
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa
File: d7c658f8-55f3-37c9-b25e-b9627488fc03.roa (raw, json)
Hash identifier: Di3HCeXMlLnP+OUa6DpyFRSiHKS014aa8pl6dmM03IM=
Subject key identifier: B4:9E:06:47:02:35:F6:D2:87:C2:7A:B2:1C:79:05:FE:20:83:ED:98
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EAFE6F9D9B759AA99FF423F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 98.16.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:f9:d9:b7:59:aa:99:ff:42:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=7eeb6c93-4531-4021-a4b7-16487886840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:35:c8:ec:d1:56:2b:f1:4c:3d:9d:7a:6a:
a9:64:c1:b4:ad:c7:70:61:0e:df:34:3d:da:d9:1c:
b2:93:75:c8:28:3e:68:c5:17:2f:57:b8:1f:b6:72:
57:48:ed:88:aa:5e:0c:c1:f0:2a:e7:8d:2d:8f:48:
f1:38:53:30:2e:8c:4c:3b:79:4d:d9:c2:bc:48:69:
ee:e7:80:4b:01:78:40:eb:c7:0c:4c:f5:76:ca:9b:
82:29:e2:73:ca:93:23:e3:e5:4a:78:a4:a8:b0:78:
9e:eb:21:eb:0b:a3:8e:7d:bb:d4:49:d2:4e:29:52:
9b:bc:c2:0d:e5:37:3f:99:7f:e3:04:ca:36:63:e6:
bd:07:5c:0f:2c:35:44:fb:82:60:c3:3d:3a:26:76:
7f:2a:db:4f:bb:23:9f:fc:de:f8:c8:05:71:23:5f:
11:1f:23:70:da:30:d1:47:10:20:23:eb:50:81:92:
3a:66:5a:4f:94:fd:8e:0e:69:57:cf:ab:da:82:41:
1d:26:9a:e7:41:a3:32:10:ec:f9:0c:6b:4a:fa:7b:
4b:68:ca:fd:7a:04:bb:4f:1e:61:ff:08:f8:62:ad:
e9:a1:83:ec:ba:f4:5e:4e:ae:97:65:c9:5c:a2:d3:
cc:6c:2a:93:94:d3:d7:27:07:33:4f:82:a5:b6:7b:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:06:47:02:35:F6:D2:87:C2:7A:B2:1C:79:05:FE:20:83:ED:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d2:1d:a6:a8:57:5a:23:10:e5:ac:a2:86:08:9b:56:57:92:
5e:ba:59:44:34:e5:73:eb:3b:89:8b:f5:5c:7a:48:b2:7a:2c:
cb:97:3b:fd:02:ff:f5:be:26:4e:59:1f:94:d2:b6:f3:d2:a0:
de:8b:13:a5:a8:e3:78:b0:13:23:e2:71:e6:3f:06:a7:3c:93:
aa:ad:34:e2:d1:aa:d1:94:82:1d:4f:9a:24:a2:af:20:8f:88:
43:eb:f3:87:b0:0e:a7:f0:fd:20:46:66:e1:02:fd:24:a2:a4:
92:cc:a7:fa:ce:8f:8c:85:fc:67:8d:73:42:b8:02:87:61:86:
cf:fa:13:f9:6c:15:94:c2:a3:c0:33:bf:42:64:67:3e:2e:16:
82:b5:b2:b9:c2:22:26:fb:2b:1a:d8:d6:51:1d:f7:26:18:16:
3e:24:0a:8d:1f:8b:cd:d0:6c:fe:db:46:d3:94:5d:f2:65:59:
9a:d5:b7:fe:4f:19:9d:88:50:76:59:9d:c9:48:e4:cd:a8:b1:
15:76:9b:2f:a4:8e:2e:a8:4c:f1:d1:22:13:7d:a7:85:e4:10:
94:70:03:db:e0:cf:d1:86:91:16:2d:4b:12:2c:27:a1:ec:a8:
63:87:56:26:f5:46:52:24:b9:ac:b2:bd:70:09:14:30:55:25:
14:12:5f:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vnZt1mqmf9CP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
N2VlYjZjOTMtNDUzMS00MDIxLWE0YjctMTY0ODc4ODY4NDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi41yOzRVivxTD2demqpZMG0rcdwYQ7fND3a
2Ryyk3XIKD5oxRcvV7gftnJXSO2Iql4MwfAq540tj0jxOFMwLoxMO3lN2cK8SGnu
54BLAXhA68cMTPV2ypuCKeJzypMj4+VKeKSosHie6yHrC6OOfbvUSdJOKVKbvMIN
5Tc/mX/jBMo2Y+a9B1wPLDVE+4Jgwz06JnZ/KttPuyOf/N74yAVxI18RHyNw2jDR
RxAgI+tQgZI6ZlpPlP2ODmlXz6vagkEdJprnQaMyEOz5DGtK+ntLaMr9egS7Tx5h
/wj4Yq3poYPsuvReTq6XZclcotPMbCqTlNPXJwczT4KltnuxJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSeBkcCNfbSh8J6shx5Bf4gg+2YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdjNjU4ZjgtNTVmMy0z
N2M5LWIyNWUtYjk2Mjc0ODhmYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXSHaaoV1ojEOWsooYIm1ZXkl66WUQ05XPrO4mL9Vx6SLJ6LMuXO/0C
//W+Jk5ZH5TStvPSoN6LE6Wo43iwEyPiceY/Bqc8k6qtNOLRqtGUgh1PmiSiryCP
iEPr84ewDqfw/SBGZuEC/SSipJLMp/rOj4yF/GeNc0K4Aodhhs/6E/lsFZTCo8Az
v0JkZz4uFoK1srnCIib7KxrY1lEd9yYYFj4kCo0fi83QbP7bRtOUXfJlWZrVt/5P
GZ2IUHZZnclI5M2osRV2my+kji6oTPHRIhN9p4XkEJRwA9vgz9GGkRYtSxIsJ6Hs
qGOHVib1RlIkuayyvXAJFDBVJRQSX+Q=
-----END CERTIFICATE-----
Generated at Thu Aug 27 10:31:30 2026 by rpki-client