
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa
File: ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa (raw, json)
Hash identifier: +Tl2hY3OPZbr58eyqXP0Zf6OsTrJQRdJhccfMKEuiQI=
Subject key identifier: F6:B5:8B:95:54:D0:5B:53:31:99:E1:CD:30:30:8E:96:1A:73:20:31
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DE150807B7E3902B36F89EB30
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa
Signing time: Tue 19 May 2026 01:00:24 +0000
ROA not before: Tue 19 May 2026 01:00:24 +0000
ROA not after: Mon 17 Aug 2026 01:00:24 +0000
asID: 7029
IP address blocks: 98.22.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 30 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e1:50:80:7b:7e:39:02:b3:6f:89:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 19 01:00:24 2026 GMT
Not After : Aug 17 01:00:24 2026 GMT
Subject: CN=5e2f3f5a-7e61-42fb-8e38-1166ebcc4279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:a9:b2:87:70:b7:24:e1:bc:e7:b9:3d:1e:
24:b3:4f:c6:82:1b:29:63:15:84:17:a7:27:cb:1a:
6d:23:9a:c8:2f:db:fc:92:43:91:41:6a:04:ae:e7:
98:36:1f:17:82:af:a3:9a:1a:5e:48:3c:77:0c:3c:
f6:24:3c:f2:ac:ba:d9:9d:ea:1b:42:53:94:3c:e9:
fe:cf:08:ad:d1:8f:75:5e:73:d9:d8:57:13:6a:9d:
b7:80:65:b0:07:f3:50:0c:2a:59:4c:fd:0f:a6:1c:
7d:c7:13:69:ec:b1:a6:c4:2d:53:36:c3:ff:8c:23:
63:82:9f:ff:f7:5f:d4:1a:1d:c1:9e:dd:86:76:64:
ff:b5:d2:5c:96:c2:b9:33:d7:58:92:ac:a1:3f:8e:
df:bc:f4:4e:8d:f9:60:18:4f:19:1b:74:e3:cb:94:
15:2f:86:7b:f6:50:12:01:79:fe:f2:eb:71:13:6f:
dd:9b:9d:6b:13:f0:18:e8:97:5f:2c:03:ea:08:d7:
8c:90:88:3d:f7:ba:58:e7:d6:cd:2a:50:38:7c:43:
da:76:90:4c:76:82:eb:15:15:22:ce:cd:65:a7:0a:
6b:23:7d:d5:58:41:d3:8f:ad:19:a2:3a:e1:96:4b:
a1:0f:ae:34:2a:6a:62:4e:f1:0c:f9:99:ea:4b:31:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:8B:95:54:D0:5B:53:31:99:E1:CD:30:30:8E:96:1A:73:20:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1e:27:4a:9a:d9:a0:d0:1b:fa:d0:d5:69:f6:82:21:25:eb:
3d:83:d8:d5:0f:ea:48:83:82:68:4a:55:72:e5:6a:cf:68:41:
93:90:a7:da:a0:4f:02:69:2b:ad:e5:40:21:9c:d6:ca:13:f8:
87:31:af:d2:fd:52:68:4c:53:7a:ab:e4:87:0d:f7:c0:f9:a1:
80:6b:61:64:c1:4b:eb:9c:32:79:55:c0:a0:cf:ad:09:fb:10:
88:ea:b9:a8:23:cb:a3:ea:ec:a3:14:61:9f:14:c0:df:cd:ec:
12:10:2c:63:e4:f5:73:5d:50:c7:5d:bd:0f:b7:ca:fe:96:6d:
5a:cc:7c:e2:cd:30:34:cb:35:33:90:59:2a:92:42:0b:6c:f7:
21:38:dd:50:a0:87:e9:1e:e2:33:21:1e:73:38:4a:fa:fe:03:
5f:e3:fe:e1:12:86:bb:74:72:d9:7f:18:84:06:38:4c:23:4a:
8a:55:ed:50:e0:a9:a4:d8:89:34:0e:8b:84:8a:a1:03:e6:15:
9f:56:e8:ae:55:81:cf:cb:1e:e2:59:a3:c3:93:e1:55:2e:24:
64:83:3f:1b:bc:8f:f4:3a:bb:55:52:6f:9d:93:fc:c9:1f:1c:
1d:78:99:32:66:34:3e:b3:93:a6:98:77:13:46:bc:3e:5b:11:
71:3e:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:11:26 2026 by rpki-client