
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa
File: a15dd1fc-a5e6-3111-ac70-b3161353326b.roa (raw, json)
Hash identifier: zuAQ0TZldR/JZ7lbkJtvj5yL8By/RdJGuPVInqL6670=
Subject key identifier: F7:C4:C4:30:D1:3F:B6:58:7F:08:1C:09:DB:8B:1D:92:FA:5A:E5:2D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EC0A7453391B2555832901DC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 67.141.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:45:33:91:b2:55:58:32:90:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=cfd9ec60-cfd9-41d9-922b-44ae95fc5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:8e:b5:71:b3:3c:7f:35:de:39:4f:f8:c8:
36:e6:ef:91:6a:59:41:fd:59:29:a9:80:f7:9f:e5:
d8:7a:a7:cb:95:cf:cc:3b:9b:6d:6f:9c:78:65:7c:
d7:b0:46:af:0a:f0:84:6c:b0:51:cc:f6:26:44:2a:
b0:64:8e:66:a1:a4:29:38:83:58:d4:9c:29:bc:01:
fe:90:02:19:83:81:6d:ef:69:63:9d:5e:e2:c1:65:
32:e3:c3:0d:02:58:52:9b:a7:69:27:8c:0e:ed:aa:
6a:c3:a6:e4:f1:31:0f:6e:5f:ae:5e:89:f5:a1:ef:
e4:af:38:d0:ec:28:e7:97:53:f0:ad:4d:80:da:f0:
c8:57:d8:4c:c5:0c:79:0a:ff:17:77:56:49:32:34:
b0:7e:18:df:88:fd:8d:74:21:87:99:8a:0e:35:06:
b7:43:67:89:11:d9:57:b8:7d:e7:39:4a:c3:34:48:
08:80:c7:45:b7:a1:41:98:20:1c:b3:59:5a:23:e3:
83:67:56:35:cd:5a:13:f7:80:30:44:25:ab:b4:44:
dc:0a:f7:f5:25:36:91:0a:38:e7:fb:06:22:e3:15:
79:ac:81:93:fe:68:79:85:d6:0e:ce:46:4d:41:7d:
ab:0e:7a:e9:cb:ec:b4:8a:50:c7:ed:c4:cf:81:27:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:C4:30:D1:3F:B6:58:7F:08:1C:09:DB:8B:1D:92:FA:5A:E5:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:19:ab:d4:b7:ec:fa:b8:f3:0c:d9:1d:0c:2a:46:50:6d:a3:
5f:69:f8:48:50:16:f6:8a:a6:7d:d6:11:db:c5:76:93:7a:87:
97:91:6c:f1:5c:17:70:4b:4e:a3:3b:43:a7:53:39:cd:e8:dd:
34:ee:54:b5:fc:e0:e2:26:05:70:82:f4:4d:aa:b8:45:06:91:
55:4e:85:2d:3d:1b:42:12:0c:45:e1:de:ec:f1:3f:95:bb:9d:
b7:89:d1:7a:a3:35:34:df:e6:49:5b:49:b2:d8:a4:e0:bb:1b:
38:8d:02:02:8b:53:21:72:27:ee:cd:02:7a:82:8f:28:71:30:
e4:99:4b:68:18:31:1f:2e:fb:56:33:3c:f1:10:54:0d:70:22:
8c:59:48:d1:6f:b3:5a:c6:c8:3b:53:41:6d:50:8c:73:b8:1e:
d8:96:0a:ee:80:69:69:6f:30:29:51:83:5e:5c:39:eb:4a:14:
15:27:f2:ea:4f:5b:30:72:68:07:54:a9:3c:bd:64:75:ca:5f:
d5:ff:5a:63:03:2d:64:3d:56:54:03:e3:ff:00:b9:72:d3:7f:
5c:fb:54:3c:a6:44:b3:a3:b8:7f:18:95:79:b2:00:cb:36:f2:
a7:79:da:c2:7c:71:3e:1a:f3:d9:30:a6:5e:fb:65:27:51:c1:
74:39:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:38:20 2026 by rpki-client