
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa
File: f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa (raw, json)
Hash identifier: 9E0yaTp8DU+EE33CHCYFWmAAcL3EU7olJOTw3BGbMrs=
Subject key identifier: 75:8C:DB:8F:B6:1B:8E:52:B2:D9:D0:C3:E6:2D:07:31:05:F7:08:66
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D55BCB9E31E5092FC6EBB14B8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7029
IP address blocks: 71.30.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:b9:e3:1e:50:92:fc:6e:bb:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=fe8b225e-a1b5-44ab-b456-ebb875804347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:17:4c:43:7c:a1:ff:81:e6:b6:d3:df:19:
b6:ad:ce:c0:53:9f:47:69:6a:b1:13:28:bb:55:cd:
65:1c:99:fa:41:ee:7b:eb:28:ae:1d:ff:ce:81:2b:
cd:02:b9:31:fa:93:e4:01:53:89:ad:a3:3f:1a:f2:
11:ab:37:75:94:50:da:69:69:79:71:98:57:be:41:
e1:b4:2a:c1:00:9e:1f:60:50:b4:7e:18:13:d7:34:
2c:0b:7f:a1:0d:fa:b6:b6:2e:2c:d8:35:0d:8a:bc:
df:6c:10:57:3b:4b:83:2f:96:1a:a5:30:21:6a:28:
3f:3c:06:06:f7:6f:60:7e:e7:b7:a9:a1:85:21:c9:
26:be:43:5d:b8:2c:d7:24:6c:35:a3:ae:01:5b:52:
10:7c:cb:a5:8a:ea:6b:7e:13:bf:0a:30:66:eb:30:
11:49:f5:1b:75:41:b1:4b:c6:06:bf:e4:10:39:4b:
57:db:3e:36:fb:82:ed:1c:86:32:a4:08:9d:06:dc:
26:2d:07:a5:ff:0c:e3:06:3e:01:10:80:91:0c:fc:
d6:85:65:fb:e1:1a:fe:bd:e9:d6:04:e5:8d:56:cb:
e6:cb:b1:8c:62:1f:fa:ac:18:eb:9b:6c:f1:1f:25:
b4:82:8d:b9:1d:30:1f:62:9d:ac:46:85:79:e3:98:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8C:DB:8F:B6:1B:8E:52:B2:D9:D0:C3:E6:2D:07:31:05:F7:08:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ca:13:fc:05:57:52:bb:5d:4b:04:52:58:c4:d5:8a:4f:45:
eb:4f:ef:c7:e0:f9:2b:02:ce:e2:29:e7:5d:26:f8:a6:a5:e1:
92:87:83:a5:cd:be:b5:8d:41:89:5e:ac:46:a0:53:63:e9:c5:
c5:32:df:10:6f:a4:c4:cd:02:25:77:88:5c:9e:fa:5a:f9:b4:
cb:4c:6b:92:62:07:a3:86:f9:f1:dc:b2:65:52:93:74:be:48:
ab:0c:e6:f9:42:c5:fb:4b:f8:f9:3d:33:e5:50:88:1e:8c:14:
e3:09:a4:da:41:22:5a:75:66:3a:68:4b:ff:16:71:34:af:6a:
f3:c0:3d:1c:dd:12:87:38:19:2d:87:91:58:a5:24:cb:8e:07:
ef:fe:a6:6c:a4:9b:0c:2a:d8:4f:04:76:4e:fe:a3:71:fa:f2:
d0:cd:64:bf:ef:80:69:76:a3:ff:d3:17:51:77:49:60:ee:54:
86:28:80:11:56:d8:65:a7:13:62:c7:03:04:75:b4:c7:fa:84:
17:7b:ff:7f:d0:e9:a9:f7:ed:78:76:9c:cd:4e:fe:7a:db:31:
d2:b6:2f:d7:81:f8:90:e2:7d:17:f5:99:01:78:65:b0:3c:b7:
59:a5:47:88:aa:7d:7c:79:74:0f:64:e5:78:27:06:d5:3d:b0:
ed:f5:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:43:10 2026 by rpki-client