
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa
File: ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa (raw, json)
Hash identifier: JeKAueKjA5DvdS2FyG5WokmiUiM687POaWYy16U6gew=
Subject key identifier: 2E:62:33:02:E6:7F:FC:33:BE:E7:4F:8C:A7:AB:BB:D2:00:26:AD:EC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1B0313845E7DC58962B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 75.117.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:b0:31:38:45:e7:dc:58:96:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=84e62b0c-3604-4f6a-b67b-2c643d1525cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:33:7d:9c:9b:25:4d:9c:25:be:b7:48:b4:
63:25:0c:7e:bf:43:31:a3:07:fc:3b:99:85:3e:d7:
2e:9c:75:48:1c:d1:77:2e:f2:00:47:91:10:f6:87:
9f:8c:e2:e8:1e:98:9a:9e:bf:59:05:84:7b:29:78:
fb:97:a1:37:96:04:d6:90:9e:18:74:7a:fd:a2:5b:
84:b6:26:e2:3a:b8:e5:eb:ae:27:11:f4:a2:32:10:
fb:d9:5e:c0:76:92:f3:08:78:4b:a9:62:2a:aa:4f:
95:75:61:cb:a0:c2:ac:e2:35:30:ea:24:9e:41:d9:
18:6d:62:b1:32:3b:e6:80:0e:4e:51:10:13:72:26:
66:79:54:d7:43:e8:a5:fe:2e:b4:95:9d:3f:40:6f:
42:6f:0e:6e:8d:29:06:b4:5f:a1:8e:2c:90:39:a7:
22:d1:74:bc:47:70:84:05:fe:d7:4a:43:6d:9d:65:
f5:17:59:12:f5:65:26:b4:43:80:ec:aa:40:72:5f:
2f:bf:19:91:3b:9b:38:9f:c7:47:de:33:47:f1:e4:
3b:ec:59:70:f0:7e:94:6e:34:3c:e1:bb:3a:ed:47:
d9:10:f1:20:33:eb:af:4d:fe:c7:33:e1:f6:31:ce:
43:f9:ed:01:05:bc:67:a9:ab:4d:77:c7:11:3d:a6:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:62:33:02:E6:7F:FC:33:BE:E7:4F:8C:A7:AB:BB:D2:00:26:AD:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:dc:63:6c:ee:00:ac:8c:0c:54:e5:0d:91:4f:f5:df:b4:c0:
98:79:10:ea:1f:fe:6d:e3:13:50:1f:73:10:fa:3a:37:92:6e:
47:f9:60:e1:c6:b8:31:5f:c9:3a:55:db:c5:eb:0d:e8:22:c7:
b7:c2:4e:58:56:d9:b2:10:27:df:54:72:6a:e4:a1:ca:25:ae:
07:4d:06:ba:70:87:e7:5e:50:69:44:ee:c6:d2:84:a4:29:91:
64:8c:68:05:e3:4d:a2:6c:6c:42:dc:52:95:8e:e1:72:d0:1d:
34:ff:d9:d2:18:5f:df:3f:fe:7c:4e:4b:14:7f:08:83:ec:af:
44:f9:64:ac:3a:e5:d4:f5:fd:bf:40:53:cb:c1:70:af:b0:0d:
9b:9b:f1:c8:5f:25:8f:64:2e:4e:a4:fe:c3:c3:3e:d4:9e:e9:
d4:fe:a9:d5:3c:ff:13:79:5b:05:5b:34:80:c0:55:b5:5b:27:
3e:7b:db:6c:2e:f1:68:53:53:cc:92:a2:e2:f9:40:fc:74:36:
53:7a:24:96:84:af:69:01:f9:b7:16:23:8b:a7:a8:40:21:3f:
9a:dc:5b:7b:4f:d7:e4:ec:e0:88:68:a1:61:3f:f9:97:1e:67:
b0:c7:5c:be:43:fc:58:44:80:c1:38:02:4e:dd:75:ea:e4:80:
88:81:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:33:39 2026 by rpki-client