
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa
File: a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa (raw, json)
Hash identifier: JUB4wmXo13qoQOQXdxOpF/Px48DxGSynoFMHtddQ8BU=
Subject key identifier: 8D:E9:A2:B7:31:6D:CC:28:AC:69:BE:4A:27:84:02:8E:DA:FB:5A:63
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EBB11CBBD880D5D559CD1F840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 173.189.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:cb:bd:88:0d:5d:55:9c:d1:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=c2b84447-9868-4245-a4ab-4915c70329aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:51:14:6a:b1:dc:80:8c:82:12:46:22:a4:
94:5a:e1:34:ab:7b:a8:9f:94:e3:d4:be:be:a6:06:
b5:7f:d7:ef:4b:05:9a:ad:1a:6b:59:33:06:c2:24:
1f:a0:7f:bc:cd:d6:0d:7a:98:b9:00:e7:80:33:da:
3f:44:9c:bb:30:cd:1b:f8:de:5c:e5:e3:39:33:f0:
ed:cb:7d:c0:b2:8a:93:d7:90:5e:14:37:5e:85:21:
ef:8c:1d:19:c8:ee:27:ec:d2:e0:13:60:80:86:ec:
d5:66:be:c6:bc:ce:d4:10:b2:19:6c:ea:2b:c3:1c:
4d:03:c6:b0:af:78:dc:07:2d:bf:db:77:c4:52:4a:
d3:bb:b0:29:42:a2:f4:86:0e:85:12:58:9e:60:14:
c6:7c:20:2f:77:8f:1e:00:45:11:a0:eb:51:dd:43:
ea:b2:4f:1d:0f:01:04:92:df:67:37:4b:50:20:d1:
a1:00:2a:72:cc:7a:62:e0:04:14:23:f7:68:70:38:
5f:62:e9:1f:e1:98:c9:18:14:cd:31:bf:bd:4d:84:
a4:66:3c:42:97:6f:92:dd:e5:54:f8:5d:c8:a7:b4:
1a:af:40:8c:e5:75:0d:8b:d7:e2:57:e0:d1:8d:6c:
d6:1f:07:02:cc:d5:bc:c7:14:64:c9:9d:77:eb:13:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:A2:B7:31:6D:CC:28:AC:69:BE:4A:27:84:02:8E:DA:FB:5A:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:08:c0:c0:84:af:65:06:3a:80:8d:11:df:23:16:35:f3:db:
f6:4d:4a:2e:dd:4f:2e:0f:80:d4:27:42:ba:40:1c:ea:1b:14:
41:c1:b0:f4:fd:2a:4c:83:19:de:f9:1c:04:a7:18:08:82:74:
a2:9c:00:a3:17:d1:a5:af:9f:12:d6:18:43:96:28:02:59:d2:
42:5a:d1:7e:ab:6a:e9:aa:30:19:c8:8d:9e:ed:e4:ff:12:ab:
ba:23:0f:c9:24:42:fa:44:40:a1:51:2b:9e:9e:4b:3f:09:a9:
c0:94:64:dc:0b:01:ef:34:0f:64:e0:c1:bc:5a:ef:df:ff:0f:
0a:7d:df:d7:a2:92:76:d2:65:a6:36:f3:fd:b6:66:23:b5:67:
d2:f3:f2:46:e5:7c:ca:5a:d3:cd:58:f3:6e:c5:b2:f7:94:64:
27:5b:23:86:e3:cc:7c:84:ca:5d:15:3b:01:aa:01:a8:f9:e0:
28:8a:65:52:3e:b7:77:49:42:78:a8:13:e2:d7:d2:33:2d:5a:
f8:0a:89:e3:a9:08:69:4f:41:45:24:c1:49:05:cc:d9:5c:e7:
a7:ed:b2:be:bf:c4:3d:35:1d:13:d1:9e:c4:69:6d:ca:e9:37:
a2:80:e6:6a:7d:ea:e8:e2:97:e2:a2:41:c0:ad:78:d2:0b:cb:
1d:d4:82:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Ecu9iA1dVZzR+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
YzJiODQ0NDctOTg2OC00MjQ1LWE0YWItNDkxNWM3MDMyOWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbRRFGqx3ICMghJGIqSUWuE0q3uon5Tj1L6+
pga1f9fvSwWarRprWTMGwiQfoH+8zdYNepi5AOeAM9o/RJy7MM0b+N5c5eM5M/Dt
y33AsoqT15BeFDdehSHvjB0ZyO4n7NLgE2CAhuzVZr7GvM7UELIZbOorwxxNA8aw
r3jcBy2/23fEUkrTu7ApQqL0hg6FElieYBTGfCAvd48eAEURoOtR3UPqsk8dDwEE
kt9nN0tQINGhACpyzHpi4AQUI/docDhfYukf4ZjJGBTNMb+9TYSkZjxCl2+S3eVU
+F3Ip7Qar0CM5XUNi9fiV+DRjWzWHwcCzNW8xxRkyZ136xOm4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3porcxbcworGm+SieEAo7a+1pjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTZmNzhlYzMtYmVmNS0z
ZTY3LWFhYzktN2Y1N2U0ZTZjMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb3SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkIwMCEr2UGOoCNEd8jFjXz2/ZNSi7dTy4PgNQnQrpAHOobFEHBsPT9
KkyDGd75HASnGAiCdKKcAKMX0aWvnxLWGEOWKAJZ0kJa0X6raumqMBnIjZ7t5P8S
q7ojD8kkQvpEQKFRK56eSz8JqcCUZNwLAe80D2Tgwbxa79//Dwp939eiknbSZaY2
8/22ZiO1Z9Lz8kblfMpa081Y827FsveUZCdbI4bjzHyEyl0VOwGqAaj54CiKZVI+
t3dJQnioE+LX0jMtWvgKieOpCGlPQUUkwUkFzNlc56ftsr6/xD01HRPRnsRpbcrp
N6KA5mp96ujil+KiQcCteNILyx3UgrE=
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:25:51 2026 by rpki-client