
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa
File: cda663b3-8e52-372d-af57-6e3f7757d199.roa (raw, json)
Hash identifier: F7xmWHO4bWCSL66oEKrmXZelY3siuQoKycjYztht72k=
Subject key identifier: 3E:95:BF:49:22:52:54:4A:9B:D6:33:3A:47:03:3A:58:79:0B:70:6B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB8475537E951C477A981F800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 173.189.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:55:37:e9:51:c4:77:a9:81:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=9d295699-f36d-485a-b753-d0c927b804bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:93:71:11:5f:c4:f9:e2:74:4c:35:5d:80:
b6:c6:f1:c1:02:8c:3b:03:c1:c2:26:cd:2f:53:35:
8a:d9:db:77:f7:9f:ac:6b:64:d3:ce:4c:7c:90:33:
4c:80:71:1c:41:11:a5:08:4d:f4:4e:bb:96:d8:0f:
fe:9f:53:6a:92:fd:ae:94:21:b0:93:ed:be:d0:60:
3a:4a:9d:41:59:16:e8:f1:18:4d:a4:50:8b:38:f2:
f9:b9:c9:92:b4:17:a0:8a:f4:c7:8c:f0:3c:c9:77:
12:c2:5f:27:9f:b4:f4:2b:32:4c:bf:36:67:89:e9:
00:39:57:aa:bd:a3:93:d0:fc:b8:a6:c0:c5:c3:31:
51:ce:f4:e8:e8:05:0a:07:60:3a:ff:73:cc:d2:2e:
49:00:3b:4d:09:39:04:c1:1d:65:fa:60:5c:37:39:
90:c9:ce:84:f7:a0:c5:1c:8c:ed:9f:cf:e2:31:6f:
de:52:dc:5d:c9:e6:bd:4d:1f:c7:ee:9a:31:c6:22:
3d:0f:7b:6e:eb:9e:07:1e:11:5e:63:d2:fa:96:da:
24:56:df:99:99:27:ba:ca:6a:1f:d6:81:7b:17:b7:
61:58:16:6f:c1:39:be:b9:b7:22:a9:ed:95:83:8d:
b9:6b:f0:63:e6:a4:0d:fa:ab:86:6d:11:84:a6:56:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:95:BF:49:22:52:54:4A:9B:D6:33:3A:47:03:3A:58:79:0B:70:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:9a:9c:11:09:58:2c:8e:f9:f4:57:b2:e5:ad:8f:60:bd:d1:
9b:cf:ee:2b:d1:16:5e:a1:f1:04:45:2c:58:63:b2:bf:44:5b:
d7:3b:71:c6:54:6e:39:d0:cb:fa:b3:4a:56:92:6e:46:c8:f1:
45:61:8e:7d:dd:27:05:ea:6b:f1:26:02:6f:bd:29:7e:9d:d4:
cf:7e:f5:54:0e:c2:81:51:11:62:dc:3f:83:c0:c0:97:9c:70:
89:3e:0f:73:2f:82:21:5c:8d:4a:87:b3:3d:25:22:38:60:29:
d6:89:45:da:07:eb:fe:c5:ff:20:ec:63:c5:95:0c:18:92:b0:
3b:a1:a3:d6:af:03:d9:ca:fd:75:c4:14:f7:dc:07:67:7b:93:
b8:12:f2:a9:15:b8:41:9c:f8:b2:ff:a3:06:cf:3c:76:77:d7:
ca:c5:47:c3:ea:07:a0:bc:1e:1f:90:5e:e4:87:30:c1:5f:4e:
6b:71:5a:50:bc:a5:cd:46:b3:2a:43:d0:1a:73:09:55:62:fc:
b9:db:e1:91:3b:66:e3:36:2f:f4:36:44:a2:00:3f:59:29:07:
81:0d:3d:bd:ac:40:21:54:d5:c0:dc:cb:c8:bd:f2:a7:ac:d3:
91:a6:6e:2e:14:71:ab:65:a6:90:5b:49:2b:19:86:15:0e:47:
bc:94:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:29:37 2026 by rpki-client