
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f086ed5a-6366-3684-be8c-1cf56c6a5db5.roa
File: f086ed5a-6366-3684-be8c-1cf56c6a5db5.roa (raw, json)
Hash identifier: CN4CvCtwWo77oPP0M/4XSycSE7TExzEyrECEXqKy7WM=
Subject key identifier: 46:17:1B:59:17:16:25:58:55:D9:1C:CF:34:76:AA:95:95:56:0B:1C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D7CCFDF80D077132707E1A320
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f086ed5a-6366-3684-be8c-1cf56c6a5db5.roa
Signing time: Mon 13 Apr 2026 01:00:24 +0000
ROA not before: Mon 13 Apr 2026 01:00:24 +0000
ROA not after: Sun 12 Jul 2026 01:00:24 +0000
asID: 7029
IP address blocks: 98.18.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7c:cf:df:80:d0:77:13:27:07:e1:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 13 01:00:24 2026 GMT
Not After : Jul 12 01:00:24 2026 GMT
Subject: CN=b6aaf6b0-1ad5-494f-8584-f697a1def6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:1e:f9:92:39:de:db:69:74:03:b6:15:1e:
5d:3b:a5:5f:91:83:40:d1:d1:25:fe:23:7e:e0:4a:
32:6f:d4:3e:ef:b7:d5:e6:45:4e:e5:da:28:42:e0:
40:28:4c:f3:37:b3:54:45:2b:e0:c6:5f:21:2d:11:
00:db:05:6a:f1:c1:d4:46:b9:b7:46:4d:40:70:f4:
a8:68:4a:1d:e9:91:3b:58:ea:ea:d4:8f:80:d5:65:
58:58:8d:dd:33:53:80:ab:9e:93:15:33:12:39:4c:
57:d6:eb:1f:aa:1a:08:6e:2d:64:64:60:36:1f:cf:
a9:cf:10:b5:97:68:17:26:89:fd:df:06:e9:b2:94:
93:5f:ec:e7:24:f2:67:d9:71:be:2a:69:63:cb:9a:
df:3a:15:19:51:eb:d4:21:c5:d3:f0:c5:2c:35:3b:
f0:b7:29:c3:5a:fa:cf:a6:43:fc:41:bd:4c:c7:76:
22:7c:6a:0d:a0:12:2e:d4:56:58:f6:0d:ca:40:f3:
2f:71:e8:d4:97:8a:55:8e:f1:0c:9b:cb:78:b5:55:
e6:77:3e:06:38:4f:ad:34:13:76:1e:04:a4:10:2f:
6f:7d:5a:1f:1c:99:86:ec:86:95:78:10:5c:b3:91:
0b:de:e4:af:da:fa:24:ca:cc:75:85:e4:b4:01:b1:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:17:1B:59:17:16:25:58:55:D9:1C:CF:34:76:AA:95:95:56:0B:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f086ed5a-6366-3684-be8c-1cf56c6a5db5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c3:f9:5e:eb:89:8a:c6:89:4c:2d:3d:f3:87:b3:91:e6:81:
7e:44:48:20:e6:f6:82:a0:5b:3d:53:13:a3:64:9d:71:a0:07:
a0:09:27:47:0d:35:a1:8a:d8:32:f8:88:b1:b3:da:47:b8:2e:
bd:f4:56:33:c8:69:ef:4b:8e:e2:25:42:6c:b8:9c:bc:cc:72:
67:7c:02:92:cb:28:67:45:1b:35:db:4d:9f:78:74:be:7a:d7:
28:7a:79:b1:4c:97:a7:92:12:8b:44:f2:cd:7c:3d:c4:85:48:
a7:81:70:25:32:97:0d:f6:23:95:ca:30:c1:49:fa:ec:19:8e:
e7:f2:d3:94:3e:0a:d7:dc:27:fe:62:e3:8c:92:e4:ac:05:cd:
51:fa:f3:92:8e:2f:c5:0d:d8:c9:53:26:86:89:31:64:ed:f3:
22:43:23:42:dc:30:90:b4:cb:d2:51:fc:37:02:cd:f4:ac:42:
26:f5:fe:5c:78:d2:83:63:b2:8e:b1:ab:85:23:64:bb:bb:19:
f5:07:f6:80:78:4e:19:15:3a:46:db:1a:53:b6:97:4a:35:c5:
95:99:1b:38:53:1b:84:a4:c6:df:b4:a1:46:a9:ca:07:1a:23:
71:b1:cb:5d:3d:91:78:4f:da:63:34:36:49:94:31:30:95:26:
e7:3b:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:44:31 2026 by rpki-client