
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa
File: 12f832c3-109c-3d9b-b69b-2fab2a90e816.roa (raw, json)
Hash identifier: h3meHxTz4r3+fbUW5KUjmMlw5E3I0zqoAg8nGaybDwg=
Subject key identifier: 19:48:C7:8C:8A:6B:1D:66:EF:A1:38:14:A0:62:C8:DF:80:3D:BE:4D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D2BDA35C8127A9EB199FF2B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 7029
IP address blocks: 173.191.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:35:c8:12:7a:9e:b1:99:ff:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=51fb8de2-d3ee-4676-82bc-4353f0858c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:19:75:72:af:70:b5:4b:52:d6:db:69:b5:
3b:05:3e:9c:72:c9:ce:e4:28:fd:96:75:96:38:77:
00:03:9c:e8:ce:bb:5c:22:a5:41:1c:a6:41:74:4d:
77:7a:e9:54:c1:df:a9:81:bd:a4:f3:ad:31:ca:b3:
ee:58:6e:a6:42:ca:ef:1e:a5:9f:fb:e9:ae:1a:81:
9e:f1:1f:e6:fe:ab:16:34:87:c9:d7:15:b8:d3:e6:
03:16:28:49:13:77:e9:2e:ce:51:26:68:35:2d:58:
ee:a7:2f:75:ab:92:02:45:f8:ef:c0:eb:65:ae:43:
8e:c4:af:78:0f:b8:14:59:d2:e2:5f:a8:ea:4f:b9:
dc:21:1d:d9:fa:86:6d:8a:a4:fd:b1:59:dc:62:96:
5c:a8:bc:e5:04:22:a5:fd:57:b1:77:3b:e3:63:e3:
2d:38:49:ed:48:f3:36:7a:70:2b:c3:42:bc:1a:2f:
ef:d4:f5:b0:d1:12:8e:a7:bf:39:6e:5e:30:98:4a:
cb:19:00:17:f2:d2:91:95:77:bc:4a:53:25:22:1c:
b5:4f:9a:75:ac:f3:4d:37:57:a3:4f:49:d0:ce:5e:
8b:f3:72:d8:1e:72:fb:4d:c9:f8:db:c1:8f:cf:87:
e3:e9:54:42:00:b2:5b:78:a0:e4:b6:87:27:16:5a:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:48:C7:8C:8A:6B:1D:66:EF:A1:38:14:A0:62:C8:DF:80:3D:BE:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:79:7e:6f:9a:c6:1f:11:31:de:36:4b:43:95:af:8c:d1:a8:
1c:42:e3:11:86:91:1b:2b:b3:cd:9b:81:7f:34:be:57:ba:bd:
34:8e:8d:96:37:98:87:6d:84:f7:d3:7c:68:0d:5b:95:b7:f2:
28:51:20:7b:1a:62:a0:44:1a:a7:89:37:ae:8b:54:26:ab:32:
dc:60:57:31:4a:6e:b7:36:fa:52:3c:29:c8:47:d8:ce:7e:49:
3d:9b:29:02:11:20:bd:1b:1d:6d:86:34:11:2a:37:a2:64:1a:
6f:d3:de:a2:54:5a:cd:b0:49:e3:69:3b:9b:b9:a7:83:ac:c9:
e6:f2:f3:1e:ab:1d:54:8b:dc:16:cc:31:91:b4:ee:9b:77:73:
35:a3:19:23:51:b1:64:78:23:10:8b:f8:d4:75:d1:0f:ff:b4:
30:45:4c:5f:ea:dd:f0:33:cb:5a:18:5e:45:63:83:f6:09:a4:
55:0d:9d:5c:01:08:08:77:32:79:7e:c2:7a:d6:cf:2d:33:05:
c9:01:2d:26:b6:1b:ca:45:03:ab:15:65:dc:9e:80:1e:4f:59:
ef:8b:3b:20:a5:75:5e:ba:8c:04:97:63:a0:e1:7a:92:f5:f4:
28:99:76:b5:06:9b:71:c5:bd:27:cf:a2:9b:07:c1:a2:d3:5a:
82:9a:a5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:41 2026 by rpki-client