
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa
File: b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json)
Hash identifier: VO92Vo/AckUArZwE4O1+AStWhql6PbPkBnCYLOu3lIQ=
Subject key identifier: C4:58:B0:C9:81:2D:02:0F:BF:8B:28:AD:20:5C:BC:86:E7:DF:5E:FE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F51D2B4333173AC87F9C42F40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 173.188.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:b4:33:31:73:ac:87:f9:c4:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=1e0054dc-d576-469a-812e-3b5a35739330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5e:e5:ad:bb:ef:cb:7a:8f:40:eb:a1:f7:69:
0d:dc:68:05:d6:cc:16:b6:aa:22:cf:3c:f5:20:1f:
d1:a5:08:3b:26:92:b9:4a:11:6b:21:b4:8d:94:b5:
68:c3:bc:d7:d7:18:a6:44:4c:49:1d:0e:85:5d:84:
50:ad:5e:35:89:9c:b8:16:37:ce:22:4f:57:81:ea:
82:90:b3:cb:9e:4d:00:f3:d2:89:f4:f6:ea:87:e5:
c5:c6:fd:a2:56:f6:55:f8:83:a3:b0:0d:f5:b8:93:
52:1a:45:15:02:d0:6f:6c:0c:34:6b:da:74:6e:db:
dd:e1:b1:96:05:6a:5c:c2:98:d8:5f:fd:78:35:a7:
6b:46:fc:ed:ca:33:f2:b8:66:b9:f2:19:38:6a:16:
d0:ce:d4:ef:1f:5e:3f:21:e3:a3:3b:79:6d:35:c0:
52:84:d5:71:c5:5b:d9:2f:9d:25:fc:00:39:03:3c:
0f:15:23:09:b0:48:6f:41:1b:b4:9c:6b:dd:17:46:
e3:8a:11:8c:c8:9f:92:9a:93:e2:5b:7d:36:19:08:
bd:1b:42:df:98:21:db:57:c0:f8:71:59:42:73:d3:
1c:03:c2:89:60:55:1d:00:99:09:60:0b:18:ba:d6:
97:76:33:53:65:4f:89:eb:aa:ff:dd:ec:6f:79:7b:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:B0:C9:81:2D:02:0F:BF:8B:28:AD:20:5C:BC:86:E7:DF:5E:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0f:1d:36:f7:a7:7b:7a:aa:88:43:f4:cb:66:8f:6a:06:dd:
88:02:bc:11:90:89:b0:71:ad:ac:f9:75:2a:d5:67:e9:0b:7e:
1c:7f:87:3c:26:5a:7e:4e:5b:d7:0f:8e:8c:f5:62:d3:2b:ec:
40:59:87:62:a3:36:c7:a1:5e:e2:ae:d9:8c:03:ed:24:bb:78:
72:15:af:32:8b:dd:2c:24:a9:c2:21:e9:c2:1d:8d:f9:97:58:
b7:8f:41:87:97:b6:e5:eb:a4:50:25:d6:47:ec:fc:9f:dc:60:
bb:14:b8:5b:26:ed:4e:5b:28:85:c7:cd:50:fd:9e:e7:0c:cb:
6a:80:da:59:ee:e5:95:50:fc:5c:95:32:ec:87:b7:aa:b2:58:
ab:9a:76:99:d4:3a:e8:70:c8:85:ae:55:f5:49:25:b1:e5:0a:
4d:fb:f0:d0:63:f0:b3:08:8d:89:77:08:0f:e9:f4:fc:c4:a3:
ad:1a:55:c6:89:39:9e:2c:96:b1:53:83:3e:df:66:34:5f:8b:
9a:04:3a:7c:a3:51:ae:d5:11:8f:16:8d:b7:cb:d2:ff:95:d9:
79:94:86:6f:29:7f:18:02:54:63:05:bd:41:5c:3f:28:02:c9:
e1:ab:de:1a:8a:d9:82:38:29:7f:1b:a1:32:b3:46:6b:4f:bf:
7b:76:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:22:59 2026 by rpki-client