
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa
File: abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa (raw, json)
Hash identifier: pK9wJ4X+xs2BlXY/ZDLH8yVmCYtKdwb8Qx+wGOc7Xks=
Subject key identifier: 41:48:3C:5A:5A:7D:13:63:58:EA:81:7B:C4:43:33:55:AC:10:3E:BF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F5E62C81399672E577AD53580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 7029
IP address blocks: 50.96.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:c8:13:99:67:2e:57:7a:d5:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=ea2a75fe-0369-4773-95f6-03cf9a2fbf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:5b:5f:e2:51:cd:86:db:b1:0a:c9:c1:f6:
3a:b0:45:3b:bb:9c:70:75:a0:b5:35:68:d3:6a:ce:
49:ab:43:1b:00:7f:72:09:11:85:f5:ad:73:4e:4e:
bb:5a:2d:85:96:b3:4a:d6:ad:93:30:2a:ad:2f:13:
f2:b0:27:68:cc:ac:e9:16:f7:70:af:39:96:50:48:
38:4c:67:ec:5e:a8:92:3e:89:13:ae:2f:a0:f2:28:
61:cb:7d:e6:23:96:88:ec:35:bd:be:21:59:15:91:
25:ac:bd:6e:a0:62:39:18:f2:db:14:58:a4:b1:c5:
98:60:31:92:cf:be:c4:4b:29:a5:00:21:d6:fa:be:
59:a6:e4:a4:be:a8:16:2d:a3:be:15:51:e4:17:1b:
49:88:2b:43:53:e7:b5:14:db:a8:2b:88:80:97:f4:
58:cb:aa:39:c9:70:10:b1:88:d4:49:9a:bb:b7:db:
83:04:d5:f5:0c:b5:8f:0f:50:07:97:06:4b:d7:bd:
23:ac:4c:3d:02:3e:8c:f0:bb:0b:75:84:6b:07:d0:
b3:a9:f4:76:b3:5f:98:eb:d6:bd:f3:c3:3e:45:8f:
0a:5f:81:89:2d:34:51:f2:03:34:09:67:b3:83:75:
99:d2:40:e0:23:b9:bb:fc:8d:30:3a:0c:d9:4f:7e:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:3C:5A:5A:7D:13:63:58:EA:81:7B:C4:43:33:55:AC:10:3E:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:cb:84:e8:e1:52:24:a3:23:cc:e7:e8:e4:8f:07:47:df:90:
b6:4b:60:df:a4:62:a9:75:78:16:11:16:9d:d4:c5:1e:99:06:
4f:2b:ed:81:0d:c4:e2:c9:9b:2a:57:db:15:b7:e6:22:be:f4:
bd:cb:3a:82:22:ba:4d:f6:c2:f3:93:6b:49:32:82:42:41:29:
39:5a:1d:c1:25:b9:0a:f6:dc:cb:ef:9b:32:ed:01:d9:10:2c:
ec:54:d9:82:56:de:97:44:44:1d:da:ff:05:f3:32:06:cc:5e:
98:b3:ac:96:88:21:de:57:1a:d0:95:3b:6f:8b:94:d3:7b:43:
b8:f1:a9:d1:cb:18:f5:66:e4:cf:00:90:5c:b4:e8:a2:36:d7:
a7:75:5b:e0:9c:50:7a:84:91:27:44:8e:b8:04:40:d9:d7:e1:
e7:5a:fc:fe:c5:33:55:bd:bc:04:4f:45:4e:c0:1e:d9:90:e8:
7c:e9:af:9a:87:c5:84:a9:1e:16:6a:12:e0:26:37:bb:c4:7d:
6e:3e:1d:4b:65:8a:75:01:c1:17:89:4b:1b:1c:e4:d4:5a:df:
4d:8d:ac:1e:8c:13:e0:c0:7d:4d:73:ff:4e:d1:6f:a1:60:3b:
73:b0:e0:25:15:ab:17:d9:0c:a5:59:53:63:38:cf:d4:24:81:
61:83:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:47:08 2026 by rpki-client