
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/249bc53d-04d5-3427-90f8-608ba044c35a.roa
File: 249bc53d-04d5-3427-90f8-608ba044c35a.roa (raw, json)
Hash identifier: HPvru/59CE8Q2hBm4whaMSaYpFFZ8MOjjRrNBwqtf0s=
Subject key identifier: 49:41:76:A4:1A:A5:50:45:FF:18:97:73:52:22:DE:1C:70:52:5C:C3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D2A74C12729B2178498205340
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/249bc53d-04d5-3427-90f8-608ba044c35a.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 75.89.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:c1:27:29:b2:17:84:98:20:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=7ba93e2d-1f02-445c-9393-afa04c6e4c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:b9:31:5e:3c:1d:1a:c5:b4:33:2e:ef:2e:
45:48:dd:e6:72:8d:f4:91:a6:5d:6a:87:2c:5c:fc:
63:35:ba:14:24:a0:b1:fa:25:6e:09:1f:ec:a3:f2:
07:a3:3d:9b:56:ab:f2:2b:dd:07:be:29:58:14:05:
b8:67:de:7a:5b:c1:24:25:b2:a9:17:ce:31:b9:e2:
59:84:e6:1e:ae:80:88:10:7d:51:a0:9b:d4:0b:6e:
61:1d:6b:9b:d2:d1:03:e7:9c:df:3d:3b:82:0d:a5:
a2:0f:f8:45:16:d8:08:79:dd:6b:b3:d2:1a:d7:50:
52:35:d0:d0:79:12:f3:13:5b:d6:14:c2:e4:1f:df:
43:ef:cb:f3:df:ec:73:33:7a:7e:9a:21:de:89:66:
3e:ea:2f:74:9d:c4:f2:b0:63:2a:f6:c3:cf:df:4e:
4c:76:20:08:e8:44:6b:8f:d8:78:4a:d5:80:76:19:
33:9a:5e:9c:78:20:55:31:78:32:d8:36:d2:42:41:
12:32:65:76:86:0d:b8:ad:9b:8a:cb:c9:9e:6c:7b:
75:91:bd:1f:10:eb:d2:74:dd:b4:63:7e:65:89:19:
a2:81:db:55:e8:31:52:4d:5c:3f:57:7e:5c:00:ec:
52:77:a4:f6:1a:6c:78:6d:0b:bb:59:35:dd:4f:a0:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:76:A4:1A:A5:50:45:FF:18:97:73:52:22:DE:1C:70:52:5C:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/249bc53d-04d5-3427-90f8-608ba044c35a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:76:86:b5:1f:07:f3:af:53:9c:e5:11:fa:50:20:c0:34:a2:
8d:30:01:3f:9c:99:b1:ff:a0:a5:58:51:e4:de:86:f4:7a:44:
40:75:bb:53:72:8a:0e:5c:5f:8d:e5:4e:e2:aa:11:85:7a:01:
76:5d:cf:99:8a:6b:c3:dd:1d:44:80:d7:4d:40:06:c6:c2:1b:
fd:a3:cf:ab:48:6b:3d:39:16:b8:f7:41:35:0b:a2:69:de:15:
e6:6b:1d:d2:e7:6d:9b:0d:f4:9f:7c:7f:a5:75:c7:d2:60:e9:
63:67:c0:6c:ac:f9:e2:cf:17:cd:8a:e3:af:e1:56:36:be:56:
01:aa:af:bf:df:ab:f7:dc:6a:f8:01:7a:84:95:a8:a3:49:70:
b0:c9:14:fc:cb:bc:e9:1e:fb:16:f7:d1:63:59:95:44:d5:3a:
50:fc:2e:85:8d:2c:1a:d0:93:12:b1:4c:88:a8:e6:9a:bf:01:
b9:60:2b:ea:8a:7a:fe:f7:e9:bb:18:3c:85:cd:2a:b1:3d:82:
59:30:35:1e:c4:69:aa:c5:1c:e4:08:60:48:a4:a5:a1:1b:9c:
8c:6a:ef:0f:3d:59:39:13:d9:48:be:e9:e9:24:fb:b7:4c:d2:
76:5e:e3:14:ad:69:8a:61:47:22:e9:27:6b:42:1b:c8:70:af:
ba:87:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:47 2026 by rpki-client