
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa
File: 39c23487-b420-379f-91d9-56c821c0182c.roa (raw, json)
Hash identifier: d8QigEHba11JO7rKHsc/SujKon/Tdvlpsxh97JSg9gQ=
Subject key identifier: 0F:82:8C:D3:34:C0:98:5C:AC:14:D7:4A:51:F2:92:F0:81:44:CA:FC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F549D900559F2ACC708422F40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 69.66.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:90:05:59:f2:ac:c7:08:42:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=a1d3d5d1-500e-4b7a-b83b-ff40b47729a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:7e:b3:52:cc:79:01:a1:85:f8:72:9b:67:
7a:ac:8b:a3:c3:85:d0:57:1c:0b:f1:88:1d:44:87:
76:12:80:38:bc:ee:7c:91:9d:13:13:29:87:74:67:
13:6f:1b:f4:5b:a7:2e:be:53:47:5b:e4:5a:59:f6:
0c:33:f6:f6:de:98:33:73:b0:57:a1:08:50:e4:a9:
43:5b:5f:cf:5e:53:d7:7d:10:8e:6f:74:f9:8c:56:
48:8e:cf:94:dd:cb:1d:8a:c0:ec:52:23:b5:85:1d:
3d:73:92:18:73:7b:d6:0c:cb:41:61:86:30:07:7f:
f4:36:b5:6b:51:45:dc:3c:88:ea:fd:40:8c:13:ad:
54:17:5e:a6:25:8b:f8:8f:8b:1b:5d:3a:83:ab:a0:
fa:ab:c5:d4:0c:15:c5:50:c8:3d:98:65:d4:d1:fe:
56:9f:77:f2:5a:b8:a6:f4:19:58:fb:89:af:f1:9d:
14:88:c2:8b:44:d9:a2:92:0b:7b:18:eb:ea:a5:47:
ce:f9:e0:b4:11:8a:f3:02:c9:f1:e2:c5:bf:91:81:
2e:ab:ee:96:a0:9f:f2:93:0d:4f:a0:1d:f0:4a:a1:
af:61:d2:73:60:e6:f0:ac:0a:c7:c7:58:81:37:60:
d1:a2:35:41:4b:df:bb:27:60:70:78:c2:d1:dc:ba:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:8C:D3:34:C0:98:5C:AC:14:D7:4A:51:F2:92:F0:81:44:CA:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:12:29:23:23:bd:ed:bf:f7:82:8b:d2:b9:e3:cb:21:6e:93:
68:0e:56:c0:41:28:81:03:5e:21:56:88:11:ac:0d:8a:4f:d9:
75:3a:50:ee:42:78:ca:ff:67:80:32:8e:cc:00:35:c6:f6:c1:
26:c3:a0:b6:8e:c7:94:79:0c:92:90:2e:54:e2:57:c2:2e:85:
13:4f:0b:7a:b4:39:22:64:c3:c1:69:c2:c5:02:bb:bd:1c:c0:
7a:a7:62:87:8b:7d:20:ba:6b:49:d9:8d:04:d5:6a:d3:15:22:
1c:12:64:c9:3d:31:ca:e8:14:31:7f:97:68:79:96:83:41:05:
ac:6d:5f:c7:39:46:73:f2:18:7c:9c:69:9d:24:6c:1a:23:00:
8e:89:c9:1e:96:7f:9b:57:58:de:5d:89:a3:f1:96:b3:d9:f9:
de:b5:fb:b5:1e:5a:6e:3e:11:e0:73:cd:ff:02:43:43:67:cf:
0e:de:b2:89:c7:26:0a:60:9e:40:21:8b:a2:d7:47:b6:1b:3f:
43:ea:78:be:fa:44:f3:9f:1b:18:be:1e:bf:4f:0f:1e:d3:a8:
47:2c:71:0a:d9:a8:c4:0a:88:22:2c:4c:14:a4:aa:8f:04:73:
c9:62:8a:f9:19:a9:37:49:bf:10:49:f1:81:34:9e:f5:32:4d:
3c:e7:4a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:29:15 2026 by rpki-client