
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa
File: c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa (raw, json)
Hash identifier: MFAhQYeDd655zSTRcGyMhZGeRJJnbJs+EmWkjWzTaS8=
Subject key identifier: 7D:1E:20:C2:B5:70:E0:99:56:F2:D5:EE:C5:5E:BC:96:E9:B2:8A:26
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EF87CB633C336E0B8E1956B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 71.29.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:b6:33:c3:36:e0:b8:e1:95:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=81688b7e-640a-4a1e-8c38-91cf8f11414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:be:e5:c1:d8:9c:a3:0d:b6:ae:41:fd:12:
c6:ab:b7:20:b9:f5:85:5f:83:2d:4a:47:bc:72:c4:
a3:4e:ca:dc:c7:2a:4f:3a:d0:ae:f4:35:e7:b9:36:
65:91:db:ab:cb:84:40:43:9d:c9:30:2a:20:03:7b:
b9:5b:52:b2:4f:09:ad:d1:40:16:55:8c:73:0e:8f:
69:41:89:86:f6:22:2a:3f:88:f1:37:a9:81:88:84:
60:22:b9:27:f6:47:61:d4:1f:c9:c6:ff:68:86:fa:
c3:8f:db:7f:0b:92:c1:fb:ef:20:29:3c:54:a3:62:
09:f2:1e:6a:80:70:bf:cc:d8:80:31:f0:e8:da:04:
a3:69:e0:66:50:de:26:11:29:6c:08:30:e6:0f:d5:
0c:12:3c:90:1b:a1:01:8c:0d:a3:05:30:a7:4e:8a:
89:54:7c:4c:cc:54:58:84:6f:9b:62:f8:4b:43:60:
93:af:64:ac:32:33:aa:1b:04:35:2a:51:af:5c:75:
5b:14:be:b5:14:82:e2:08:e9:9f:51:9e:18:96:f2:
6a:f3:c4:52:fe:31:99:78:ee:7f:1f:7c:2c:77:40:
db:ac:09:9e:d8:3f:16:6a:49:27:43:fe:31:1c:22:
c5:59:65:e1:96:f2:08:59:0b:b7:3d:88:38:75:7a:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:20:C2:B5:70:E0:99:56:F2:D5:EE:C5:5E:BC:96:E9:B2:8A:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d3:99:6c:e6:9c:a5:25:49:d6:b1:a6:7b:16:46:d7:3e:a8:
47:7b:e6:5d:24:b1:8e:ca:a8:79:42:1f:18:7e:40:62:f3:26:
e4:3d:2e:af:0b:81:21:32:56:39:bf:4b:47:3a:bc:a6:4d:b0:
19:0b:8a:a5:00:b9:ae:c6:11:07:cd:11:bb:ca:22:33:dc:3a:
25:be:d0:a7:07:1a:07:e2:ad:58:bb:71:4b:05:6f:01:4d:70:
ad:1b:86:a8:dc:32:3d:e7:94:c7:cf:0f:4a:9f:36:fa:69:b3:
27:01:45:15:dc:7b:44:1c:70:b9:9b:b3:41:49:db:71:39:8e:
0b:ad:20:21:cf:8a:13:2f:f8:47:51:75:f3:8c:8f:68:8d:11:
a2:86:a2:9d:ec:5d:74:ce:9b:2c:2a:23:8b:14:22:b4:a3:cc:
ad:12:d7:46:1d:8c:53:33:64:ad:c3:e3:ea:78:5c:55:2d:62:
60:b0:72:4d:21:18:71:33:f4:9d:f2:2e:4b:2b:72:4a:23:39:
97:7e:cd:eb:db:66:06:21:d0:03:91:2a:51:35:44:ab:21:14:
0b:d2:65:5a:5b:05:7f:db:41:1d:80:26:df:dd:89:d4:cd:dd:
e4:12:a5:ab:0d:46:a5:27:12:6e:06:d9:68:00:6f:5f:e8:88:
29:a1:96:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLYzwzbguOGVa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
ODE2ODhiN2UtNjQwYS00YTFlLThjMzgtOTFjZjhmMTE0MTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoC+5cHYnKMNtq5B/RLGq7cgufWFX4MtSke8
csSjTsrcxypPOtCu9DXnuTZlkdury4RAQ53JMCogA3u5W1KyTwmt0UAWVYxzDo9p
QYmG9iIqP4jxN6mBiIRgIrkn9kdh1B/Jxv9ohvrDj9t/C5LB++8gKTxUo2IJ8h5q
gHC/zNiAMfDo2gSjaeBmUN4mESlsCDDmD9UMEjyQG6EBjA2jBTCnToqJVHxMzFRY
hG+bYvhLQ2CTr2SsMjOqGwQ1KlGvXHVbFL61FILiCOmfUZ4YlvJq88RS/jGZeO5/
H3wsd0DbrAme2D8WakknQ/4xHCLFWWXhlvIIWQu3PYg4dXpd0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0eIMK1cOCZVvLV7sVevJbpsoomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJkMmVhOWQtNDZlMS0z
NTU2LWExOGMtMTdjZTczZTQ4MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx3hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3TmWzmnKUlSdaxpnsWRtc+qEd75l0ksY7KqHlCHxh+QGLzJuQ9Lq8L
gSEyVjm/S0c6vKZNsBkLiqUAua7GEQfNEbvKIjPcOiW+0KcHGgfirVi7cUsFbwFN
cK0bhqjcMj3nlMfPD0qfNvppsycBRRXce0QccLmbs0FJ23E5jgutICHPihMv+EdR
dfOMj2iNEaKGop3sXXTOmywqI4sUIrSjzK0S10YdjFMzZK3D4+p4XFUtYmCwck0h
GHEz9J3yLksrckojOZd+zevbZgYh0AORKlE1RKshFAvSZVpbBX/bQR2AJt/didTN
3eQSpasNRqUnEm4G2WgAb1/oiCmhllQ=
-----END CERTIFICATE-----
Generated at Thu Aug 27 11:32:49 2026 by rpki-client