
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb28950a-cabb-30af-8caa-c5bb31de0cac.roa
File: fb28950a-cabb-30af-8caa-c5bb31de0cac.roa (raw, json)
Hash identifier: pSbkKL7aJ8+6DUjnSO85gh0C4rP3oXvCgM1seYXxQe0=
Subject key identifier: 17:EF:48:B1:7C:63:09:49:7A:21:EF:3E:90:B7:73:25:BC:34:A7:89
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EA787A91B7BD5F4FDFAC20280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb28950a-cabb-30af-8caa-c5bb31de0cac.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 98.16.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:a9:1b:7b:d5:f4:fd:fa:c2:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4ad8daab-7db5-4927-8143-1b51ec505bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:4f:12:4d:f1:0b:85:ab:f8:d8:0b:d4:25:
e2:a9:34:5d:06:61:71:14:11:4b:84:cf:3c:b2:5b:
cb:2a:f4:c8:f6:3e:24:79:01:bc:1c:8a:77:56:f8:
54:ea:a2:23:d2:de:0b:66:aa:77:fa:c9:4d:70:65:
ac:43:34:41:34:c2:18:dd:99:57:2f:81:ea:52:00:
bb:9e:77:6a:ce:34:d3:53:48:9d:c3:48:3c:46:b1:
99:3f:d1:22:64:1c:80:eb:7e:d7:0a:0f:7a:45:90:
88:08:61:68:ce:91:05:e2:32:88:54:05:67:7e:42:
3d:38:62:1f:24:43:b0:35:ae:02:b5:f6:f5:54:1f:
8a:63:ed:92:9e:6f:d4:b9:15:7d:20:ca:4a:10:3c:
d9:03:db:2a:ad:25:57:1e:44:96:91:db:df:f8:ab:
99:d8:60:4c:08:43:49:97:74:4f:61:e5:d6:26:fa:
7e:49:bc:b8:24:6d:de:1e:4b:e1:a8:e1:c0:99:42:
23:6a:5d:64:4a:62:9d:0f:5d:fa:af:a3:8f:9e:6e:
e3:7e:27:d8:76:73:56:29:6d:1a:6e:5b:49:61:59:
78:fa:d2:45:ea:1e:2f:96:04:ea:97:6d:11:8d:06:
9b:1b:65:11:b7:6c:b0:08:cf:c4:80:08:8d:ec:53:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:48:B1:7C:63:09:49:7A:21:EF:3E:90:B7:73:25:BC:34:A7:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb28950a-cabb-30af-8caa-c5bb31de0cac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:1d:ec:28:f9:1c:b3:9e:0d:d4:08:f0:68:da:58:a1:e8:55:
c7:69:86:a4:81:2a:cb:dc:81:5c:8a:70:e3:ba:1c:e9:8e:af:
a9:34:6c:cc:1c:1e:42:66:19:e3:72:2b:6a:19:00:65:6c:4a:
ab:c8:58:23:63:16:97:e8:3f:a5:e8:cd:96:c0:1b:2b:d6:2a:
07:88:17:8a:fe:df:fe:07:70:3f:a3:65:0e:58:9e:64:f1:9b:
76:b3:d2:7c:63:d6:76:e4:da:40:f6:e8:32:96:73:06:2b:e9:
5d:8b:9a:17:ba:2c:ff:96:ee:2c:a7:ae:66:f7:8f:45:09:f7:
5f:8c:7a:80:7d:3d:be:a2:85:44:3f:fa:bc:46:24:2f:04:90:
c4:9c:1d:12:84:90:1f:39:af:a7:06:a3:a1:5c:a8:d3:e8:0b:
58:27:74:8b:af:9f:4f:97:03:41:8e:ba:23:f8:84:1d:d7:cd:
67:04:91:c9:84:cb:08:c3:bd:1c:23:7b:3a:2a:1b:0b:77:fd:
3a:30:cb:0e:1a:7a:83:aa:0b:24:5c:06:7e:c1:1d:17:82:86:
e4:17:81:8f:7e:1b:cb:6b:69:3e:63:3a:85:a8:33:b9:53:7f:
a4:e8:a5:2c:83:af:5f:0c:aa:69:7b:5d:58:3a:58:93:1c:33:
1a:c8:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:48 2026 by rpki-client