
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/174403f0-940c-3d24-a816-e387a0ad0af7.roa
File: 174403f0-940c-3d24-a816-e387a0ad0af7.roa (raw, json)
Hash identifier: EAjsdYoq9yqAhnHCjsenMfNvV0tt6Izt134zpvsogc8=
Subject key identifier: 09:FD:1C:40:15:60:B9:BC:77:D6:6B:F2:AA:7F:19:C3:D8:6F:27:BD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A9798DCCD45FAEEAE6580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/174403f0-940c-3d24-a816-e387a0ad0af7.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 72.4.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:97:98:dc:cd:45:fa:ee:ae:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=9e5274f1-4eb7-4ac6-a010-51a189cd271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:e0:44:50:e8:74:73:60:d6:b9:de:18:23:
52:e7:bb:98:c5:0c:e7:b1:b4:0d:74:d2:8e:0d:e5:
98:68:ce:11:76:6f:06:63:20:e3:86:d2:cd:3f:de:
1a:7f:e4:fd:d1:0a:bf:24:59:3d:0d:f3:da:83:9c:
ee:43:22:24:73:b4:32:12:c3:71:74:0a:09:ec:37:
3a:69:52:7c:5b:f0:74:4a:88:dc:a9:ab:2a:10:03:
b8:79:39:15:5a:3d:e2:4b:6f:38:2a:2a:b7:39:94:
f4:77:22:4e:55:7b:55:71:66:66:4d:24:e3:58:dd:
3c:fd:4c:9c:8f:d8:38:16:9e:4b:93:81:31:f3:4f:
26:3d:78:c7:7c:bf:f0:e5:70:a6:ed:d8:29:9f:3f:
0c:c2:e4:2a:82:04:8b:bd:62:af:aa:a8:7d:a1:47:
29:fd:cd:38:f7:93:d4:32:5e:d4:fb:77:9d:43:f1:
30:e8:60:74:5b:7e:31:18:f0:d4:12:46:ab:e4:95:
0a:19:85:f6:e7:36:7d:df:bd:06:d7:2d:66:b6:ad:
07:61:09:1a:04:50:c5:87:ec:06:f8:ca:52:56:9a:
92:af:53:54:14:d5:19:34:91:66:5a:0f:0a:70:5e:
d2:ef:11:dc:06:1e:03:0f:67:f0:9b:21:75:0d:c6:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FD:1C:40:15:60:B9:BC:77:D6:6B:F2:AA:7F:19:C3:D8:6F:27:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/174403f0-940c-3d24-a816-e387a0ad0af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.4.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:cc:0e:c7:ca:8b:48:05:24:37:b9:96:38:b4:23:a3:14:65:
a7:05:35:2b:e1:48:80:bc:18:bd:9b:64:c1:90:ef:fa:4b:b4:
74:80:bd:3e:1b:9f:2a:d6:30:35:7e:a2:cc:45:06:7f:ea:a8:
27:d3:f6:72:77:24:1e:3c:32:f6:5b:3c:78:0a:93:83:98:86:
7f:c4:6d:30:ae:0e:ed:79:3d:c9:82:57:ca:e3:81:87:96:14:
43:e6:14:1d:30:7c:91:43:71:d4:7c:8b:31:3e:ef:7d:ab:00:
44:bb:2c:0a:68:32:99:c8:d9:74:c2:1d:c9:25:a8:b7:81:48:
2d:97:af:d6:27:d7:ac:36:43:b1:ae:63:03:ff:58:49:18:ff:
58:ff:a7:eb:eb:24:0b:1d:63:bb:c8:60:19:a4:33:a3:43:16:
5f:53:e1:3d:3d:43:d1:01:e9:30:f8:23:07:ed:b6:85:f0:fa:
97:14:93:d4:2b:68:bc:cb:cf:51:24:d6:d9:50:67:30:ad:ad:
0a:5d:61:be:e1:9a:de:73:c9:e1:e5:bc:53:c1:bb:75:3e:a1:
f0:04:b5:6c:78:18:f8:9b:5b:69:00:8a:8a:8e:17:90:e5:b2:
04:69:b8:8c:a0:19:85:06:a7:27:31:f6:e0:8c:08:60:fa:aa:
d4:a0:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:38 2026 by rpki-client