
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa
File: a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa (raw, json)
Hash identifier: ymOR70zmSZoV6t1fWPz4XsHvSZ+ocD02xjW0ZeDoFuU=
Subject key identifier: F9:F2:50:8E:C8:77:51:83:8C:7F:7E:3E:BB:EE:93:DC:BD:DA:40:43
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D5F7FAE73A00368C41EACD7C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa
Signing time: Thu 02 Apr 2026 13:00:30 +0000
ROA not before: Thu 02 Apr 2026 13:00:30 +0000
ROA not after: Wed 01 Jul 2026 13:00:30 +0000
asID: 7029
IP address blocks: 2001:19b0:42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:7f:ae:73:a0:03:68:c4:1e:ac:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 2 13:00:30 2026 GMT
Not After : Jul 1 13:00:30 2026 GMT
Subject: CN=661fc305-62b1-407d-81d9-c05119352a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:a1:28:cd:60:20:a8:13:d0:c3:df:1f:d2:
0d:95:b6:ca:f8:30:bb:45:b2:0f:3c:3f:8f:5c:09:
53:87:97:8c:3e:56:27:92:b1:92:69:39:27:5a:78:
8f:a3:ee:aa:88:d2:92:99:d4:ed:9d:57:12:c5:ad:
33:c1:c4:c3:bb:7b:fd:fb:d4:58:92:86:66:b9:fd:
1f:9c:7a:07:d6:89:ac:2c:c2:ce:d7:fb:3f:e6:1f:
d7:5b:ab:07:d8:c0:1b:54:4d:1b:ba:29:cb:e9:66:
c8:77:11:e0:ed:f0:92:a4:82:cf:d8:4e:06:4d:67:
a3:b2:d1:61:53:25:19:1b:79:14:15:79:c0:3b:a8:
71:9e:cb:17:4d:1d:65:2e:d0:84:01:fd:a5:41:69:
2c:44:03:49:cc:98:cb:ee:e9:fc:40:f6:45:df:81:
b7:a2:76:a2:e0:c9:58:15:2a:8d:55:84:7b:f3:af:
41:c4:73:66:ae:84:4e:16:06:cc:1e:91:3d:39:1c:
40:c2:9a:f2:8b:77:9b:17:93:78:0d:49:85:77:30:
e3:24:b9:77:ce:d2:1d:97:2f:c8:0a:93:e3:23:40:
cf:bc:d1:7a:7a:dc:44:a2:0a:98:ce:d6:6b:e4:69:
d5:f5:58:94:1c:16:75:e4:63:06:69:3a:d7:cc:22:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:50:8E:C8:77:51:83:8C:7F:7E:3E:BB:EE:93:DC:BD:DA:40:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:19b0:42::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:45:9c:00:76:39:77:06:23:f5:a3:d6:60:63:d1:8e:de:35:
a1:65:7e:f8:21:13:9c:8b:28:45:8b:c0:13:38:d3:94:05:6e:
e0:5e:ac:0a:a1:8f:9f:17:1f:29:fb:0e:77:ff:40:f0:ce:57:
08:5e:25:f4:74:4c:b2:bf:b2:99:76:89:11:e0:aa:cd:97:70:
1b:bb:5e:ee:a1:bf:d4:a9:3b:0f:a4:0f:4a:29:7d:48:94:1c:
d7:1f:c6:f3:ca:41:b3:b8:e4:90:e6:41:4d:ce:eb:6f:e1:44:
a2:4a:97:c1:f0:74:17:cb:5b:c5:c6:c5:4e:e9:92:27:97:04:
ec:eb:2b:04:c3:64:0e:51:46:62:20:db:47:ca:9e:f6:7d:d6:
6b:9b:16:2d:f5:76:74:06:24:0b:f2:19:36:aa:be:51:b3:c0:
65:1a:a2:a1:e3:76:6d:02:88:e0:21:32:70:44:92:d0:06:63:
f8:72:df:3d:7b:ee:3b:11:6f:7a:c8:a4:5a:86:93:e6:84:a3:
6f:2d:c0:0e:12:ab:51:b1:4a:e8:1c:1b:44:69:af:ae:b0:0a:
a8:6b:ca:a2:24:59:16:9f:df:76:98:b7:19:f8:05:cb:48:82:
5f:fe:2d:54:e6:cd:c0:de:ac:80:0a:9a:c1:56:6b:eb:47:6b:
e0:05:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:40:04 2026 by rpki-client