
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa
File: e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa (raw, json)
Hash identifier: rP1Tfrx/aYByKmhSzI+OJFMeLzip18KKIyJdLwyIGtc=
Subject key identifier: 95:7D:0E:05:B8:33:E2:11:A7:E5:84:EC:E1:49:20:D7:3E:B2:CD:5F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584CC77750862685B03F2AFAC9C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa
Signing time: Sat 07 Feb 2026 02:00:31 +0000
ROA not before: Sat 07 Feb 2026 02:00:31 +0000
ROA not after: Fri 08 May 2026 01:00:31 +0000
asID: 7029
IP address blocks: 209.83.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:77:50:86:26:85:b0:3f:2a:fa:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 02:00:31 2026 GMT
Not After : May 8 01:00:31 2026 GMT
Subject: CN=d723e7cd-2468-40af-bd9e-b26a08f232a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:00:1a:47:b1:66:69:65:ef:90:69:c2:4c:
5b:d5:b2:3d:da:8e:bf:66:1e:49:1b:bb:ff:77:1f:
01:4f:15:cf:ec:9d:58:f8:77:a2:72:00:a6:26:8f:
41:57:0c:10:d1:36:90:58:53:72:33:6f:25:44:2a:
9f:20:f0:d3:30:f1:3e:ef:97:12:ba:01:c6:37:bf:
ad:08:14:ff:6f:3e:15:13:3b:cd:04:be:31:90:fb:
78:29:79:cc:9e:3b:74:b5:6e:b5:fc:41:b2:7c:89:
11:c4:64:a4:61:eb:9f:fb:8e:4c:6f:99:87:76:47:
05:8d:42:d1:35:7d:51:01:0d:9c:db:b5:30:0a:80:
9d:88:8f:81:f6:26:2f:7b:7a:e2:7d:93:ca:35:76:
52:1c:09:0e:4f:eb:93:8b:7a:19:41:e5:29:3f:dd:
8b:4c:c8:2a:75:30:bc:b9:44:62:cf:3a:b3:e1:b7:
ed:69:05:88:b5:49:8c:e1:e0:29:9c:57:10:9b:fe:
6e:64:3a:ef:13:c0:a4:20:56:78:3d:32:29:5c:77:
46:8b:e2:81:b9:5b:ac:c3:28:84:29:81:28:9f:ba:
87:8a:be:a8:21:18:0d:fa:f6:98:2a:f4:83:5c:f3:
74:1f:b6:86:a4:09:7b:33:9b:93:52:2e:3b:56:39:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:0E:05:B8:33:E2:11:A7:E5:84:EC:E1:49:20:D7:3E:B2:CD:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.83.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:0e:dc:c7:d9:2f:3c:97:f3:9c:f5:cd:b4:7b:83:a8:c2:5b:
62:be:09:49:d3:29:94:5d:28:54:21:71:bd:7a:c9:c5:59:65:
a7:5b:7b:d2:b7:d9:e9:c6:4a:5a:32:ee:f9:85:1d:1f:9f:b4:
eb:7e:f7:7f:d4:8e:3e:ae:bc:f5:ae:8e:78:ba:75:c2:81:cb:
6d:d5:ce:2e:c0:99:97:99:6e:a1:d1:06:23:e1:4c:77:84:cf:
d5:ec:0c:a0:08:82:a6:b5:98:ff:65:53:66:12:5d:88:16:b5:
46:a4:75:07:d1:d4:76:8f:69:e8:0a:76:51:ba:b3:13:22:74:
70:2b:13:c3:04:ef:e2:c3:ba:c9:34:3c:88:45:a9:94:9d:54:
6b:4a:d9:b4:6c:65:1f:aa:fa:bb:2d:c0:6d:ab:e7:ad:44:98:
ef:fd:b1:11:ae:4a:cd:47:f0:96:c5:72:c6:0c:d7:91:2e:fc:
8c:31:dc:4e:b0:0b:2b:57:14:a4:30:93:fd:74:96:07:32:86:
b3:c1:13:be:e2:b3:6f:5f:c5:0b:b8:4d:d0:63:9c:a8:1f:90:
8e:14:23:da:ea:43:20:fd:11:d9:0d:5f:5b:51:73:25:7c:44:
1f:9b:b0:03:db:8a:9e:26:70:14:0b:81:ca:1c:65:04:5f:d8:
6f:0b:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:30:38 2026 by rpki-client