
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db998f42-be27-3be8-b1f5-4704728e217c.roa
File: db998f42-be27-3be8-b1f5-4704728e217c.roa (raw, json)
Hash identifier: Ug7cKEVO1nmi9FRRVOyBd/OYn2Zw0nkA2JA8TF0aGWk=
Subject key identifier: 8E:47:7E:C0:15:3C:AC:A6:EF:16:BA:5D:0E:BE:90:7D:15:AD:F3:B6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CEBC234586DD196EEE39EF900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db998f42-be27-3be8-b1f5-4704728e217c.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 27338
IP address blocks: 74.10.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:34:58:6d:d1:96:ee:e3:9e:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=10762b67-ad22-4d13-a46a-30273f37a68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d9:b4:a5:de:1c:e1:d1:68:eb:ba:a5:5b:b6:
f9:38:59:95:7e:b7:29:02:6d:e2:e5:af:c1:25:68:
1e:6a:78:15:a9:f9:5b:20:4b:0e:26:20:8f:22:c5:
23:71:c8:95:de:e3:67:2f:09:9b:f0:13:b6:f3:9c:
7f:ae:57:57:f7:29:78:0e:3d:66:5c:c3:e8:1f:26:
e5:9e:7f:80:cb:e0:04:f0:08:d1:43:68:f9:d2:11:
0f:08:8f:97:f7:b8:00:57:03:21:9a:33:a7:d0:62:
32:c6:ab:9e:43:ce:d8:af:75:bb:21:31:2b:31:19:
f7:13:f5:48:a6:6c:b5:4d:fd:c8:36:04:3c:22:fc:
c5:b1:6f:fc:2c:21:1a:d2:48:aa:cd:aa:09:08:de:
0f:1d:5c:52:7e:0d:0a:a1:0e:e7:d0:be:35:ba:0d:
e7:68:d5:a5:ee:c1:26:41:c9:35:8b:e3:72:92:25:
5d:fe:b7:90:20:3b:be:a2:fa:a3:e8:ae:13:5b:5f:
1e:84:99:d6:9c:7f:6f:b5:1b:6f:bd:ad:d9:5a:19:
ee:ad:79:14:d7:45:f8:45:b4:ae:63:70:e5:71:d7:
52:53:c8:d6:b0:5c:ea:41:ce:41:18:d4:a9:3e:a8:
f7:df:96:50:d5:b0:26:19:9c:35:27:03:d8:c6:b9:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:7E:C0:15:3C:AC:A6:EF:16:BA:5D:0E:BE:90:7D:15:AD:F3:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db998f42-be27-3be8-b1f5-4704728e217c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.10.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:12:8f:27:38:e5:59:40:e7:bb:66:ac:5d:96:c0:6a:a6:f8:
eb:9a:b3:a3:84:bd:4e:fc:6a:9c:e0:05:0b:d7:4b:d9:24:f9:
79:48:b2:82:2d:78:7a:2a:fb:8a:bd:65:af:2f:1b:34:de:5d:
5b:9f:21:6c:84:4f:69:bf:b0:af:2c:ed:da:a8:28:bf:7f:07:
bc:dc:fd:79:38:10:80:4c:2a:3a:86:79:6e:6c:65:49:59:07:
6c:bb:fb:76:15:03:34:64:d7:6d:a2:08:ff:98:ac:e6:f3:10:
47:9e:c2:1a:17:74:cc:90:6c:e3:13:12:db:57:e0:34:5d:a5:
93:1a:17:b5:eb:1b:25:66:4e:88:86:15:de:51:72:93:fa:73:
7c:ad:5e:79:8d:cf:fb:41:b0:e7:51:47:18:53:45:1f:ba:ff:
28:45:a7:5c:b7:e7:c0:2f:ff:2c:99:85:5c:a8:43:e0:ab:64:
04:92:cb:d4:27:31:f5:da:61:49:fa:82:17:a9:09:37:e2:60:
b9:c4:c5:aa:85:b9:6e:60:c1:b5:04:a4:c9:12:ff:a1:77:04:
81:0e:27:c3:8d:47:ea:da:e6:3a:e1:c3:a0:5a:f8:6b:33:c8:
0f:dd:5f:ca:7d:fa:76:65:09:6d:09:93:5f:7e:f4:18:8e:f1:
74:44:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:33:26 2026 by rpki-client