
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa
File: 2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa (raw, json)
Hash identifier: 4G3k4A+SH28xMbtS1QKf+GUVHNCe0OaGTbnXZRj3q1c=
Subject key identifier: 29:0D:7F:B3:00:40:D1:2A:04:71:3D:18:06:D6:83:B3:56:1D:78:27
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D386A5545D5F395B00014181A
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 7029
IP address blocks: 75.90.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:55:45:d5:f3:95:b0:00:14:18:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=d3ac02bb-7565-4b01-83c8-bbbb7fc1dcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:be:2f:74:bc:93:fa:99:c0:ba:52:8e:1c:
c2:b5:66:ca:9e:07:6b:e3:60:ae:57:f0:f2:aa:0a:
9f:a0:8e:5c:37:c6:49:94:9e:fc:c2:a2:a3:68:bb:
ec:0c:db:06:b9:ed:83:4b:d5:ee:fe:b7:f3:09:d7:
21:ad:b4:43:87:ff:40:5b:d5:1c:4e:52:eb:0b:39:
92:37:f6:3b:c9:1f:4a:01:9d:fd:1d:c0:8c:07:1c:
31:c4:60:74:5c:9b:ae:70:60:ed:4d:ad:d4:5a:84:
14:9c:57:d3:b2:17:02:58:9c:e7:2f:06:75:b6:cc:
c0:c7:8f:c7:b5:b2:d9:5a:a5:ac:8e:62:66:2b:56:
ba:b8:b1:2d:85:75:66:58:1a:3d:5e:01:49:15:0c:
db:84:a9:b9:51:36:1e:da:52:b0:2b:31:5c:e4:2b:
d7:35:ba:c6:98:d1:a3:f5:00:67:fa:18:3a:ab:b4:
6c:bf:28:76:8d:46:3c:2a:dd:d4:39:a8:8f:a5:23:
42:c6:a6:78:4d:50:1c:a8:e1:09:1f:e3:02:c2:5a:
96:cc:0b:70:6e:59:7c:04:46:97:ca:d1:c9:4c:11:
b7:ee:8b:f1:31:49:db:00:cb:12:25:19:41:9e:f8:
77:c6:ee:b5:97:5c:7d:5a:02:c2:6a:bd:f0:1e:77:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:7F:B3:00:40:D1:2A:04:71:3D:18:06:D6:83:B3:56:1D:78:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.90.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:76:0c:3f:8e:06:d3:2c:20:52:93:79:fe:12:cf:76:c5:5a:
96:b6:a7:62:a3:4b:d0:1a:81:75:52:14:bc:ed:0e:b6:8e:67:
31:7c:80:76:fc:21:71:4c:1e:eb:f1:16:07:95:0d:4d:61:39:
3b:2c:35:86:a3:00:f4:c8:3e:8d:c2:67:3d:a6:46:11:5d:73:
86:97:6f:7b:63:38:67:b0:df:19:dc:65:d2:6b:5f:a0:df:5f:
e4:df:7a:25:e1:92:c9:65:bf:a5:f3:90:35:23:89:d7:33:fd:
fe:a7:4f:d1:70:ab:db:c8:62:93:a7:a4:98:99:3a:b9:c1:cb:
cf:c9:4b:09:c4:18:42:ea:df:3e:97:2e:dc:cb:55:3c:a9:3a:
d9:4a:55:66:01:06:d7:ef:af:8a:37:0c:96:ee:9d:bf:e3:74:
81:b8:8e:f2:b4:7d:d0:93:db:2d:b6:d3:89:a9:ae:98:c0:4f:
57:a2:8b:0d:00:25:c9:44:a0:83:0e:0f:12:de:7d:c2:85:77:
af:58:ee:ed:e5:05:70:b5:6f:10:8a:e9:94:57:fe:38:e6:9d:
cc:c4:bd:2c:cc:b4:25:54:fe:80:66:50:46:fc:4b:06:52:4c:
10:4b:47:f1:3d:a5:5f:4b:c0:96:9d:99:1a:44:8e:b1:e1:57:
25:1c:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:12 2026 by rpki-client