
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa
File: c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa (raw, json)
Hash identifier: EUWwPxs7fpNQkl0ciKIiXoJsYbvglb7Mu1t03CdtwrM=
Subject key identifier: E1:5D:D5:44:40:81:AC:74:D0:D8:5B:4B:70:A8:E4:85:6E:4A:AB:1A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1D164D1631104685A5B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 398741
IP address blocks: 40.136.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:d1:64:d1:63:11:04:68:5a:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=333d25eb-817c-4fe5-a140-73ac26ea4d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:52:2c:16:d3:80:ba:0f:9a:b9:56:77:39:
1b:92:6e:b5:6e:9e:1c:1f:02:f4:e3:92:a9:c1:0e:
9b:27:37:d0:f4:dd:72:9d:3a:89:f8:b7:05:92:96:
27:75:26:dc:9e:08:e9:74:d0:71:80:8a:c4:73:c4:
e3:3d:7f:04:84:35:23:ce:db:97:5f:f2:b1:6f:2d:
bc:eb:44:be:67:a8:94:60:2e:24:86:a9:32:e2:c5:
97:5a:c4:0b:39:c0:35:e9:ba:0b:1a:24:0a:ec:2e:
dc:72:26:37:4e:42:5d:8a:dd:b5:db:a7:d2:e5:2e:
b3:35:a1:fc:58:8b:a6:f8:c6:de:99:43:7e:f4:1a:
c6:4e:c6:49:5e:1f:c4:69:7e:7a:a8:8f:75:65:3d:
9e:07:c3:d0:59:0d:bb:40:70:56:21:3a:a4:8e:9d:
7a:6c:29:d2:dd:41:30:38:13:29:c8:30:35:8a:c7:
31:a3:3b:e2:1c:b6:69:9c:a9:6d:31:ce:a6:88:49:
8d:1e:20:53:26:54:f4:a7:b7:61:f7:d6:d7:83:70:
87:a6:7c:73:9d:b0:09:86:a0:5b:a8:00:d8:b0:a1:
49:7e:c1:9a:a5:7f:d2:c9:6b:e8:49:63:a8:9e:16:
bd:83:0e:39:7f:a3:b1:de:89:1e:79:64:1b:6c:ea:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5D:D5:44:40:81:AC:74:D0:D8:5B:4B:70:A8:E4:85:6E:4A:AB:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.136.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:b6:8a:b4:fd:d0:de:99:4d:ca:d6:62:cd:ba:25:0b:d0:d4:
0c:2c:53:7a:dd:7d:e0:b2:f0:5d:53:83:87:15:db:5d:05:45:
3f:46:f8:1f:60:0b:c7:81:6c:aa:01:e3:74:fe:34:83:7d:39:
4c:09:11:c0:41:85:87:37:2e:fe:86:e4:c9:b2:61:90:d7:9c:
7b:d3:52:f4:ab:51:79:ff:81:ae:e1:4a:f2:52:24:77:01:19:
4c:89:40:73:75:3e:14:4e:54:81:5a:94:bc:9b:eb:e3:0c:a1:
5b:71:38:bf:6c:01:3f:f7:7d:4f:a0:0c:1b:2a:4b:0b:c9:f3:
c1:5b:03:0a:22:75:21:cf:10:40:eb:be:a8:30:fd:54:be:b3:
7a:ec:6d:71:5b:b6:71:b6:90:f4:c5:51:67:57:8f:6c:ed:55:
5f:ff:b7:cf:d0:a4:d2:21:d7:96:7a:a2:9a:2f:97:50:7d:f2:
16:4a:fd:64:62:6e:d4:5d:7a:3f:69:67:7f:bd:f8:68:94:85:
6f:49:b3:ef:77:66:33:26:fa:58:dd:bc:c0:d4:3c:bd:ca:90:
91:ec:07:eb:ad:13:4a:36:3d:54:3d:7d:cb:a6:2a:4c:4e:55:
2a:a7:14:51:cf:5e:bd:13:ef:31:03:8e:86:d3:e9:66:74:5b:
f4:53:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:32 2026 by rpki-client