
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa
File: 49b878ae-cfbb-33d6-a846-5101c41a6394.roa (raw, json)
Hash identifier: cNEqqv/L82JNSacNBnwpBrpGnBpObyQkUrlqFfOwItw=
Subject key identifier: A3:AE:5F:14:F6:4B:51:80:B1:8C:8A:7F:7C:7D:99:D7:DD:4C:53:AD
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EC0A73FCA8737DB88DF792A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 396603
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:3f:ca:87:37:db:88:df:79:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=650fd296-35f4-4eb4-a789-fc7892edf8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e6:9f:94:f2:39:17:b9:3f:04:27:04:28:02:
fb:7d:fb:3a:2f:b1:6f:ec:de:ef:f5:2c:e0:0a:83:
71:2f:30:d4:eb:5a:82:91:44:43:f6:2a:49:79:66:
1e:53:9e:a5:b1:cf:d1:f9:ca:88:ae:5f:41:fe:3e:
31:65:59:db:1f:24:f8:c6:1a:09:fc:5f:4c:98:a0:
33:24:d1:b1:b5:c3:1d:56:7f:61:06:6b:74:07:57:
e5:14:cf:6c:c7:22:79:d3:1b:4e:cc:3c:1b:f0:57:
57:95:a9:ff:41:a8:34:1f:72:46:21:03:48:2d:31:
78:b8:9d:84:7f:f1:e0:3e:d2:fd:6d:5b:31:fd:00:
81:d7:a3:5a:78:4d:b9:c1:41:1e:d3:06:c4:b7:5c:
56:cb:6b:17:85:2f:8f:8d:e9:0a:d9:b5:4c:f5:0c:
d0:f3:7e:f0:bf:70:67:fa:e3:15:ce:da:47:69:6f:
ab:2a:aa:4b:c8:e6:bc:5a:c1:2f:c3:a9:0c:0f:a6:
24:47:10:34:05:e8:ca:e8:41:56:4f:c5:9f:e0:3d:
90:67:0b:cd:ca:7e:3f:e9:c0:3d:40:e1:6b:45:9e:
96:31:ce:23:9f:5f:38:d3:cd:d8:a9:51:19:9b:50:
12:c7:71:7b:7f:70:ef:51:67:d6:ee:16:05:2f:2f:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:5F:14:F6:4B:51:80:B1:8C:8A:7F:7C:7D:99:D7:DD:4C:53:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:2e:f8:66:03:71:05:59:5c:54:1b:ab:c4:a2:20:38:bc:88:
0f:a4:50:3d:36:2f:6f:37:46:f4:b8:eb:f0:ee:d5:1b:e5:a7:
9f:d8:08:aa:01:19:ed:01:da:b7:a7:27:e2:eb:d5:d4:c9:71:
fd:73:a3:32:29:4d:2d:52:91:96:a7:76:49:8d:cd:f3:1b:00:
0e:5a:79:03:9d:d5:4d:a2:23:ce:2b:f5:c1:98:0e:d9:f8:67:
5c:3f:8c:4f:6c:e2:bd:8d:65:9e:b2:7a:d1:f3:e5:20:1c:fe:
03:55:5c:84:df:3e:ad:0d:4a:b8:ac:53:6e:46:f0:8d:68:6a:
e3:f3:98:c1:78:59:83:a4:5c:46:88:f7:31:8b:08:fe:3f:12:
d9:ea:35:66:a1:8a:33:5c:d2:de:23:4e:a0:51:a5:6c:38:ce:
0a:09:63:6f:b5:1e:03:21:f9:60:59:49:30:4c:cc:76:f8:ae:
53:2c:62:68:80:9b:b4:d7:52:79:47:54:61:f9:0c:7d:35:3d:
76:fe:0a:22:71:28:dc:f8:ee:aa:e2:0e:78:13:bf:67:8c:b3:
45:c4:90:49:b4:b4:62:28:ff:f2:da:bb:06:b6:fa:9e:48:37:
5f:9d:a0:27:d2:ad:23:e3:50:30:9f:bf:b6:66:73:71:8a:46:
8c:b1:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:01 2026 by rpki-client