
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d6b858e-c609-3096-9626-ce4a07645dfb.roa
File: 0d6b858e-c609-3096-9626-ce4a07645dfb.roa (raw, json)
Hash identifier: bOC+WXEDn6WsOijBykpbcCHfqpZqSfL/Xe//tT8NKBE=
Subject key identifier: 8B:BE:A7:2A:83:D3:94:DB:2B:EB:30:7B:6D:8E:37:04:C7:87:5B:EB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DB770408BAE03B27B6B14D380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d6b858e-c609-3096-9626-ce4a07645dfb.roa
Signing time: Mon 04 May 2026 01:00:25 +0000
ROA not before: Mon 04 May 2026 01:00:25 +0000
ROA not after: Sun 02 Aug 2026 01:00:25 +0000
asID: 7029
IP address blocks: 173.187.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b7:70:40:8b:ae:03:b2:7b:6b:14:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 4 01:00:25 2026 GMT
Not After : Aug 2 01:00:25 2026 GMT
Subject: CN=f54b0e7d-8bba-4f3d-8877-a35c07220dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:7c:8f:eb:1c:76:98:2c:5a:c1:47:92:75:
c2:3e:4e:b6:8f:5f:e7:78:07:a4:e4:7f:a1:c1:af:
41:f0:91:ce:d5:1a:b0:15:ff:5c:e3:48:3b:e6:5c:
b4:a2:0b:82:bb:d3:fc:13:61:13:8d:6f:35:73:45:
c9:20:e5:f1:90:b1:3b:27:3b:ab:24:2f:7a:86:2f:
d5:5b:7e:16:72:bf:70:b1:69:7c:92:05:48:9c:2a:
75:62:57:1e:b3:e4:ab:70:2c:a6:3e:5e:73:9f:f8:
a9:ac:99:3f:ff:55:46:4d:a4:91:f0:51:eb:c9:81:
d2:49:5e:03:d7:da:93:6b:dd:99:73:22:95:81:d4:
d2:bb:de:a7:61:8e:40:ca:4a:c4:32:43:ad:7d:41:
42:38:18:8f:86:14:05:bf:5d:fc:28:47:bd:ae:50:
23:72:10:b7:44:c2:6e:6c:06:42:81:7d:e4:db:67:
bb:c2:27:16:5e:13:04:26:16:1f:ba:cd:f1:c2:95:
6b:79:b5:02:a5:03:2b:a5:04:79:77:7e:59:5c:4e:
65:f8:4f:6a:2d:71:48:cb:75:d9:50:89:bb:db:dc:
02:be:73:e0:59:fb:fa:78:a4:50:33:e8:9f:e5:02:
96:8e:b1:8e:cf:b3:5e:bb:15:d5:08:ba:04:98:3a:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:A7:2A:83:D3:94:DB:2B:EB:30:7B:6D:8E:37:04:C7:87:5B:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d6b858e-c609-3096-9626-ce4a07645dfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:9f:03:5e:3d:f6:e4:d2:38:a6:cb:e7:99:aa:3e:c0:8d:79:
49:13:ef:a7:c0:9a:37:51:79:80:95:e3:a4:9c:3d:7a:cc:5a:
1e:ca:77:54:86:a4:64:e5:52:80:b6:cc:0e:95:59:1b:0d:23:
48:df:29:27:17:9f:68:1f:7c:2a:01:92:5a:15:6f:87:ae:51:
d2:c0:bd:ab:6a:57:02:cf:64:f5:04:9f:ea:0b:af:69:59:eb:
5c:99:1a:a5:8c:0a:53:55:38:a6:b6:e1:2a:ae:cf:e4:39:ac:
40:75:ff:b3:07:b3:4e:06:30:da:bc:c8:21:cb:03:5a:4a:18:
56:b5:71:55:2d:bd:b0:2e:c4:ba:7a:61:8d:1e:f2:bf:3f:89:
8a:dd:4b:12:82:b5:69:2e:34:9b:81:04:8e:1e:15:ae:57:e9:
04:0e:b2:16:3b:60:ba:fe:b4:9b:11:5b:b0:28:d0:16:2b:19:
59:11:e8:70:92:fd:c9:7b:d8:f8:a3:df:39:9a:f3:93:9c:4c:
f4:df:e3:00:e0:5f:79:ee:1a:87:cc:0b:9e:d2:41:1f:70:bf:
66:3a:24:96:55:2c:a8:62:04:fb:a7:24:6a:66:cf:86:be:81:
a4:20:ae:52:be:b2:26:ba:56:3e:a7:e5:0a:73:b0:34:9f:28:
20:1b:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:15 2026 by rpki-client