
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa
File: f204efbb-87c6-3229-84e8-cf88708d2191.roa (raw, json)
Hash identifier: KG5cdaxYtJ3nq6KgdQyzcwBUEYwrB9V9n5LX1CaPrpI=
Subject key identifier: B7:CA:10:BB:F6:AD:F3:AE:58:29:BC:55:2C:B6:B1:A6:48:0A:1F:07
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584ED8628A09FB00C01EDAF88800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 7029
IP address blocks: 69.66.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:8a:09:fb:00:c0:1e:da:f8:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=8634b02d-bee2-441e-8fe0-ac01edc3fb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:92:d4:87:0f:f2:3b:2d:3f:17:72:e7:d4:
15:96:ef:9d:8f:bf:23:2b:68:f5:79:b6:b0:a0:94:
49:c6:59:c5:5c:2e:c8:e1:f6:20:0a:a5:4b:cf:9f:
ef:82:d3:e7:60:ad:c1:b0:e5:8a:07:86:ac:18:e7:
34:95:05:5a:a1:b7:e8:bc:f6:bc:c5:24:f1:78:ee:
16:93:d4:7a:2b:53:43:a6:b8:d3:f0:65:33:1f:39:
98:d3:cb:81:03:3c:33:eb:ef:97:8d:db:ba:65:7b:
d8:7b:1f:08:fb:af:c0:9a:a7:29:48:83:0a:f4:87:
1a:f4:ab:4d:ba:d1:62:29:39:57:08:68:34:d2:e2:
93:54:4a:bb:20:83:e8:6e:8d:da:05:21:e6:dd:fe:
34:56:54:94:c5:d2:34:46:8b:43:55:55:b2:c3:2b:
c1:3a:82:f8:8f:6e:f1:21:82:c0:67:fb:62:44:69:
43:ba:61:1b:da:81:83:35:c9:4a:34:7f:31:6a:2b:
aa:eb:68:27:81:37:6b:96:81:ab:28:f2:24:af:34:
a6:9e:9c:45:82:69:f4:bd:72:13:65:a3:eb:9d:6b:
dd:d7:55:33:cf:c7:65:5e:a0:37:9f:fa:c8:72:f5:
6e:0a:bb:62:03:72:57:c2:3c:64:75:11:e0:00:fc:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:10:BB:F6:AD:F3:AE:58:29:BC:55:2C:B6:B1:A6:48:0A:1F:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:df:3c:97:71:c6:90:e6:3a:61:10:5c:c9:38:ee:ba:ce:2b:
62:55:65:fb:7f:28:ce:0c:7a:3e:f3:fe:a5:3e:59:ae:20:ca:
bb:2e:83:e6:9a:b2:3a:dc:4e:8c:03:85:44:f5:b0:4e:86:55:
3d:6c:dc:dd:55:55:ab:13:03:cb:00:81:a6:81:86:c6:d3:09:
29:9f:cf:44:7f:d5:f1:29:d2:19:96:52:54:df:cc:9e:d9:87:
e4:9c:89:d3:04:25:1d:f7:c3:48:9a:40:dd:23:46:0a:1f:42:
51:ce:55:67:bd:fd:59:97:19:89:70:31:c2:8f:15:27:4d:82:
e3:c8:8e:80:65:5e:ce:16:1f:34:01:bf:be:fe:c0:31:3e:39:
df:d8:97:7f:5b:1b:72:b2:c2:dc:51:8c:1d:b2:ad:28:8a:30:
76:fc:72:26:dd:7d:07:f8:b8:20:97:cf:36:46:33:91:15:5c:
79:34:a2:c6:21:38:78:8c:e9:e7:db:fb:ed:9a:7d:d1:c9:71:
6f:e8:6a:f3:cc:aa:ea:44:98:9d:44:2d:d9:43:c2:90:53:ff:
0d:19:56:75:c7:3b:fa:82:38:4f:58:bd:8a:46:9a:93:66:87:
42:b4:35:13:e6:50:c9:2d:1c:fb:be:93:32:7f:b5:c4:75:8a:
84:ce:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:01:51 2026 by rpki-client