
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa
File: c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa (raw, json)
Hash identifier: akwHa9Lybe3DQlcb3750yQwK4y2JcB0atrhCifiHqOQ=
Subject key identifier: 48:5A:60:95:39:86:F0:56:F4:E4:0E:04:FA:0A:4D:CB:84:C9:41:3B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F549D78E2E807C58FAC9F0480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 209.165.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:78:e2:e8:07:c5:8f:ac:9f:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=41654717-62db-4ee7-b71e-3f4640728de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:41:61:df:fd:98:7c:af:26:08:32:4a:aa:
66:f7:92:bb:e1:3d:10:53:b6:87:9b:b8:9c:48:7b:
75:5c:a3:6c:28:c7:a6:3b:31:99:99:5e:c3:23:f3:
24:84:e3:ab:67:35:f2:62:df:a9:37:82:09:13:9f:
c6:1a:a1:47:cd:6a:06:9d:cd:41:ac:e1:73:e6:d8:
17:ab:7b:75:dd:1e:e4:ea:ca:c0:9f:9c:69:1a:ec:
55:4b:48:77:2f:03:8a:0d:c2:da:de:98:7d:f4:5a:
df:cc:85:ae:27:9c:b5:a3:75:b2:92:2d:7a:54:1a:
f6:f7:70:a7:ff:1a:50:65:0a:73:1f:df:62:f3:af:
da:14:b5:df:8b:39:08:c9:e9:c4:76:11:4a:2b:3d:
93:c6:1f:b3:5e:de:37:07:57:11:be:13:4e:46:ba:
23:98:53:f6:78:41:8c:bf:e2:6e:45:b4:f2:6d:eb:
c4:e1:e9:4c:10:6f:d5:3f:c3:d2:9e:24:77:b3:eb:
f7:4b:ec:83:d9:df:f5:25:b2:ba:14:f3:8c:c3:5a:
cd:c0:a1:95:1b:ca:d0:2a:35:59:e9:cc:7e:5a:10:
72:a2:fc:ac:aa:47:3e:6d:ff:cd:1d:7d:b3:a6:ed:
8d:d3:f6:c8:13:cb:b1:67:6d:7e:0f:57:6f:1a:4c:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:60:95:39:86:F0:56:F4:E4:0E:04:FA:0A:4D:CB:84:C9:41:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.165.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:9c:60:bf:06:20:b0:98:75:6b:0e:39:dd:16:a8:c1:b6:c5:
aa:7f:e5:41:f1:40:5a:b9:5a:0f:7c:d2:1c:9a:43:61:27:87:
78:db:8a:f6:0c:a6:48:e4:00:41:f6:b0:f7:a4:4e:23:8b:f0:
5c:cc:eb:5e:9f:ac:55:f2:04:6c:9a:56:91:35:0f:1f:1e:fb:
89:89:6b:0e:f0:bf:7d:a6:63:cf:b2:b1:ff:4f:ff:1f:35:26:
a9:8d:90:8d:bc:9d:a0:97:4e:7c:7f:6f:f4:51:7e:e6:bb:ef:
d2:7c:61:12:b7:ca:51:36:e0:85:50:ea:2b:10:73:8e:64:39:
a7:46:6e:bc:cb:f9:5a:4b:33:aa:91:75:eb:db:27:7f:a6:a1:
91:65:f1:81:0c:38:3e:d8:e6:1c:d6:4b:db:41:91:05:41:69:
b1:ef:bd:a1:86:cf:44:70:a9:13:80:32:ab:a7:30:88:2b:7e:
aa:2d:07:9e:0c:02:53:5c:f3:5c:b8:1e:4d:81:f7:d1:7e:9d:
a4:a3:10:18:4d:db:14:5f:b2:5b:eb:f2:22:85:b9:60:f3:f0:
bd:1d:2e:4a:05:d0:39:82:94:f2:87:5d:4c:c9:8f:93:9c:5a:
37:07:62:17:e6:80:4a:e1:a3:6a:99:d6:cb:88:af:07:78:c5:
d3:20:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:26:09 2026 by rpki-client