
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa
File: c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa (raw, json)
Hash identifier: riktUZ2bL5SYwc26Ndt2AJoTfnQgGpwz2N8o1YR1Pms=
Subject key identifier: D2:92:35:CA:2E:77:99:25:73:2D:82:A2:EE:15:96:D3:BB:E4:6B:57
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CEA5CFB5888F95FC778603400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 7029
IP address blocks: 151.213.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:fb:58:88:f9:5f:c7:78:60:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=0f717c8b-74ca-4e49-87be-91b5f0f1e92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:dd:15:8f:d4:4f:11:72:38:1d:14:cb:19:
61:60:75:84:c2:7f:a6:97:0d:89:02:f1:d0:27:b7:
6a:06:d3:01:8f:9b:9a:29:9f:76:1e:e6:bb:f7:13:
fe:32:67:4b:5c:b1:eb:e3:8b:12:a8:ed:94:54:9c:
02:3b:9a:9e:16:f5:0e:95:00:8a:dc:f9:58:5c:6d:
27:86:5b:98:ee:66:c7:e1:c2:77:80:b6:8e:de:8b:
6e:ad:93:2d:f5:23:f6:0f:40:1d:14:4c:ca:28:40:
f9:00:ef:11:96:8c:22:33:8c:d0:97:a9:c9:ce:fd:
ef:e6:ef:9a:02:c7:34:63:c5:b6:5e:05:4d:a9:2d:
ee:4e:8d:69:98:d8:6d:55:e4:43:d8:72:3c:b0:90:
ee:ec:88:55:14:9a:f8:3e:b7:e8:67:2f:eb:ad:d9:
ab:a8:f9:98:ea:22:ed:88:01:b2:aa:84:78:fc:ae:
71:0b:af:51:5b:84:ff:a7:57:74:f6:88:cc:5e:a8:
71:25:91:1b:6a:d1:60:2c:b1:83:18:e2:b0:ec:95:
f0:62:e7:9f:4f:df:e7:0d:e4:87:e0:9f:60:5e:57:
c3:4e:a5:f8:44:ab:ba:1e:99:4e:f4:df:cd:03:a2:
02:90:f7:23:b5:2c:b8:04:75:2f:f9:45:71:16:9b:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:92:35:CA:2E:77:99:25:73:2D:82:A2:EE:15:96:D3:BB:E4:6B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
151.213.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:53:1c:ec:3c:45:55:1f:ca:b6:3d:08:6e:f9:94:41:4c:b1:
25:32:7a:66:2a:55:5b:59:7a:da:be:59:ae:a0:65:6b:38:71:
c2:cb:81:2f:3d:49:fb:cf:49:86:28:0d:8d:82:73:92:60:1e:
67:6a:db:53:7b:c5:6f:66:2d:26:94:6d:d5:f8:b4:9c:d6:35:
66:e8:df:73:2a:4b:35:32:6b:f0:77:db:74:d1:94:a9:8f:25:
42:36:61:98:2a:66:31:78:b5:89:bb:65:77:e4:22:7f:2a:b8:
82:fe:50:9d:49:d1:a5:cd:df:4e:8c:95:34:ef:ff:27:0b:47:
c1:ba:27:0a:b0:2d:82:6c:b8:19:aa:04:fc:b2:e7:1a:b5:48:
57:33:4a:82:6b:cb:03:3e:e1:d5:e2:a6:39:59:c5:b9:95:c5:
e8:90:81:04:be:71:9e:1b:ac:e3:cd:67:c1:5d:e7:8e:59:fc:
9a:53:2f:86:e5:15:10:cb:bc:78:55:e7:73:67:bf:69:7d:29:
3d:61:57:43:80:63:42:72:56:ae:92:80:da:31:bd:b0:72:8d:
7a:97:99:81:a1:df:e7:f2:0a:d9:6e:f7:95:d2:3d:1d:20:d3:
7d:b5:ef:fd:53:8b:cb:87:f5:c6:40:9b:8a:36:2d:83:a7:a8:
ee:e6:d0:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPtYiPlfx3hgNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
MGY3MTdjOGItNzRjYS00ZTQ5LTg3YmUtOTFiNWYwZjFlOTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvdFY/UTxFyOB0UyxlhYHWEwn+mlw2JAvHQ
J7dqBtMBj5uaKZ92Hua79xP+MmdLXLHr44sSqO2UVJwCO5qeFvUOlQCK3PlYXG0n
hluY7mbH4cJ3gLaO3oturZMt9SP2D0AdFEzKKED5AO8RlowiM4zQl6nJzv3v5u+a
Asc0Y8W2XgVNqS3uTo1pmNhtVeRD2HI8sJDu7IhVFJr4PrfoZy/rrdmrqPmY6iLt
iAGyqoR4/K5xC69RW4T/p1d09ojMXqhxJZEbatFgLLGDGOKw7JXwYuefT9/nDeSH
4J9gXlfDTqX4RKu6HplO9N/NA6ICkPcjtSy4BHUv+UVxFpvKfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKSNcoud5klcy2Cou4VltO75GtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzM1MDNlNGQtZjhhZi0z
YzhmLTk1ODEtNDJkYTRlZjAwNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9UAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExTHOw8RVUfyrY9CG75lEFMsSUyemYqVVtZetq+Wa6gZWs4ccLLgS89
SfvPSYYoDY2Cc5JgHmdq21N7xW9mLSaUbdX4tJzWNWbo33MqSzUya/B323TRlKmP
JUI2YZgqZjF4tYm7ZXfkIn8quIL+UJ1J0aXN306MlTTv/ycLR8G6JwqwLYJsuBmq
BPyy5xq1SFczSoJrywM+4dXipjlZxbmVxeiQgQS+cZ4brOPNZ8Fd545Z/JpTL4bl
FRDLvHhV53Nnv2l9KT1hV0OAY0JyVq6SgNoxvbByjXqXmYGh3+fyCtlu95XSPR0g
03217/1Ti8uH9cZAm4o2LYOnqO7m0FE=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:33:09 2026 by rpki-client