
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa
File: d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa (raw, json)
Hash identifier: 88T0w7DwXYVQbl4EKx6tUT6gbPHYoAOWjSofhBh872A=
Subject key identifier: 3A:AF:CE:7B:A8:63:D8:40:D6:1D:56:8E:B5:C7:0B:15:DF:75:F5:A4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E2809BC8B6DEF5EF484B21F20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa
Signing time: Sat 13 Jun 2026 09:00:12 +0000
ROA not before: Sat 13 Jun 2026 09:00:12 +0000
ROA not after: Fri 11 Sep 2026 09:00:12 +0000
asID: 7029
IP address blocks: 207.10.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:28:09:bc:8b:6d:ef:5e:f4:84:b2:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 09:00:12 2026 GMT
Not After : Sep 11 09:00:12 2026 GMT
Subject: CN=feba5b3e-209e-4073-a925-f307548dec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:fe:1a:1b:6e:55:2b:78:c4:54:ed:2b:93:
c7:d8:79:b0:c4:63:3f:49:56:c1:b0:eb:5b:11:27:
83:f7:79:4d:93:fe:2a:21:6f:f7:84:9f:69:fa:79:
73:60:69:c1:64:63:ce:57:f0:f1:41:b9:bf:01:5a:
45:2b:7e:20:07:99:56:8b:88:d9:6b:55:cc:8a:15:
9a:b3:6e:60:84:68:a9:19:af:3a:ea:7d:84:9b:9e:
ce:98:7f:8e:01:dc:51:73:ab:90:89:7c:c9:0c:4d:
b7:b0:6c:bd:c0:09:fd:82:71:f0:f2:6d:3d:f5:88:
dd:3a:18:4d:4c:db:05:13:66:cc:85:65:8e:51:e8:
68:af:e8:fc:dc:50:d1:13:1b:ac:1f:2d:34:4e:81:
2d:db:b6:20:79:0a:9a:35:b9:1d:7e:3a:60:f8:65:
51:89:f9:42:a6:47:47:ed:c6:dd:7f:9b:96:9e:68:
6e:b7:0b:48:41:7a:f9:b0:4d:99:a2:0c:b9:7e:55:
af:46:8b:c5:bb:59:3d:c6:52:f9:77:b7:31:dd:b9:
15:cb:91:eb:ba:b8:c0:66:b2:35:48:a0:6b:0f:9b:
33:34:48:cd:00:47:57:55:c6:a2:30:e6:01:69:47:
29:94:a6:4c:5e:db:53:6a:d6:1d:b7:63:5e:12:d3:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:CE:7B:A8:63:D8:40:D6:1D:56:8E:B5:C7:0B:15:DF:75:F5:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.10.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:54:e4:17:8a:3e:c9:d5:ab:89:2d:77:2b:b6:17:7a:48:e3:
72:f7:ab:e8:d9:be:9b:b4:d1:c6:9c:54:f9:b4:ef:1a:01:8f:
9c:0b:3b:32:af:2f:0f:fb:5d:30:80:da:c0:de:50:91:df:69:
8e:3f:2c:06:44:f3:df:87:61:0e:ef:68:eb:2a:d8:de:ba:55:
76:36:e0:a1:ac:c0:05:81:01:50:4b:56:16:3d:cb:8f:d4:e6:
7c:78:d0:6b:85:15:4a:aa:41:e7:57:86:2e:01:ed:2d:fd:22:
ef:d7:9e:6c:7a:88:f2:b1:d6:c4:ce:c7:2d:8a:b8:f3:f8:71:
39:66:09:da:98:9e:41:4b:56:bb:92:95:87:5e:ed:43:d9:7f:
83:7a:24:60:8b:a8:26:b7:78:3f:d2:6d:dd:72:96:f1:eb:0f:
ff:5d:21:52:9c:73:e4:1b:bb:df:c3:cc:e0:5b:59:f6:80:c7:
e5:3b:24:18:ba:a6:a6:87:3f:60:29:97:d3:59:17:96:35:9b:
5a:d7:fe:f3:31:1f:56:61:1a:4c:e0:c4:4a:62:f2:52:70:0f:
03:e5:3f:61:8a:f9:bf:72:eb:de:a5:22:26:a9:0e:5b:e5:05:
61:ca:30:ca:fd:8d:19:79:07:2d:7e:9e:1b:44:3e:fb:e1:df:
c4:d5:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:17:31 2026 by rpki-client