
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa
File: db315c54-2d45-3c4c-a01d-39465b270b1e.roa (raw, json)
Hash identifier: FQ0KFWseM+kN4UvS3kH6zweqrhbBtvL7/+d/DxC4YdA=
Subject key identifier: 40:8A:22:7D:BE:74:BE:EB:F0:72:58:34:33:B8:61:65:E7:30:26:ED
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DD1F5BF65B558F29BB09BF840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa
Signing time: Wed 13 May 2026 13:00:31 +0000
ROA not before: Wed 13 May 2026 13:00:31 +0000
ROA not after: Tue 11 Aug 2026 13:00:31 +0000
asID: 27338
IP address blocks: 209.192.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 30 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d1:f5:bf:65:b5:58:f2:9b:b0:9b:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 13 13:00:31 2026 GMT
Not After : Aug 11 13:00:31 2026 GMT
Subject: CN=29c91573-ce1f-4cb4-93a7-99fe52f00506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:2a:77:90:c5:27:1a:87:22:85:2a:ea:4a:
e4:9a:a3:4a:6a:e7:23:1b:f9:31:01:74:9f:b9:53:
04:dd:ca:74:bf:48:01:39:02:83:3d:2d:67:3b:b2:
9d:d0:a8:22:c8:61:c4:ce:05:0b:1c:2f:4c:df:cc:
49:11:e7:14:e1:41:8f:ac:ae:a7:22:a0:cb:c7:2c:
2e:8c:49:43:55:ba:98:80:77:09:5a:3d:9d:f6:4d:
af:40:30:e0:bc:8f:24:72:ca:a2:68:57:37:b9:11:
bc:70:78:41:39:fe:4b:de:3b:3a:f7:08:fc:5d:ea:
d6:d1:98:0a:5d:af:2a:0f:6d:8b:35:29:ed:2e:82:
b4:66:c4:52:15:64:94:0e:03:46:68:a4:aa:60:5b:
71:95:26:bb:a5:dd:e3:66:2c:72:07:2f:78:7a:e0:
71:16:c9:83:2f:e5:2e:d1:61:93:83:a4:25:a1:05:
42:2b:21:ba:e3:f8:be:f2:07:3c:26:19:74:f8:03:
fd:ee:50:de:0f:42:e4:05:19:7e:f0:85:2d:b5:e9:
bc:1e:be:fe:84:7b:96:a2:cc:55:4b:be:35:ec:52:
6f:0d:83:f3:17:69:38:f9:92:31:79:ea:da:14:4a:
4f:c0:58:8c:da:c4:1b:a3:53:4b:2e:17:6c:08:9a:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8A:22:7D:BE:74:BE:EB:F0:72:58:34:33:B8:61:65:E7:30:26:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.192.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:07:8a:d7:d5:83:2a:cd:4a:df:3b:b6:d6:c0:a8:3a:68:04:
66:3f:74:e7:8b:f7:9b:35:3c:38:9c:8c:71:b9:cf:62:2c:ca:
ae:95:89:4b:01:05:3c:db:71:b0:e6:d3:df:61:d1:5e:3c:cf:
ee:b3:b4:a5:7b:72:e6:c8:c8:13:60:53:40:ab:94:08:68:56:
d7:d1:e4:2a:87:a9:17:d1:c0:bd:a2:39:b5:39:44:01:ad:a3:
e9:f1:8b:d0:60:cb:91:3e:e2:69:09:bf:23:9e:7f:f8:31:9b:
3a:d8:4e:ff:dc:21:f4:cd:96:4a:5e:98:4c:33:fe:26:56:7c:
f6:32:91:ea:06:ba:6f:4d:db:27:60:b4:67:6c:10:b6:2d:d0:
ea:fd:d5:b6:12:74:9b:23:0d:e5:69:a3:1a:e4:0d:9d:be:10:
49:89:6f:0d:54:07:35:a4:f0:55:0a:0a:ff:36:72:45:47:c2:
1c:12:21:c4:da:6d:ea:d3:02:77:7f:13:cc:39:da:88:12:a3:
30:f9:86:52:0d:68:d5:10:47:78:13:a7:4c:b1:f4:02:6b:61:
3f:d2:f1:bb:eb:1a:2c:59:de:17:7f:e8:20:17:f5:fd:c8:b3:
7d:b5:bd:a3:4d:d5:9e:fe:5b:87:31:e3:f5:12:46:f9:f4:26:
54:6e:61:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9b9ltVjym7Cb+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk
MjljOTE1NzMtY2UxZi00Y2I0LTkzYTctOTlmZTUyZjAwNTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu8qd5DFJxqHIoUq6krkmqNKaucjG/kxAXSf
uVME3cp0v0gBOQKDPS1nO7Kd0KgiyGHEzgULHC9M38xJEecU4UGPrK6nIqDLxywu
jElDVbqYgHcJWj2d9k2vQDDgvI8kcsqiaFc3uRG8cHhBOf5L3js69wj8XerW0ZgK
Xa8qD22LNSntLoK0ZsRSFWSUDgNGaKSqYFtxlSa7pd3jZixyBy94euBxFsmDL+Uu
0WGTg6QloQVCKyG64/i+8gc8Jhl0+AP97lDeD0LkBRl+8IUttem8Hr7+hHuWosxV
S7417FJvDYPzF2k4+ZIxeeraFEpPwFiM2sQbo1NLLhdsCJrdvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECKIn2+dL7r8HJYNDO4YWXnMCbtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIzMTVjNTQtMmQ0NS0z
YzRjLWEwMWQtMzk0NjViMjcwYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIHitfVgyrNSt87ttbAqDpoBGY/dOeL95s1PDicjHG5z2Isyq6ViUsB
BTzbcbDm099h0V48z+6ztKV7cubIyBNgU0CrlAhoVtfR5CqHqRfRwL2iObU5RAGt
o+nxi9Bgy5E+4mkJvyOef/gxmzrYTv/cIfTNlkpemEwz/iZWfPYykeoGum9N2ydg
tGdsELYt0Or91bYSdJsjDeVpoxrkDZ2+EEmJbw1UBzWk8FUKCv82ckVHwhwSIcTa
berTAnd/E8w52ogSozD5hlINaNUQR3gTp0yx9AJrYT/S8bvrGixZ3hd/6CAX9f3I
s321vaNN1Z7+W4cx4/USRvn0JlRuYbQ=
-----END CERTIFICATE-----
Generated at Thu May 28 17:11:36 2026 by rpki-client