
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa
File: a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa (raw, json)
Hash identifier: jAAmBewxFzT67avfhmBy2TWKBWOCFzTIF2jp7zeUD0c=
Subject key identifier: 8C:07:F9:84:A4:98:59:AB:95:D8:02:D4:C4:6C:4C:D7:C4:C6:9C:34
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EA788890AAB4BA2B91475C180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 173.187.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:89:0a:ab:4b:a2:b9:14:75:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=42a1e614-176b-4bca-9b99-058faf2b8b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:90:d6:ba:26:bf:75:60:9a:18:90:a5:e7:
9e:23:d8:18:a1:bc:cb:0f:58:5f:66:b5:ff:02:fd:
3d:03:89:47:42:a9:e9:aa:f1:3a:c7:6b:cd:8c:43:
7b:e4:6b:e7:a4:90:34:ce:59:37:2b:68:13:e7:2a:
d9:cb:2d:92:8f:f6:1c:be:7a:1c:55:b8:86:13:5e:
a9:82:f5:03:8b:44:d6:fb:d2:81:0d:65:65:37:07:
79:3e:68:30:f8:65:35:fa:ff:35:e3:d9:de:b1:40:
e0:32:c3:a9:d8:2a:d5:67:c0:c9:21:ce:86:d8:65:
ec:7e:db:ad:1c:54:bc:62:61:e8:69:ed:6a:d0:71:
23:a2:dc:07:42:15:86:4a:9c:61:35:e1:1e:f2:f9:
34:34:5c:47:21:f0:cf:4d:86:8d:4a:eb:68:fe:1d:
b4:6b:8c:b1:1d:34:2c:04:3a:24:a6:4e:8a:8d:12:
d1:c0:7d:bd:9f:1b:ee:c1:3d:5c:4b:5b:23:24:a0:
f8:54:92:43:df:c2:bc:6c:59:fa:21:80:5f:6b:0e:
f0:69:2e:18:c6:c5:09:e2:d8:21:6c:5a:69:bb:df:
8f:de:1c:57:4b:a1:88:ef:ce:fe:1f:3d:84:4d:4b:
8e:90:c3:2e:60:31:d3:e7:87:07:37:c9:35:35:09:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:F9:84:A4:98:59:AB:95:D8:02:D4:C4:6C:4C:D7:C4:C6:9C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:a2:43:e8:8a:ff:7a:54:f0:7f:3f:30:1c:57:23:27:c4:7f:
e4:70:8f:e1:cd:9a:b8:84:6b:19:10:96:40:76:94:9a:56:66:
bb:53:78:13:fc:44:91:1f:ad:17:45:35:32:fb:e9:3b:6b:b4:
48:10:e9:a5:22:1b:21:aa:6c:d6:06:e2:2d:3e:9c:7c:db:13:
58:4a:77:48:0e:48:05:e2:55:fc:05:52:5b:fc:ff:be:24:64:
84:91:74:47:6d:a3:36:e1:0d:d3:4c:ff:8d:50:f4:82:ea:04:
77:13:21:b9:29:09:e9:20:70:15:58:d9:83:16:14:a8:47:53:
e6:e9:9b:56:1e:6d:5d:f3:3d:48:34:45:1b:7b:b0:d4:74:1d:
d5:ea:c8:31:1b:92:d7:da:62:fe:12:17:28:69:80:ef:77:1b:
31:38:ad:50:3a:f4:08:24:c2:51:52:3d:a3:33:fd:11:5e:26:
4d:91:e7:1c:80:96:95:93:a4:6a:82:0d:13:f5:79:b0:dc:4c:
ad:97:f4:12:f7:fd:f3:20:f9:2d:8c:99:ac:bb:1e:1d:2b:2d:
b5:1f:ee:ea:ab:94:ef:b2:27:37:df:bb:4a:8f:44:65:bb:4b:
5e:38:f5:a8:b5:5d:d7:dd:24:48:b9:2b:b7:45:f9:88:7a:8d:
38:1e:90:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIkKq0uiuRR1wYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDJhMWU2MTQtMTc2Yi00YmNhLTliOTktMDU4ZmFmMmI4YjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyaQ1romv3VgmhiQpeeeI9gYobzLD1hfZrX/
Av09A4lHQqnpqvE6x2vNjEN75GvnpJA0zlk3K2gT5yrZyy2Sj/YcvnocVbiGE16p
gvUDi0TW+9KBDWVlNwd5Pmgw+GU1+v8149nesUDgMsOp2CrVZ8DJIc6G2GXsftut
HFS8YmHoae1q0HEjotwHQhWGSpxhNeEe8vk0NFxHIfDPTYaNSuto/h20a4yxHTQs
BDokpk6KjRLRwH29nxvuwT1cS1sjJKD4VJJD38K8bFn6IYBfaw7waS4YxsUJ4tgh
bFppu9+P3hxXS6GI787+Hz2ETUuOkMMuYDHT54cHN8k1NQlHdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwH+YSkmFmrldgC1MRsTNfExpw0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTIyZjdhMmYtNmQ0YS0z
MTRjLThlYTgtNzEzNDY0ZWZkYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABeiQ+iK/3pU8H8/MBxXIyfEf+Rwj+HNmriEaxkQlkB2lJpWZrtTeBP8
RJEfrRdFNTL76TtrtEgQ6aUiGyGqbNYG4i0+nHzbE1hKd0gOSAXiVfwFUlv8/74k
ZISRdEdtozbhDdNM/41Q9ILqBHcTIbkpCekgcBVY2YMWFKhHU+bpm1YebV3zPUg0
RRt7sNR0HdXqyDEbktfaYv4SFyhpgO93GzE4rVA69AgkwlFSPaMz/RFeJk2R5xyA
lpWTpGqCDRP1ebDcTK2X9BL3/fMg+S2Mmay7Hh0rLbUf7uqrlO+yJzffu0qPRGW7
S1449ai1XdfdJEi5K7dF+Yh6jTgekEs=
-----END CERTIFICATE-----
Generated at Thu Aug 27 14:16:13 2026 by rpki-client