
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be84b696-0732-38c2-a4b0-4121e185344c.roa
File: be84b696-0732-38c2-a4b0-4121e185344c.roa (raw, json)
Hash identifier: H5hsZnQUOyGATxVkr+/0FbEmC9u6wLkZMO5NmARDIDo=
Subject key identifier: B3:3D:03:8E:F8:57:91:3E:0A:34:9D:4D:1E:FC:3D:48:69:0D:34:CE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CB3E32E43F453A3B1298A9100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be84b696-0732-38c2-a4b0-4121e185344c.roa
Signing time: Sat 31 Jan 2026 01:42:04 +0000
ROA not before: Sat 31 Jan 2026 01:42:04 +0000
ROA not after: Fri 01 May 2026 00:42:04 +0000
asID: 7029
IP address blocks: 173.186.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b3:e3:2e:43:f4:53:a3:b1:29:8a:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 31 01:42:04 2026 GMT
Not After : May 1 00:42:04 2026 GMT
Subject: CN=2318c230-dffd-451c-bbcd-13a2a11fcc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:2d:07:1c:94:2e:04:6c:50:f6:fc:9f:01:
35:86:82:99:0c:0f:56:b3:38:5f:0e:7c:6c:35:11:
33:db:60:04:58:ed:2b:5a:16:6f:2c:97:bc:cf:d1:
c3:25:ce:96:56:5d:88:08:5f:7a:24:53:75:7c:7f:
f5:43:40:e5:a9:8d:0d:fb:56:9f:65:32:7e:08:91:
8d:4d:fc:69:14:15:37:73:30:06:cc:79:62:3d:35:
05:c7:28:fb:ac:2b:f7:33:05:fd:24:cd:b1:46:b5:
97:87:96:9a:f3:78:5e:68:43:fa:78:b8:82:e3:be:
b4:ab:bd:ba:36:ef:8d:f9:bf:0a:90:94:c6:b9:1b:
73:96:b4:8d:05:41:d1:9c:1d:ed:b2:75:c1:ab:50:
f0:ab:26:aa:1d:31:ce:db:c8:e4:a9:d1:31:82:f0:
31:46:58:f7:22:53:ca:d2:84:ca:95:39:94:38:a4:
46:1b:5f:38:d2:64:7d:dc:49:28:6b:0e:eb:92:e3:
6e:d0:c9:56:de:c6:b9:0d:65:c9:ba:58:5a:d1:98:
a8:2a:ff:a0:86:ab:80:47:0d:a7:50:25:e8:dc:c0:
2e:c0:b1:6b:50:18:e1:3e:a1:91:ba:d7:47:dc:c8:
ef:1c:95:7b:8c:f7:61:9c:1e:90:b2:0f:85:90:a7:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:03:8E:F8:57:91:3E:0A:34:9D:4D:1E:FC:3D:48:69:0D:34:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be84b696-0732-38c2-a4b0-4121e185344c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:da:d4:dc:71:5c:35:40:e9:09:0c:12:e7:a2:14:99:4a:3a:
37:63:bb:68:86:be:c1:9c:75:83:cb:4f:9e:c2:82:16:95:87:
c8:67:e5:49:15:89:b8:92:3e:51:f8:00:30:9a:ed:ad:44:a7:
f8:92:9a:77:a8:19:1f:42:7c:ac:af:99:c8:8d:23:e8:14:81:
c2:89:68:b5:4d:bb:69:d7:67:a3:e1:f5:5f:ea:82:33:85:7f:
11:ed:b8:e0:f3:ab:3b:8b:13:5b:50:42:f2:a6:62:08:b6:8b:
82:0e:dd:88:97:25:ea:17:0f:77:a1:ae:31:8b:b8:ca:06:cb:
49:07:26:21:51:07:34:11:5e:1b:71:ac:39:3c:39:53:ab:96:
dc:9d:97:6d:cc:93:f9:ca:96:88:bb:03:a8:94:69:48:a2:a6:
04:b5:f8:40:4f:0d:36:4e:5f:50:80:0c:d7:1c:59:ec:14:31:
50:70:61:1c:4f:71:f9:6e:d9:83:61:26:4d:df:48:5a:60:32:
59:88:20:0c:ca:cc:1b:85:0d:e8:a5:58:ac:f2:1c:e2:69:f7:
2e:26:b3:d6:75:bc:00:bc:d6:7c:0b:5f:fe:97:2e:92:f4:05:
dd:67:6e:a1:17:98:30:92:bb:42:dc:79:90:b0:ed:d2:fa:5e:
8d:4e:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:36 2026 by rpki-client