
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
File: 2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa (raw, json)
Hash identifier: 4XzBVOH8JvIzc7aQY75JX4v5Nd2TiBUXI37c+vEeLnY=
Subject key identifier: 3E:01:D9:BB:33:96:F1:70:80:F4:18:22:4E:99:B2:09:AF:8B:1E:2D
Certificate issuer: /CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
Certificate serial: 010D0C9F4328584DADAACB4A2D0CE23453ECCC00
Authority key identifier: BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 63023
IP address blocks: 45.42.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:cb:4a:2d:0c:e2:34:53:ec:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=5519badd-a114-4f42-a016-5b550aba9509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:c5:3a:4d:16:e5:3c:7f:76:a3:d7:23:cc:
7a:e2:33:6e:7c:cf:be:03:cb:be:36:65:a1:82:ec:
e0:0c:32:be:a7:a4:fe:b3:7f:8c:92:c4:ef:11:81:
73:cc:b6:0b:dd:ac:ce:d3:f5:7e:e6:b0:32:a2:a3:
e3:6d:2f:0d:c9:3d:d1:1d:b5:40:9e:61:71:8f:77:
62:1e:12:32:95:2c:45:51:0f:f4:49:0b:df:c5:c5:
c2:3d:90:f0:47:c9:02:1f:4c:2d:fb:83:cb:96:b5:
c6:7a:0c:28:5b:08:13:94:aa:08:fc:7e:22:3f:1f:
ab:ba:9a:19:0b:f5:30:4c:93:3f:88:47:5a:0f:81:
ed:a0:5d:4f:77:36:2c:85:44:6a:19:38:23:29:9c:
26:f7:3e:02:5a:9b:2c:25:a7:77:84:74:a4:f7:3f:
13:2f:fc:36:c6:79:77:2c:50:f9:73:d1:19:8f:0f:
3c:43:bb:72:37:02:5b:85:1f:ec:06:61:f1:9d:25:
80:c7:5f:7c:bd:03:0b:59:cd:a7:57:60:a2:c2:e2:
5d:a5:7f:19:30:a2:6d:c1:d9:2a:06:dd:07:65:35:
91:d3:4b:1a:98:61:f3:3e:7d:15:9d:1e:ca:07:0c:
4c:86:9e:08:6f:3e:0c:5f:9e:d1:89:02:02:bc:e7:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:01:D9:BB:33:96:F1:70:80:F4:18:22:4E:99:B2:09:AF:8B:1E:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl
X509v3 Authority Key Identifier:
keyid:BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:86:11:e8:f7:d4:aa:49:28:fb:cb:c3:a1:ca:35:fd:a2:df:
99:5f:c8:4c:9b:62:6f:24:fe:08:13:7d:73:5c:1f:06:65:71:
06:eb:5e:90:d5:b3:1c:f4:15:f8:15:4a:63:85:68:fc:38:f1:
59:db:3a:fe:e5:40:48:75:1b:49:ee:96:a5:48:ae:98:d8:8d:
2b:98:b8:6d:a7:71:f0:38:da:69:45:79:51:30:79:bf:44:70:
3c:c1:0b:a6:13:4d:1c:97:af:07:34:7c:ff:89:f1:0c:f1:df:
8c:c6:89:e7:3c:cc:40:e6:33:19:2d:97:4d:05:74:cc:29:d2:
94:8e:d5:66:d0:39:01:78:77:1d:f5:cd:42:21:05:5f:d7:2d:
97:6f:bb:98:27:6e:d5:d3:41:05:27:cd:aa:2d:59:4e:0a:49:
79:d2:41:dc:5c:fa:c2:d9:62:7c:2d:ba:60:49:9e:b4:9d:61:
04:67:cf:ed:e0:8b:63:9c:c3:29:9c:5c:be:bf:90:fd:0b:ae:
f3:3b:52:24:00:42:25:d5:4f:b3:eb:9b:d2:93:32:d8:71:9b:
aa:27:a9:26:13:32:3d:bc:0f:85:02:b3:6d:29:7d:34:ab:20:
e2:2a:8a:55:26:49:0b:56:f5:26:34:d0:69:fa:a0:b4:8b:dc:
67:73:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:41 2026 by rpki-client