
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa
File: f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa (raw, json)
Hash identifier: bnuc8l9YRtI7O+GENVnieWTTezR7WQ5fN54buWLRKz4=
Subject key identifier: 9C:DE:45:49:AF:0D:BE:68:AF:9C:54:31:33:54:BB:CD:BD:2B:E1:A6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EB2B1D1A9A937C33517041C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 7029
IP address blocks: 67.224.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:d1:a9:a9:37:c3:35:17:04:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=e7e9faca-e7be-432b-9b7d-e69f8682ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:ff:38:9f:65:b8:d8:c2:0b:03:cf:89:df:
a4:d0:9f:48:c9:cc:5f:81:a4:6f:81:7a:4f:5e:1b:
33:54:6e:ae:10:6b:55:74:ae:6b:55:28:4d:7b:d0:
d0:76:a7:a5:f3:77:74:35:91:e7:08:a2:98:ae:c2:
68:be:b8:27:2c:69:83:f1:e9:69:e3:2f:c1:5f:77:
5e:08:1b:81:22:5a:d0:c1:30:ae:21:e2:ee:bc:b1:
a5:93:6b:dd:10:de:2c:1f:af:32:10:54:95:b1:16:
2d:72:4c:dc:20:fa:b4:97:09:56:83:6a:66:4f:b1:
83:32:a1:67:58:d7:07:c4:fa:05:26:8a:cb:a1:ec:
b7:14:43:49:08:ea:4c:50:37:6f:b6:b6:5a:c9:90:
0f:74:b7:99:8e:7a:1a:04:a7:1d:b9:04:2c:07:b7:
a0:08:78:49:76:f9:d3:b3:8a:e1:72:37:b0:7c:da:
78:f2:db:d1:6e:5a:76:07:96:97:91:b9:b0:cd:14:
51:c5:9a:0d:67:09:fe:b7:63:90:4f:1f:ea:33:db:
5c:d2:43:22:95:4a:8b:83:43:33:54:50:a1:2a:8f:
80:bf:0c:53:d7:d0:dd:9f:eb:43:77:b6:68:cb:6a:
94:f9:4e:01:4c:ab:ff:2f:af:a7:e1:53:52:79:71:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:45:49:AF:0D:BE:68:AF:9C:54:31:33:54:BB:CD:BD:2B:E1:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.224.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:47:4a:74:4a:6d:48:9e:25:c9:0d:e2:06:48:cc:c6:9d:5c:
4f:88:e6:93:ac:76:c2:40:f5:81:34:f7:69:2d:eb:de:d2:84:
f8:7a:f8:02:2b:29:4f:d3:62:2a:3b:39:7d:b8:9d:65:fa:1c:
7a:45:65:3a:b8:85:18:c3:3b:f7:fe:c0:94:23:55:52:6e:15:
b3:c6:a2:b5:27:37:6e:76:8e:c1:01:af:3d:2f:cd:fc:2e:4e:
45:f0:6a:fe:fc:7c:f1:2e:fc:a6:8c:ce:4a:64:49:bf:9e:40:
4b:3c:02:42:0c:c8:de:d3:3d:0a:ec:e3:cd:42:16:68:be:e9:
09:5b:9b:30:eb:7c:b5:7c:93:c7:aa:6e:73:a8:ac:61:bb:35:
eb:58:00:6b:88:52:83:1b:20:7c:a8:d8:64:38:02:b4:c2:16:
c8:90:7c:d8:79:df:83:77:d6:ef:68:b6:e1:16:c7:f3:d0:b5:
90:78:2e:9c:db:eb:b0:fe:d6:ef:09:bd:94:ff:e6:ec:4f:64:
aa:98:79:ee:bf:bd:f9:07:7d:f9:a7:9c:4a:75:5f:69:c7:fa:
6b:93:fa:3f:60:2b:14:d8:b4:f5:9f:0b:92:88:8f:b9:a2:db:
75:31:cb:96:46:3f:ee:27:ab:9d:a4:37:cb:d8:00:c5:cb:5e:
28:74:4d:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdGpqTfDNRcEHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
ZTdlOWZhY2EtZTdiZS00MzJiLTliN2QtZTY5Zjg2ODJjY2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsH/OJ9luNjCCwPPid+k0J9IycxfgaRvgXpP
XhszVG6uEGtVdK5rVShNe9DQdqel83d0NZHnCKKYrsJovrgnLGmD8elp4y/BX3de
CBuBIlrQwTCuIeLuvLGlk2vdEN4sH68yEFSVsRYtckzcIPq0lwlWg2pmT7GDMqFn
WNcHxPoFJorLoey3FENJCOpMUDdvtrZayZAPdLeZjnoaBKcduQQsB7egCHhJdvnT
s4rhcjewfNp48tvRblp2B5aXkbmwzRRRxZoNZwn+t2OQTx/qM9tc0kMilUqLg0Mz
VFChKo+AvwxT19Ddn+tDd7Zoy2qU+U4BTKv/L6+n4VNSeXGG/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzeRUmvDb5or5xUMTNUu829K+GmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjRjMjBmNjktODVkZS0z
YjEyLWJiNmQtNWI0NTQ2OWIwZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+AQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVHSnRKbUieJckN4gZIzMadXE+I5pOsdsJA9YE092kt697ShPh6+AIr
KU/TYio7OX24nWX6HHpFZTq4hRjDO/f+wJQjVVJuFbPGorUnN252jsEBrz0vzfwu
TkXwav78fPEu/KaMzkpkSb+eQEs8AkIMyN7TPQrs481CFmi+6QlbmzDrfLV8k8eq
bnOorGG7NetYAGuIUoMbIHyo2GQ4ArTCFsiQfNh534N31u9otuEWx/PQtZB4Lpzb
67D+1u8JvZT/5uxPZKqYee6/vfkHffmnnEp1X2nH+muT+j9gKxTYtPWfC5KIj7mi
23Uxy5ZGP+4nq52kN8vYAMXLXih0Ta4=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:10:08 2026 by rpki-client