
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d45142a0-8be7-3838-85b8-c3eb51445659.roa
File: d45142a0-8be7-3838-85b8-c3eb51445659.roa (raw, json)
Hash identifier: RNyjsFmkdDmVhU5OYaoRSfkOf+LDeHIgNOZ04+/zyiA=
Subject key identifier: C3:C7:F2:B7:C3:A5:27:CC:4F:E6:5F:EA:6E:28:AD:FB:91:7F:38:B5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F7BB30E74D850196C363E9AC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d45142a0-8be7-3838-85b8-c3eb51445659.roa
Signing time: Tue 13 Oct 2026 01:00:14 +0000
ROA not before: Tue 13 Oct 2026 01:00:14 +0000
ROA not after: Mon 11 Jan 2027 02:00:14 +0000
asID: 7029
IP address blocks: 2001:19b0:9ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7b:b3:0e:74:d8:50:19:6c:36:3e:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 13 01:00:14 2026 GMT
Not After : Jan 11 02:00:14 2027 GMT
Subject: CN=5244ca68-7e28-408b-bb24-d1d4df53e8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:19:35:87:e0:2d:78:a1:00:f8:70:a9:8f:
74:38:0d:b9:7f:be:c9:a1:66:91:c1:e1:9a:55:2f:
1d:b7:bc:db:a7:ed:c4:e7:12:28:04:8f:0e:42:92:
f7:50:dc:44:0e:c9:20:0e:65:eb:5c:b9:58:6d:b3:
b4:52:33:df:3b:10:6e:89:f8:a5:f9:d7:13:e8:23:
e9:09:30:b1:4f:5b:cb:fa:09:6f:7b:36:49:a4:58:
66:0d:14:3e:3f:73:71:15:56:d3:02:e4:b5:f5:13:
8d:df:dc:2e:70:8d:51:40:37:af:33:69:18:30:fb:
55:e8:4c:97:6c:08:b6:d4:69:73:40:00:9b:36:10:
be:7d:b1:aa:1f:16:f0:dc:b6:10:79:cc:39:d9:2f:
c2:4e:f2:72:23:f3:58:66:b9:8e:7f:5f:2e:b4:74:
e9:96:fb:4f:e8:dc:a5:43:31:ac:4a:c6:9a:14:57:
ef:f7:dc:7b:7a:cc:4b:65:65:8c:45:e5:8a:9d:64:
af:53:98:0a:35:e5:36:a0:21:b2:f1:a8:04:c6:52:
dd:5a:23:7c:9e:b1:6e:3a:1b:96:ec:f2:f5:d0:3d:
eb:56:96:0d:d9:93:45:dc:46:b2:da:a0:82:db:fe:
a2:dd:04:7f:95:ff:39:58:e3:d3:80:52:08:d9:ff:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C7:F2:B7:C3:A5:27:CC:4F:E6:5F:EA:6E:28:AD:FB:91:7F:38:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d45142a0-8be7-3838-85b8-c3eb51445659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:19b0:9ce::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:e2:ac:d7:d0:1e:3b:77:e1:e3:15:f5:cf:1e:8c:e5:0b:9d:
a0:85:12:5b:36:07:d9:6b:5a:28:ed:9d:24:40:3a:ee:7c:60:
bb:f2:89:76:6f:71:81:2a:e8:64:de:58:1b:91:28:72:d1:1f:
47:0a:ba:86:30:b8:c9:bc:58:1c:27:65:0d:af:21:f2:08:7e:
d2:46:58:7a:97:94:93:b8:49:12:96:28:3e:62:e2:e7:ec:15:
ae:97:e1:c8:34:5c:19:e1:0c:b3:e6:bb:dc:7b:6a:27:8e:11:
79:cc:df:ba:5e:55:80:44:f4:28:1b:36:d0:ee:e8:1e:41:67:
86:9a:f9:2c:4f:0e:f5:e1:49:41:2c:ef:69:6a:a2:ad:77:82:
85:2a:58:5b:05:68:bd:62:b8:ac:ac:04:aa:4c:5a:fe:14:ef:
5f:fc:4d:cb:80:5a:78:30:9e:f3:31:04:f1:ff:22:3b:6e:1f:
51:95:c9:0d:73:e8:e7:84:22:47:df:da:f7:e2:8f:84:02:2c:
52:49:2b:4e:2c:ab:3d:fa:16:36:85:c1:e8:c8:a2:a3:61:43:
49:11:3f:ce:5b:2c:e7:5b:5f:b7:53:58:a0:97:ba:7b:60:be:
16:ce:cf:bb:41:57:0b:00:df:b6:41:d9:23:91:a0:18:4a:39:
28:ce:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:16:28 2026 by rpki-client