
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d200cbf6-811e-3948-9a39-b7cac094e339.roa
File: d200cbf6-811e-3948-9a39-b7cac094e339.roa (raw, json)
Hash identifier: On+YhuVhS2BoFjw1GYqTwzfmNQURf8tSme2XD6RvvrU=
Subject key identifier: E2:B2:0C:AC:C9:45:DE:E7:F5:A4:74:4A:72:2B:F1:D1:18:DB:85:DB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EDB2C926F24265F5402C3DF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d200cbf6-811e-3948-9a39-b7cac094e339.roa
Signing time: Sun 16 Aug 2026 13:00:12 +0000
ROA not before: Sun 16 Aug 2026 13:00:12 +0000
ROA not after: Sat 14 Nov 2026 14:00:12 +0000
asID: 7029
IP address blocks: 173.191.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:db:2c:92:6f:24:26:5f:54:02:c3:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 16 13:00:12 2026 GMT
Not After : Nov 14 14:00:12 2026 GMT
Subject: CN=1765b585-3fa8-4d80-94a8-500d457ccdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:ed:83:11:81:5c:ca:23:02:0e:f9:42:30:
5f:57:32:8e:62:b6:1e:67:76:f3:0f:97:bd:23:f1:
f7:7a:b0:05:d0:e4:f9:28:55:a0:f4:cf:94:4f:d0:
93:f3:92:ee:b1:33:8c:87:23:b6:03:95:ac:d0:53:
6f:5f:ba:d1:bd:3a:4f:fe:b8:5f:e6:b6:72:b6:58:
21:99:2b:e3:60:44:14:59:9a:1a:ae:08:d0:b3:23:
63:7b:73:fb:52:4d:44:29:43:9e:4e:be:84:2c:ab:
ab:ef:5e:2e:4b:a6:f9:63:5b:14:97:74:b4:f0:94:
46:ce:dc:82:e4:25:01:76:e5:0a:dc:6f:1f:d4:a7:
79:f5:be:4a:c3:0b:11:1b:ec:d4:24:33:cc:59:5c:
94:37:84:02:20:31:8a:8a:5b:18:57:6a:d8:a7:07:
28:87:15:ce:59:33:2a:d2:00:e9:c7:f0:e9:e3:75:
e9:50:35:4d:a1:7a:7c:b9:d7:8f:44:33:38:32:29:
24:49:ca:9d:90:ab:ac:84:39:82:2b:a3:f3:eb:cd:
52:26:9b:8f:9e:40:e3:15:97:44:14:8e:c5:2d:22:
af:28:82:a0:62:b0:79:de:da:a4:61:a0:9e:c2:18:
d7:d5:31:21:76:bc:d0:91:4c:a7:4c:da:4c:35:7b:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:0C:AC:C9:45:DE:E7:F5:A4:74:4A:72:2B:F1:D1:18:DB:85:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d200cbf6-811e-3948-9a39-b7cac094e339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:23:ef:14:6d:3b:6b:f4:b4:11:8e:1f:27:a6:f3:85:10:7b:
17:42:7f:cb:6a:e5:ae:6d:c5:f3:a8:44:97:68:21:fd:f1:c1:
b4:37:5c:a3:9c:11:09:d1:c9:91:df:00:a5:22:ea:b9:08:fd:
48:7d:66:64:f2:24:87:99:03:c1:03:e9:69:cd:a4:bb:83:f3:
65:a5:b9:f6:bd:f4:77:2a:3c:13:d6:47:24:23:39:a0:53:48:
0f:9d:a0:cb:ca:32:6a:be:24:64:6b:7d:a9:06:1f:33:3b:e3:
12:88:2e:75:c2:3a:89:79:d4:58:b2:53:58:0b:af:2f:e8:5b:
5f:09:c8:91:bc:57:fc:43:ff:70:9e:bc:d3:0a:c1:30:47:58:
5e:56:d5:df:9e:e3:a6:51:35:34:e6:9f:9b:64:9f:43:91:9b:
03:cd:ee:7a:c8:41:bb:e0:9f:28:bb:7f:4d:0a:be:93:b0:ba:
96:c8:ca:14:9d:7f:86:c2:d6:a7:d6:6e:8c:4b:89:6c:78:fa:
8e:f4:b6:1e:34:41:97:13:d5:db:27:a6:64:78:e0:8a:9f:37:
8e:65:9c:a5:24:d0:da:90:39:07:3a:ef:e8:ea:1e:b9:31:25:
99:f1:64:ed:bc:1a:d6:bf:86:bc:b6:48:0b:3e:f5:12:d4:c7:
7e:9a:0d:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLJJvJCZfVALD34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk
MTc2NWI1ODUtM2ZhOC00ZDgwLTk0YTgtNTAwZDQ1N2NjZGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaLtgxGBXMojAg75QjBfVzKOYrYeZ3bzD5e9
I/H3erAF0OT5KFWg9M+UT9CT85LusTOMhyO2A5Ws0FNvX7rRvTpP/rhf5rZytlgh
mSvjYEQUWZoargjQsyNje3P7Uk1EKUOeTr6ELKur714uS6b5Y1sUl3S08JRGztyC
5CUBduUK3G8f1Kd59b5KwwsRG+zUJDPMWVyUN4QCIDGKilsYV2rYpwcohxXOWTMq
0gDpx/Dp43XpUDVNoXp8udePRDM4MikkScqdkKushDmCK6Pz681SJpuPnkDjFZdE
FI7FLSKvKIKgYrB53tqkYaCewhjX1TEhdrzQkUynTNpMNXvYHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKyDKzJRd7n9aR0SnIr8dEY24XbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDIwMGNiZjYtODExZS0z
OTQ4LTlhMzktYjdjYWMwOTRlMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb+hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAj7xRtO2v0tBGOHyem84UQexdCf8tq5a5txfOoRJdoIf3xwbQ3XKOc
EQnRyZHfAKUi6rkI/Uh9ZmTyJIeZA8ED6WnNpLuD82Wlufa99HcqPBPWRyQjOaBT
SA+doMvKMmq+JGRrfakGHzM74xKILnXCOol51FiyU1gLry/oW18JyJG8V/xD/3Ce
vNMKwTBHWF5W1d+e46ZRNTTmn5tkn0ORmwPN7nrIQbvgnyi7f00KvpOwupbIyhSd
f4bC1qfWboxLiWx4+o70th40QZcT1dsnpmR44IqfN45lnKUk0NqQOQc67+jqHrkx
JZnxZO28Gta/hry2SAs+9RLUx36aDVg=
-----END CERTIFICATE-----
Generated at Thu Aug 27 14:19:46 2026 by rpki-client