
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa
File: 15be2d45-d867-3d76-b5bf-f422f8eab30f.roa (raw, json)
Hash identifier: w1Kmv3rdmCUTViAu4y98VO3DXVoM5mowP8m6MdeSPQA=
Subject key identifier: 54:B3:2A:51:EA:83:99:B7:6D:91:8D:D6:9F:09:33:70:A8:68:33:53
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300AA10538824A27AA8AF080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 2604:cb00:32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:a1:05:38:82:4a:27:aa:8a:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=2b4fe20c-6fa5-4865-a76c-20436742a270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:c5:23:e5:94:fb:90:b2:cf:8a:ff:08:a0:
fc:e4:ed:11:60:e2:03:07:52:c0:63:2a:ee:82:ae:
ba:69:4d:dc:32:f5:86:0c:15:3d:06:9b:60:c2:e8:
b6:c5:9a:5b:6c:b4:d6:6e:26:3a:b8:8b:1e:0e:2e:
8b:4b:03:e1:9d:b2:e6:8d:b0:10:8b:fd:6f:01:09:
47:b2:40:22:05:38:e8:87:0e:5f:98:68:65:17:e4:
a3:14:69:54:0c:12:67:5c:c1:5a:0d:a7:4c:29:ee:
16:1f:b0:a7:3a:0c:10:6a:d7:d3:18:67:d4:f3:f5:
e1:ad:36:aa:e8:56:6f:dd:31:7e:01:ea:e0:d9:28:
fc:17:17:3f:72:8d:62:87:7c:aa:2a:12:de:c1:cb:
79:15:73:84:fe:33:9b:a8:a5:fd:33:92:c8:04:c8:
c7:5c:dc:41:7a:5e:7a:63:fb:96:3f:25:b6:14:fc:
92:ce:e9:54:46:07:cf:f0:f1:57:ff:a8:0f:a0:fe:
f5:88:d2:95:06:8b:95:6e:85:66:fb:4f:27:b5:23:
c9:6d:36:be:ba:25:b8:67:5c:5a:b2:5f:53:32:e0:
02:a0:a9:45:a6:89:99:60:45:b9:88:d0:0f:de:c1:
83:4d:e9:51:10:a0:13:a7:55:5d:3c:5d:59:17:2e:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B3:2A:51:EA:83:99:B7:6D:91:8D:D6:9F:09:33:70:A8:68:33:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:32::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:f4:4c:24:d4:08:2f:18:18:d0:06:eb:43:36:5e:d6:32:5e:
3c:9f:4c:17:61:62:63:8f:bd:b1:94:5d:48:f3:ef:e3:32:b3:
5d:ec:aa:56:5f:64:63:5c:f6:6b:84:74:d4:68:c1:39:1a:d2:
56:72:d2:7a:f9:32:9e:d1:46:4e:6f:66:66:7e:23:a5:f6:b6:
94:90:df:e4:d4:1a:b1:0b:56:5b:87:c5:c3:26:97:c2:bc:e1:
23:1b:90:ac:62:20:67:81:e0:72:3c:73:39:10:23:cb:cf:c4:
ff:b9:b2:33:44:98:82:fa:b2:4e:4f:ea:ae:37:24:0a:60:ce:
85:44:1f:76:1a:3c:76:34:af:33:0e:2b:32:6b:24:46:f0:99:
b7:7e:b7:b6:5f:9d:e6:35:ce:5c:e6:f1:0e:f6:5e:f5:ef:fb:
3b:4c:46:09:8c:80:84:75:9c:13:25:9d:db:79:7c:41:1c:42:
be:32:37:d4:e4:73:dd:e9:9b:3e:57:3c:77:8b:5c:8b:8b:c5:
6a:e0:c8:15:e6:fe:4a:f1:8e:a9:92:1b:68:29:e5:3b:02:ce:
61:b1:cb:e3:1a:f5:f5:9f:7f:bb:1b:79:6d:91:af:39:df:53:
b8:41:86:95:e3:0c:7c:f9:d1:e4:88:43:1e:18:f4:15:4c:96:
31:93:f0:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqEFOIJKJ6qK8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
MmI0ZmUyMGMtNmZhNS00ODY1LWE3NmMtMjA0MzY3NDJhMjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKzFI+WU+5Cyz4r/CKD85O0RYOIDB1LAYyru
gq66aU3cMvWGDBU9Bptgwui2xZpbbLTWbiY6uIseDi6LSwPhnbLmjbAQi/1vAQlH
skAiBTjohw5fmGhlF+SjFGlUDBJnXMFaDadMKe4WH7CnOgwQatfTGGfU8/XhrTaq
6FZv3TF+Aerg2Sj8Fxc/co1ih3yqKhLewct5FXOE/jObqKX9M5LIBMjHXNxBel56
Y/uWPyW2FPySzulURgfP8PFX/6gPoP71iNKVBouVboVm+08ntSPJbTa+uiW4Z1xa
sl9TMuACoKlFpomZYEW5iNAP3sGDTelREKATp1VdPF1ZFy44twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFSzKlHqg5m3bZGN1p8JM3CoaDNTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTViZTJkNDUtZDg2Ny0z
ZDc2LWI1YmYtZjQyMmY4ZWFiMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAv0TCTUCC8YGNAG60M2XtYyXjyfTBdhYmOPvbGUXUjz7+Mys13s
qlZfZGNc9muEdNRowTka0lZy0nr5Mp7RRk5vZmZ+I6X2tpSQ3+TUGrELVluHxcMm
l8K84SMbkKxiIGeB4HI8czkQI8vPxP+5sjNEmIL6sk5P6q43JApgzoVEH3YaPHY0
rzMOKzJrJEbwmbd+t7ZfneY1zlzm8Q72XvXv+ztMRgmMgIR1nBMlndt5fEEcQr4y
N9Tkc93pmz5XPHeLXIuLxWrgyBXm/krxjqmSG2gp5TsCzmGxy+Ma9fWff7sbeW2R
rznfU7hBhpXjDHz50eSIQx4Y9BVMljGT8Gg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:31 2026 by rpki-client