
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa
File: b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa (raw, json)
Hash identifier: ncFpPgXE4SvLzCsgORph2dZ1V0c6FwnozmzVORI6nFE=
Subject key identifier: 83:4F:F0:0B:61:82:63:B6:2E:00:52:2C:35:CC:42:D0:D1:C7:FA:51
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D55BAE925DDF50E149DC6BA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7029
IP address blocks: 69.66.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:e9:25:dd:f5:0e:14:9d:c6:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=98fed5a3-e5a4-404d-a400-1228a6238439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2c:4d:f4:50:72:51:62:01:49:7b:12:d6:dd:
1d:69:ec:6d:6e:37:32:4a:25:56:2b:61:dc:4e:25:
d9:d7:a0:22:3b:92:3b:5a:d2:c7:b1:2d:cf:5a:14:
d3:8a:d7:36:17:b8:a3:d3:b7:d4:af:fa:d3:15:45:
85:04:f6:a0:42:dc:c7:1c:d2:87:40:99:08:2b:43:
41:fd:c0:63:cd:d7:51:b9:94:43:13:c1:8b:ea:70:
d6:ad:2e:95:12:ef:11:e2:d6:68:f7:f0:b1:e2:da:
c2:74:05:3d:ca:5c:a9:bb:f6:8f:34:11:8c:77:46:
3f:86:9c:78:cb:c7:b7:ed:a5:f5:ee:78:f5:49:20:
17:89:04:c7:70:c2:26:ff:7d:7d:3b:7e:6d:ac:ce:
1b:a0:f1:83:ab:29:e9:14:2e:7c:f6:41:41:bd:6c:
d2:f2:90:ab:95:2e:e9:bd:77:0e:3a:c6:b8:f0:c7:
fd:fd:5e:15:0e:14:fb:3a:77:49:52:3e:57:6b:8d:
5f:55:b0:a8:56:1f:0a:05:01:d8:65:1c:06:2c:60:
e7:79:ab:94:25:e5:d0:e4:92:a0:69:e0:5d:0f:f9:
58:e4:5d:a2:d4:2f:bd:fe:9d:aa:b3:c4:83:3d:0e:
24:71:82:c3:6b:8f:e5:b5:bd:5e:62:fe:e0:d3:ba:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:F0:0B:61:82:63:B6:2E:00:52:2C:35:CC:42:D0:D1:C7:FA:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:ba:56:62:38:6e:71:9f:99:8b:6f:b9:8c:2d:ed:f4:9e:67:
ec:5a:de:49:89:a4:97:81:78:9c:58:bc:1f:d1:9c:ab:02:82:
e7:b3:f0:d4:dd:98:1b:26:34:51:d1:10:c5:9f:74:b7:16:37:
e7:c5:82:60:91:84:53:90:08:82:85:6b:12:f1:40:a6:85:96:
81:7e:dc:7c:3f:22:26:dd:6f:a7:93:9d:46:de:06:39:f1:aa:
29:91:d6:d8:b5:66:b2:5e:b6:28:5f:3d:98:bb:31:bb:90:9d:
75:8a:fb:56:20:fd:99:93:73:45:fd:ed:78:8d:d9:33:ae:54:
53:b9:8b:5b:79:47:3a:ed:d4:d3:aa:50:e4:c2:82:64:14:bc:
ef:04:35:d7:b7:f7:87:a0:8d:58:1a:18:99:fd:9e:ca:9c:c2:
07:e6:26:d3:20:a5:fd:9f:04:36:d0:62:3a:84:2b:36:5b:ee:
29:27:dd:45:3e:a3:e0:00:80:fe:61:58:79:22:aa:21:29:76:
43:db:a4:03:03:18:50:0f:a4:af:19:71:67:8c:42:06:0c:c5:
65:d2:f0:05:15:6f:28:d5:c9:3c:50:08:82:73:84:4f:a4:7b:
f9:f8:59:b3:de:a5:3a:98:af:52:91:7f:a4:47:e7:e0:c6:6a:
94:34:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:39:45 2026 by rpki-client