
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26fc12ff-2991-3ce1-b711-697bdca04b9c.roa
File: 26fc12ff-2991-3ce1-b711-697bdca04b9c.roa (raw, json)
Hash identifier: Mr2857CdFF8b3oHSZGz3CxV0BBl+RCYPlQgnOXSZc3A=
Subject key identifier: B5:C1:F9:FD:FB:3B:D3:67:B7:A9:6D:2F:14:25:C6:D1:5B:2C:5D:5D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A9EB87EBA3D6CCC23B080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26fc12ff-2991-3ce1-b711-697bdca04b9c.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 209.125.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:9e:b8:7e:ba:3d:6c:cc:23:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=fcb150f3-d082-46ec-9b7f-20807b5ce14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:82:72:00:44:31:93:19:7b:aa:b3:c7:c9:13:
9a:44:a8:ae:0a:b5:dd:fb:b9:69:3f:4a:21:d8:5a:
8e:8b:53:4b:2c:e9:5c:fc:18:c4:17:2c:65:c9:43:
8d:47:a7:a6:f3:3f:dd:34:19:ba:71:f7:d3:a7:ff:
09:62:d7:06:ed:d3:98:e3:2c:4f:0c:1e:a8:e3:f4:
e2:5a:d2:55:74:98:7c:08:21:3f:93:c1:46:d6:f1:
47:7f:42:30:0e:ae:99:0c:e8:e7:63:2a:65:5e:2d:
73:8d:17:a1:79:0e:be:87:91:de:ef:b0:20:fc:d1:
98:2f:91:b4:53:02:7d:51:82:c0:8a:8e:a5:3a:ab:
f2:26:24:da:f5:ab:8c:11:7b:64:55:3f:bc:da:43:
bb:38:af:2c:31:60:35:e1:7d:2d:d6:81:f4:be:b3:
b3:41:79:b8:ed:05:6d:79:f4:0f:89:e7:b8:de:a1:
fa:eb:fd:49:f7:9f:72:09:43:32:f5:58:87:ab:6a:
83:8b:ed:39:26:02:7e:8d:b5:ea:71:38:79:1f:02:
6d:c4:cf:a9:ea:4e:93:22:9d:c2:36:6b:29:5b:dd:
78:cb:0e:25:aa:ff:6e:b4:14:9c:7e:43:a3:db:40:
75:e1:25:06:09:ea:14:51:82:c9:43:04:21:10:51:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:F9:FD:FB:3B:D3:67:B7:A9:6D:2F:14:25:C6:D1:5B:2C:5D:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26fc12ff-2991-3ce1-b711-697bdca04b9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e4:c1:76:d4:d6:d3:8f:61:46:77:6d:48:5b:c4:c5:ce:cd:
bc:04:07:e3:93:8e:f1:a8:47:38:f6:59:39:1a:95:35:42:5b:
c0:dc:42:0d:b6:62:bc:f6:05:74:91:77:76:49:ce:03:86:84:
12:4f:49:7c:a6:6d:4c:d1:53:52:a3:2d:d0:1e:b2:3b:af:61:
92:90:d9:67:7a:e8:8f:05:1b:7e:a2:1f:90:ac:da:2f:c7:3d:
1c:f3:59:49:ee:25:78:34:58:43:87:94:cc:52:17:00:5d:17:
e9:09:94:32:c0:37:6e:a2:6c:e2:a1:dc:82:f9:b8:6d:76:9a:
9b:ea:5b:b0:95:20:b3:80:f6:f7:e8:e8:48:2e:01:18:18:6e:
cc:f0:f8:5f:23:71:73:b7:9e:5d:07:8a:f0:af:71:37:81:18:
92:2f:ca:df:c9:45:2f:4c:83:9a:b0:4f:c1:5a:c8:39:0a:d2:
a6:b6:88:c2:6d:22:58:61:3d:9e:22:c0:19:77:f1:09:b0:e0:
9a:05:0e:8f:97:d4:89:d3:c3:d0:e0:56:aa:02:aa:3a:e2:45:
16:c4:b8:be:b7:b5:b3:c1:a7:05:bd:8e:3f:80:18:f4:f2:15:
29:10:81:ca:d2:d4:ef:94:d0:70:ac:96:53:f7:5a:9b:9f:99:
96:5a:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:42 2026 by rpki-client