
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4229f5e-a0bc-35fe-9b83-146124f9d555.roa
File: c4229f5e-a0bc-35fe-9b83-146124f9d555.roa (raw, json)
Hash identifier: jJbSe1qgLsdHtYR+sO9FEv4IefCl9/xTqIzw1m5XqEI=
Subject key identifier: 34:F3:5B:D3:79:15:04:2B:47:7A:2B:85:1F:81:D4:AB:9B:EA:CA:40
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D705D7746AA9C81B88EC4E0A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4229f5e-a0bc-35fe-9b83-146124f9d555.roa
Signing time: Wed 08 Apr 2026 14:00:26 +0000
ROA not before: Wed 08 Apr 2026 14:00:26 +0000
ROA not after: Tue 07 Jul 2026 14:00:26 +0000
asID: 7029
IP address blocks: 173.191.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:5d:77:46:aa:9c:81:b8:8e:c4:e0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 8 14:00:26 2026 GMT
Not After : Jul 7 14:00:26 2026 GMT
Subject: CN=d578c89d-f398-49b3-968d-5514b02d82d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:18:d4:8d:2a:32:1c:f3:a3:32:d2:64:a3:
58:6b:83:84:a9:a6:c4:3e:8f:09:93:00:11:d6:ed:
67:b5:3c:a2:cd:71:9f:7f:2d:b0:e4:74:2f:f5:ea:
e3:9f:46:1e:ed:65:47:ea:cb:79:28:38:0d:68:43:
c2:70:df:d1:07:39:26:3a:c1:af:15:a3:d9:bf:4d:
ac:2f:75:5e:89:e3:6a:48:b0:10:4c:f4:12:3f:a1:
d5:21:dc:d8:3f:7a:73:95:09:7a:81:4f:e5:47:16:
fa:1b:d3:93:f6:b6:6c:01:22:1e:6a:7b:8b:b0:26:
92:7d:dc:fc:e7:53:6d:73:b5:da:c1:b6:b6:f3:5a:
4e:f1:66:68:92:1d:64:28:9b:d9:51:1b:e1:03:05:
df:17:47:04:28:76:4a:d4:a2:67:01:ec:2a:6a:b4:
5d:38:9b:07:94:95:5a:6b:8e:f5:b2:df:cb:e4:bc:
6a:a8:24:b1:a5:49:cd:bf:24:de:ea:35:2b:94:76:
cf:a8:4f:3c:4b:81:2a:8e:49:ff:ef:4f:00:9e:96:
07:12:51:58:c8:ef:3c:16:b2:c9:d1:75:42:5a:d5:
cb:e4:a0:70:a2:4a:be:ec:e8:83:40:f7:a3:3e:87:
3b:45:11:1f:c5:04:c2:00:27:a8:19:72:1e:22:af:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:5B:D3:79:15:04:2B:47:7A:2B:85:1F:81:D4:AB:9B:EA:CA:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4229f5e-a0bc-35fe-9b83-146124f9d555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:5d:e9:85:37:10:d4:9d:af:f3:da:b1:2f:f6:66:58:af:fa:
dc:e0:02:f0:d0:4e:e7:55:c7:07:82:c7:b4:08:03:d8:ca:1f:
2d:0b:13:5f:c4:80:21:30:03:fd:14:aa:67:17:11:35:7a:b5:
d6:bd:1c:dd:b4:bc:5f:c3:b3:d8:06:10:ad:f4:d2:15:50:21:
07:be:53:20:aa:ac:e7:f7:5b:91:cd:d8:f8:ab:f9:0c:fd:14:
5c:de:20:76:f9:3b:f5:ea:42:ab:69:7c:14:a8:40:f3:c3:de:
e5:6b:36:f0:fc:00:05:13:49:03:5f:6c:45:ed:dc:04:ea:38:
7c:cb:b5:fb:23:f3:f4:1d:90:2a:9a:f8:1f:b2:8d:a4:fb:ff:
5a:6a:13:e7:83:c6:0f:81:80:b5:ef:04:b7:30:32:86:06:0e:
3f:6a:4a:63:74:84:79:c1:3e:7c:a6:19:6c:ac:95:9a:4b:cf:
5a:c9:21:cd:c1:40:fe:11:4d:52:12:31:68:2e:30:e8:46:8f:
04:ca:c2:13:df:b2:26:4b:8d:88:6d:ed:49:09:8d:3d:e2:e3:
b5:bf:45:75:4b:f4:f8:2c:d5:f4:b4:c1:cd:ae:b3:a0:d4:dc:
53:e6:8d:3b:b6:90:48:f9:8a:e8:ba:16:b0:87:4f:c0:9b:95:
38:60:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:43:37 2026 by rpki-client