
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa
File: b9c73bea-e693-3d79-b258-a76ffb3f2510.roa (raw, json)
Hash identifier: PsaIz4fw7SHBUpSyENb5DPor1603b2GOaV8MKH/Ri0Y=
Subject key identifier: 26:82:45:8B:35:F7:05:76:D4:35:DE:C9:4F:86:E4:96:1E:5F:D5:EB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F51D2B3C8F289B45315F404C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 98.16.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:b3:c8:f2:89:b4:53:15:f4:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=ee6c5c20-419f-41ca-b7d8-8d9ae4ccb79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:93:73:c7:d3:17:46:8a:97:82:30:85:f3:
70:67:fe:7e:ea:19:7e:4f:e0:f8:ad:59:00:2f:24:
f1:be:49:7e:21:ff:81:a5:88:87:51:f5:4d:0b:64:
ba:1f:c7:4b:2b:dd:41:9c:53:dd:d7:02:26:67:75:
3a:07:1f:aa:e5:1f:08:bd:7e:60:50:d7:c0:71:83:
13:b8:7f:9f:ba:be:47:89:78:8a:22:a3:31:5b:d0:
07:42:d4:d8:d3:a9:f7:7c:20:f0:28:a0:bb:b6:65:
3c:fe:94:69:87:ae:bb:6b:94:86:b4:c0:a7:db:90:
eb:40:c1:48:66:8e:75:2b:8e:5b:5e:24:29:7a:66:
95:0c:4a:da:51:d9:3f:5a:3a:bb:0e:dd:c2:d1:2d:
9f:75:e4:3b:2c:57:69:17:55:02:cd:99:53:ab:0c:
50:41:b3:51:47:2c:3f:36:b3:ad:e8:11:e3:7c:80:
55:63:4b:29:5d:9a:fb:d0:da:79:f6:b8:3e:a3:3e:
be:6f:a9:b0:34:72:63:a2:e3:3d:10:5b:b5:9e:ca:
e9:03:43:07:c7:bc:69:fd:93:30:19:1e:80:8b:d1:
58:35:06:df:50:e9:46:7e:ef:9e:66:04:1e:03:a1:
99:f1:ec:d6:ae:0d:62:45:c5:b5:40:c8:54:c7:02:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:45:8B:35:F7:05:76:D4:35:DE:C9:4F:86:E4:96:1E:5F:D5:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:e3:9a:be:00:93:e2:85:c2:e8:13:2a:66:f0:7e:9f:38:19:
30:e2:bb:8b:7a:5b:52:60:53:17:9b:55:f5:e8:1c:01:c4:68:
eb:94:11:22:d9:0f:00:3a:20:32:82:93:ae:c3:09:f9:82:5b:
b3:f3:ed:15:ed:af:29:fe:7d:ce:4c:59:24:54:c8:07:1b:97:
35:7b:ae:17:c7:9f:c9:d4:71:7d:a6:83:9b:c9:1c:32:e3:df:
df:27:ac:6b:ea:d1:de:cf:e0:58:d8:46:35:de:2f:ba:a3:4c:
fa:77:59:74:76:af:ae:1e:0f:c8:35:65:2d:04:9f:67:6d:b2:
5f:b1:1f:51:fa:0f:4b:a5:27:d3:37:b5:30:50:10:42:5e:67:
b6:b5:4e:16:55:d6:2a:f4:cc:18:37:7b:e4:9e:06:f7:f9:ba:
2e:3f:c4:27:55:45:d7:f7:97:94:6a:7a:00:b6:f7:54:b4:01:
81:01:31:e8:b9:da:18:49:c7:ac:e4:33:b1:c5:23:f5:db:45:
0b:dd:76:f5:f4:ab:7a:4d:5b:c2:14:d6:21:c7:a5:01:21:c8:
e1:1e:5f:d6:70:2b:fd:86:18:0e:0f:2b:94:c7:82:d5:73:27:
be:80:15:4a:a6:fd:9c:ec:06:6c:45:4e:05:c0:a9:66:60:61:
a4:39:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:13:37 2026 by rpki-client