwqlvrrfLjRApRgLwUlXLr1wLN2cB0WFBCMfM2kj
5VtMIp3pieRjx6uDi8C5DGkyfC59kfMrgi0bLhHLPEYmwaVXDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrr3cO+4aEVyv0z/lY3EtDmtow7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA4ZDdhNDUtOTc1NC0z
ZDQ5LWFjZTgtODU3ZDMxMDczNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1nQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/f5iPyyRysGBbK/0F/D7Ed3CMFWameQ3J+dwAu7XuTjQRpkMAXrPNY
zn1Ej21co6j1pGTDr8k38r4OivrEVZ4bwZPogDlWPJbB/vLrJ3gwbh2tr98jXEpy
KxMvuojwnVqC4XXoqJ/lPBeaeTFjbl/BsYZFEeET5qHjUTq9y8gkEBwi/zIozyEV
yE0gBqTDU9LUNQpAQIywzygyLeiTt9uHrfR5Qa1mrtVow0Sl3IE9Uw3JeyQ/32ZR
H78YCcLwvKvEyXhUZnTFz5DJbXcvc+79ro51EhRpVC+cia/QplPgzU9gEhbTbtIX
gTFr7NseRFzvvoTj5kNHRUtWNkKREEc=
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:19 2026 by rpki-client