
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa
File: f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa (raw, json)
Hash identifier: YyG81qK0tBbCl4F3M6xKb1M3DJ1lKFDTjbqFnCzRR8s=
Subject key identifier: 8D:87:E2:66:55:C7:3E:06:A3:C0:E9:88:5F:57:81:D8:A4:E2:8F:4F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1E72BCB06A6F138EBB180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 174.131.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:e7:2b:cb:06:a6:f1:38:eb:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=3f1254af-59d3-4770-a55a-e953a7f8e9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:83:52:70:ed:7e:48:e0:3e:4e:ea:72:68:
0d:5e:24:30:08:9e:5f:91:d0:9f:35:d2:b7:c0:af:
51:a7:71:e9:49:06:80:a2:81:57:17:55:45:4c:35:
cd:ba:ef:2c:85:a3:a4:68:60:bd:c5:94:5d:29:92:
77:95:e0:8b:38:ab:ce:fd:37:51:27:07:75:53:b8:
07:54:46:1d:8d:39:7d:86:30:aa:a4:52:ef:c7:98:
a9:eb:ea:24:8f:56:4e:e7:df:19:c1:b6:6e:3e:8b:
a8:7e:7e:fa:a4:99:21:be:8c:d1:77:2e:f7:df:18:
67:7a:11:07:0b:a6:24:49:c2:08:1b:47:08:ae:77:
3e:e9:68:34:a4:61:76:0e:0d:57:4f:2b:cd:c0:72:
39:f0:76:d6:0f:df:22:57:dd:68:6e:a5:82:f9:f4:
41:5e:2a:9e:72:60:ed:a3:77:3a:fb:ac:b9:17:1e:
0a:ad:a6:d0:6b:2b:6a:27:19:8b:7a:e2:5f:ca:8e:
7d:dc:8b:d4:ea:4c:4e:a1:0b:2e:11:cc:3a:15:9b:
e6:a5:71:6d:32:a3:6c:95:19:96:c9:5f:de:85:05:
85:59:53:66:7e:7a:87:2b:15:a1:5d:de:50:c4:2d:
47:e8:97:b0:03:bf:62:c8:58:06:34:12:a5:da:01:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:87:E2:66:55:C7:3E:06:A3:C0:E9:88:5F:57:81:D8:A4:E2:8F:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:16:c4:25:0e:a8:ff:c0:8f:7f:37:3e:4c:db:40:98:d6:42:
b2:1e:05:d9:f9:bb:e4:ff:8c:c1:0a:31:40:eb:cb:6e:f3:60:
36:a8:1a:6d:ba:84:34:8b:49:7a:05:bb:e9:61:d4:5a:0d:61:
55:81:9e:48:5f:4b:48:40:ed:25:3e:1f:b3:35:bb:1d:35:b3:
04:ab:1e:97:ad:72:ba:ad:9d:fc:e4:f0:cc:b2:bb:d2:5d:a2:
9a:48:9f:3a:19:ed:fa:12:8b:c1:03:95:c2:26:73:18:db:df:
ea:4c:1f:b4:87:d6:66:8d:2f:e2:b9:70:62:4a:18:f2:c3:77:
bb:ef:51:9c:53:38:ee:cf:0c:71:f4:62:92:e4:63:ef:2a:6d:
98:bc:78:85:25:52:03:8c:3a:86:12:43:ae:07:14:03:cc:1e:
47:39:d6:55:8a:63:83:cf:5c:ec:c0:a0:62:ce:c0:ca:2a:4d:
6b:2e:41:e9:13:21:2e:85:cd:e0:fb:ff:f8:c4:7b:d7:c9:49:
46:86:0c:8b:8b:aa:56:3f:c5:6d:bc:4a:33:e9:51:a2:b7:15:
13:14:f7:df:35:50:4e:b3:e8:f0:b4:ea:02:cd:35:bc:18:d1:
d8:dc:c1:ce:d9:ce:c9:ae:95:fe:5c:2c:f4:7f:b0:9f:75:c0:
cb:8d:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:16:04 2026 by rpki-client