
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa
File: 1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa (raw, json)
Hash identifier: ZffHzjPBABaG2b489kW93sbrP29fERABMSKRaFseBGM=
Subject key identifier: BE:19:6B:B9:83:62:AC:34:85:7F:F7:1F:3C:BF:4F:82:C9:9C:E8:9F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F549D9011468C73E87191FB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 69.66.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:90:11:46:8c:73:e8:71:91:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=d97602b4-2be9-4674-9e04-0a259afa8255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:51:65:07:ba:35:c3:56:1f:5a:48:da:5e:
86:dd:4d:80:11:7d:8d:5e:a5:fd:f1:a8:d4:25:10:
2e:65:d1:f0:32:db:50:49:75:5e:0a:9b:9c:70:22:
b6:bc:ca:25:c8:e3:35:19:b5:64:6e:07:11:9b:65:
c4:94:7c:6d:40:dc:f3:87:c0:ba:a7:c9:ee:25:e4:
be:f0:26:ec:a4:35:2a:e0:07:12:85:e6:b2:fa:c7:
cf:d2:99:5a:81:15:24:59:97:de:da:5f:69:6d:ee:
22:7f:48:f6:52:3b:7c:c2:cb:c0:34:3c:92:43:80:
2d:b2:89:ce:ea:c1:0b:81:b2:a9:20:e8:4d:be:8a:
b9:97:22:d4:3c:d2:c1:bb:e3:f3:98:8b:65:c5:7a:
f4:89:79:70:a8:17:0f:00:ad:70:71:ca:01:0d:05:
da:ba:f1:9c:56:cc:6b:56:5b:77:95:61:18:06:cd:
81:d8:1d:1b:6c:52:ee:a8:20:b1:7a:a3:e8:60:ec:
5a:9e:03:ae:80:fe:be:99:f2:45:9a:57:3d:8f:ac:
f5:24:37:55:48:de:ef:dd:5b:41:8c:ba:03:f4:43:
3d:45:5f:de:ac:dd:df:6b:2f:c4:ed:60:05:df:3b:
06:07:94:0e:2d:fd:15:24:14:51:e4:86:9c:17:29:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:6B:B9:83:62:AC:34:85:7F:F7:1F:3C:BF:4F:82:C9:9C:E8:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ceee3f0-7105-3e6a-bec7-78fa1f4d7b59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:16:7a:96:e3:60:dd:d8:52:51:37:de:d0:cb:56:f8:d1:b4:
7e:26:b6:0a:e3:11:00:1b:f7:ea:ba:21:fd:16:e3:dc:73:4c:
c1:06:47:67:ee:41:0f:96:eb:d1:a9:5e:b9:13:f2:e3:0c:0d:
ac:0e:89:ba:12:32:5e:e6:2b:32:63:c7:ed:ed:62:54:c2:6b:
92:c1:ae:5d:90:e6:31:60:b5:6a:0c:a8:36:72:28:58:9b:8b:
c0:e9:b4:ef:98:7a:d0:2b:c0:e9:f2:9f:a6:07:29:47:4e:0d:
eb:92:67:5b:87:19:2d:e1:d5:5c:9c:1f:9f:10:a2:ae:fd:04:
4c:41:e8:4d:c5:02:36:5e:4c:46:59:51:99:65:f6:5d:9e:4c:
6e:62:2b:50:9f:4e:b7:05:6e:f3:34:88:08:09:19:fa:64:2c:
17:4d:d2:9b:54:3a:9f:03:d1:77:e6:ba:15:77:81:24:ec:8e:
56:41:9c:20:97:a0:fa:2d:96:b9:b1:05:38:f1:95:50:28:b6:
73:15:47:61:75:1c:59:b1:6f:5f:c0:b2:70:5a:da:99:45:68:
5f:53:0a:52:bf:3c:3a:6e:3a:82:97:a4:5e:85:b3:c4:0d:3f:
fe:76:b2:75:0a:94:14:74:c3:18:22:3e:54:a4:bc:95:9d:31:
0b:9b:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:37:38 2026 by rpki-client