
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a05be-9f80-37ee-b112-7421c9a338ef.roa
File: 241a05be-9f80-37ee-b112-7421c9a338ef.roa (raw, json)
Hash identifier: ZsZTbN15OJNczwMJazhJoPxceXOGFEIjYTRPbfe3Lgw=
Subject key identifier: 9A:93:C6:E5:D7:21:88:2B:C6:08:CA:E5:EB:83:26:5D:9C:D7:A9:FF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D386A5213CEB4C63D774591D8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a05be-9f80-37ee-b112-7421c9a338ef.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 7029
IP address blocks: 72.16.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:52:13:ce:b4:c6:3d:77:45:91:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=3f3fe6dc-420d-45ae-8a0e-70acb61ea3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:82:a8:d0:7b:0a:d5:23:28:7f:59:07:51:
36:0b:0b:29:6b:15:04:f3:51:bd:ee:7c:20:38:8c:
7f:61:52:f2:b5:17:6c:85:11:69:22:76:49:fc:58:
c9:5f:95:ea:8e:2a:be:b7:9c:cf:e4:a0:9f:7a:c4:
c6:1c:07:65:69:58:2a:d0:74:ab:e8:0a:96:30:8c:
e3:e6:75:2c:28:37:2f:6b:eb:91:e2:60:16:b9:06:
01:1c:ad:ed:41:4c:ca:6a:25:3f:7d:f9:97:49:1b:
eb:d1:98:1e:db:93:54:06:85:67:61:ee:49:24:5a:
a9:0a:33:09:a1:20:de:dd:08:d6:12:fa:21:84:c3:
ca:3c:1b:f8:ff:22:6b:da:dc:63:2d:41:f3:d7:6e:
52:4c:99:93:64:22:1f:c6:f4:a1:21:0d:9a:f4:72:
f7:ec:68:42:cf:cf:69:f0:3a:10:fa:73:9e:c0:6a:
c4:bd:27:75:39:d6:ec:42:39:04:bf:69:ca:89:37:
56:04:c8:11:dc:ca:03:7c:9a:6a:5a:e6:47:ae:ba:
f2:1d:81:e7:b1:5c:25:86:b6:8e:74:de:30:55:d1:
6c:7a:e0:ea:00:e4:45:b2:77:64:df:0a:09:be:dc:
a9:c9:bf:12:94:de:2f:46:70:81:d6:b3:ce:b6:27:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:93:C6:E5:D7:21:88:2B:C6:08:CA:E5:EB:83:26:5D:9C:D7:A9:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a05be-9f80-37ee-b112-7421c9a338ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.16.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:4a:1d:9a:d7:bf:da:36:94:54:b6:37:9c:81:c2:9a:1f:7b:
17:79:6c:04:50:ea:9a:f6:d9:32:92:a9:de:91:6b:92:16:26:
d5:bd:92:b8:48:7a:ed:23:56:fc:68:90:a3:c5:1c:de:57:f0:
ca:a5:de:6b:ad:63:74:0c:54:74:df:0b:b0:ff:be:67:35:18:
bf:0b:fa:03:05:c2:11:fa:c9:b7:e1:21:8c:3b:52:1d:0c:aa:
f3:ad:89:00:ad:3e:44:1e:0a:13:89:74:6a:75:45:b1:f5:31:
e2:e4:e8:87:db:9f:7c:33:13:0d:08:b2:43:76:a7:ee:e0:16:
39:06:d0:5b:4a:d6:25:7f:eb:b9:02:6a:5b:b7:dd:d5:32:b9:
eb:e6:d2:f3:ce:e4:37:22:0f:2c:8b:25:80:e0:9b:35:31:d4:
2b:f1:66:2e:9a:7c:9c:72:07:c7:ae:75:87:c6:50:3f:ba:e3:
24:b3:d3:ce:23:24:e3:a5:d3:c0:77:ad:76:dc:46:7b:5b:c9:
29:83:1d:17:9b:2f:af:eb:ea:c5:70:63:c8:8e:3d:7a:39:db:
10:9a:7d:ae:c4:8d:a9:68:8a:fa:7a:54:4e:ed:ce:ea:c7:03:
0e:cb:e7:0c:06:e3:d9:04:a3:e9:0d:c3:6e:4a:f8:60:f6:9f:
e5:f7:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:14 2026 by rpki-client