
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa
File: b6644eb8-860e-36c8-9338-e619fe3b172f.roa (raw, json)
Hash identifier: 5XUGqU7CidViGMCfSoEDWR/q41MI8QWbrYe8Fow6mTE=
Subject key identifier: 03:15:6D:89:84:F0:E1:B0:AA:4B:D0:BD:15:9D:D9:88:0F:23:B4:E0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F506D4098256F5FD5950F4980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa
Signing time: Sun 27 Sep 2026 13:00:12 +0000
ROA not before: Sun 27 Sep 2026 13:00:12 +0000
ROA not after: Sat 26 Dec 2026 14:00:12 +0000
asID: 7029
IP address blocks: 71.28.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:6d:40:98:25:6f:5f:d5:95:0f:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 27 13:00:12 2026 GMT
Not After : Dec 26 14:00:12 2026 GMT
Subject: CN=dc5fbf21-e00b-4746-99d3-1a092be067f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:c8:ba:bb:25:10:34:f4:69:72:f0:af:df:
18:ce:60:7e:ed:30:ce:63:33:bd:a5:d1:c0:ba:62:
81:81:a9:57:b8:32:0b:04:4a:3d:08:e8:e2:a5:73:
de:c7:be:0e:df:3d:52:36:aa:3b:78:c4:d9:bc:ef:
68:89:93:e9:55:88:84:00:84:2d:22:4c:a9:52:93:
84:90:9a:72:20:e9:71:4e:95:04:34:69:40:7e:83:
f0:a0:49:5a:9c:6a:c7:6f:28:f5:d9:44:51:ae:33:
82:39:15:ae:fa:da:a2:20:31:42:87:e5:1f:ff:3d:
a9:cf:af:95:5f:ff:c2:ca:14:71:c7:94:85:6f:04:
24:e3:7f:7e:07:e4:f3:77:d6:be:a0:b6:0f:7a:ab:
69:9c:ea:1c:d8:61:e0:24:f4:c3:17:93:85:65:8b:
18:11:e7:de:7d:85:4d:c8:69:57:e9:a9:34:bc:84:
7c:e3:aa:b1:63:11:d4:f5:2e:83:af:18:27:0a:79:
05:d2:0e:4f:d6:60:18:9b:89:f1:33:71:f8:f4:94:
0c:41:49:fc:60:90:3d:c1:6a:76:ac:44:e5:f3:c1:
a3:b8:bd:af:0d:d7:d2:88:e4:7b:1b:54:6d:c3:56:
13:ca:ae:21:f1:b3:2a:3a:fd:8a:93:05:64:3b:af:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:6D:89:84:F0:E1:B0:AA:4B:D0:BD:15:9D:D9:88:0F:23:B4:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:85:dd:35:25:0b:d2:a9:9c:1c:50:ea:63:95:81:73:16:88:
e5:c5:2d:5b:16:aa:a6:64:39:b9:ea:0e:be:a4:6b:57:ef:6d:
02:e5:56:19:f1:2e:ca:c6:50:7c:70:46:cd:b2:5d:46:ed:79:
f9:50:c3:11:2c:26:5b:49:79:d8:a4:1c:a5:b9:5a:b5:03:c5:
b5:c1:2b:b8:79:d7:a7:05:42:e0:95:fe:82:2a:20:6d:b3:d7:
75:8b:35:3c:c6:37:0a:d3:db:ff:fc:56:aa:99:14:59:40:f4:
9a:11:fb:3e:29:59:a7:68:72:14:24:05:56:09:6c:20:10:ca:
ab:cf:eb:04:58:29:41:ed:d3:21:73:c4:a8:c1:15:2f:27:e2:
f5:c9:6b:97:e2:dd:f8:8f:12:f8:ef:27:07:ec:22:4c:46:fc:
93:d5:13:3a:09:c3:f3:fb:e6:d0:9e:ed:a1:82:ba:f8:72:be:
cb:83:b2:05:bc:1b:7d:c3:1d:22:98:88:7b:d0:04:50:4a:bf:
ce:55:78:e9:1f:14:52:9e:9d:59:b2:d4:28:9f:db:fc:41:e3:
db:80:d0:fe:3a:4d:d8:d4:60:dd:2b:a6:ba:59:92:05:7a:bd:
15:aa:08:d9:5d:28:2c:a5:1f:24:e9:02:d0:da:46:12:9f:3b:
01:d7:ad:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:14:11 2026 by rpki-client