
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa
File: 0330cd88-8666-38d7-8200-fa0d7a7e8929.roa (raw, json)
Hash identifier: G1XsAo6ulf50GH/HvNZKWx70Cc/E3tbpcPOZ+8pcbgg=
Subject key identifier: 3B:D9:7F:74:58:24:F5:DE:CE:84:57:8B:3A:37:71:60:EB:57:12:70
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D27D84363A84455BC21544A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa
Signing time: Fri 13 Mar 2026 14:33:51 +0000
ROA not before: Fri 13 Mar 2026 14:33:51 +0000
ROA not after: Thu 11 Jun 2026 14:33:51 +0000
asID: 7029
IP address blocks: 173.188.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:d8:43:63:a8:44:55:bc:21:54:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 13 14:33:51 2026 GMT
Not After : Jun 11 14:33:51 2026 GMT
Subject: CN=8bb7acdf-b975-478f-a550-4e1645106b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:b4:db:ae:5f:5a:a6:bb:f5:f4:0a:cd:fe:
b9:e7:9a:a8:0e:9f:55:29:d8:1f:b4:5b:cd:98:ba:
27:63:9c:07:11:a7:1b:22:bc:9f:9d:be:40:ae:78:
aa:0e:88:5f:8b:23:24:42:50:3d:3b:53:90:48:95:
da:bd:5f:6c:c9:7f:66:28:22:06:f5:03:7a:4b:0c:
3c:4c:e1:6b:be:d4:ea:46:26:93:a6:66:1c:50:90:
d8:22:12:b7:95:41:2e:03:fa:55:12:53:bb:be:c1:
6f:66:05:67:7c:a2:52:cd:a8:37:64:c1:11:e5:1b:
11:7c:27:6e:9f:4c:d8:64:c4:87:ec:5a:9f:63:b3:
b8:ff:59:d9:ac:a3:ad:26:76:c6:a5:58:d2:dd:69:
8a:67:0e:00:bf:fe:a5:ad:7f:66:9d:28:70:b6:83:
0a:eb:f8:57:a1:8a:e7:cf:d1:89:eb:fc:71:6c:86:
d1:a5:a9:81:c6:53:d1:39:25:e0:f4:ec:59:31:4d:
2d:13:ed:a0:0a:c6:45:3f:f6:9e:b4:81:e7:13:16:
30:3f:e2:66:84:4e:49:2f:42:65:b7:7c:51:7c:46:
37:53:dc:16:17:a9:59:99:5a:ad:6f:c9:3f:0d:64:
6d:b6:81:2c:80:59:63:b8:5b:87:e5:d7:af:f7:59:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:7F:74:58:24:F5:DE:CE:84:57:8B:3A:37:71:60:EB:57:12:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:22:04:12:07:2b:45:53:3b:73:84:e7:01:64:1b:24:73:ed:
d8:43:e3:16:d3:a4:de:2d:af:62:d4:56:27:f9:5a:4f:ef:af:
20:b7:24:d9:c9:75:bd:fd:5b:69:45:99:60:d6:19:25:f5:29:
25:32:c4:0d:16:eb:20:d2:e5:25:0a:3d:cc:7e:83:2a:4d:b0:
6f:6c:ec:9b:db:93:01:87:55:1c:b0:c5:c3:17:c7:b4:e2:c0:
f5:3d:ae:39:07:85:e6:23:a5:82:06:fb:2e:4d:40:15:9f:c8:
10:f1:1f:a0:b5:fa:c8:ca:67:b9:f1:0f:a2:87:f1:a7:aa:97:
87:a3:3e:f8:17:85:89:06:8d:98:05:b7:3f:c8:50:c8:62:91:
4a:79:23:ab:5f:bc:35:be:c1:1c:dc:89:71:c7:71:58:d6:ba:
73:e7:c8:70:ad:dc:c4:86:5e:6e:75:a8:9b:bb:16:88:39:13:
5b:73:f4:c9:cf:d8:42:a4:7c:5d:91:5e:ad:b3:37:4d:51:43:
6c:18:01:7c:05:e4:91:6b:f2:8b:ee:11:32:02:3a:10:48:21:
b4:0a:48:e2:e2:1b:fb:3e:a0:8d:2c:da:0e:79:eb:37:b8:d3:
49:64:60:9e:3f:21:ca:07:9a:35:1e:45:d3:1a:c0:12:53:09:
e4:ce:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:34 2026 by rpki-client