
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa
File: 3a5e724c-cda9-381f-a608-217725a36708.roa (raw, json)
Hash identifier: 1hE5tEKxlkVrDPgoSAkSKTGtQGXuha0v07YQokqO+LQ=
Subject key identifier: D9:DB:47:B1:68:C6:21:45:05:16:6A:69:3E:5B:E4:CE:3D:56:49:C7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D8C2AAD7B7E4D234D1777A000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa
Signing time: Sat 18 Apr 2026 13:00:30 +0000
ROA not before: Sat 18 Apr 2026 13:00:30 +0000
ROA not after: Fri 17 Jul 2026 13:00:30 +0000
asID: 7029
IP address blocks: 173.185.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8c:2a:ad:7b:7e:4d:23:4d:17:77:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 18 13:00:30 2026 GMT
Not After : Jul 17 13:00:30 2026 GMT
Subject: CN=1ac201c7-b87c-4a75-b745-b09f297898e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:a0:e3:3f:45:6c:38:a7:c5:31:9b:24:d4:
cd:64:38:12:38:e2:b7:23:8c:cf:05:c1:11:02:c7:
15:ca:75:ba:a2:da:86:be:cf:d6:7d:4b:62:0e:c1:
ec:b9:d7:cc:95:a7:80:cf:d5:46:c2:b9:fb:0b:81:
31:d5:7d:9f:55:f2:84:a4:07:5e:c0:1b:b0:d9:22:
e0:94:42:f1:78:af:a9:b9:9f:0b:99:3f:83:46:f5:
5a:a5:03:ff:44:ef:57:c4:c3:dd:d5:97:ec:6a:d1:
75:e9:89:77:59:e1:0c:9a:5e:37:ff:be:ec:52:43:
bf:76:a4:de:13:39:90:b2:ba:53:b9:82:bb:4d:52:
05:7e:d0:3e:cc:24:ce:5a:e8:48:af:12:2f:d6:be:
a3:0c:f3:e7:07:f2:e2:a3:16:78:76:8a:8c:22:bc:
18:08:51:44:71:14:86:9e:84:ce:6c:1c:15:03:a0:
e9:6d:85:3e:db:2a:81:92:01:b7:25:fb:cf:63:0c:
86:b2:7c:da:35:4d:0f:fb:1e:3e:77:0f:35:38:9f:
78:b4:48:82:bd:13:bb:a4:c4:55:08:26:5b:89:1c:
c7:9d:5a:af:dd:76:91:ac:5c:e2:1e:da:d5:a7:d8:
00:b7:62:44:0b:a5:e7:eb:72:dc:ab:64:1b:d0:d6:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DB:47:B1:68:C6:21:45:05:16:6A:69:3E:5B:E4:CE:3D:56:49:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b3:1a:d4:fe:0b:c8:09:81:8b:b2:3f:15:3d:73:a8:a8:0e:
a3:74:cf:d6:92:f9:38:4c:16:99:18:7c:e6:a0:a5:7b:66:53:
d6:26:de:ae:f2:2f:cf:72:b2:f1:3a:d4:81:4e:32:93:65:c2:
ea:ca:d1:88:6a:22:15:0e:5c:af:e0:56:bf:94:10:64:45:6a:
9a:85:5f:2e:1d:c8:76:45:20:af:3a:0e:3f:42:cb:b1:22:f1:
f5:fc:9e:cd:c0:6a:8b:80:ce:7c:75:6d:72:c8:ae:0c:06:ba:
6f:9e:7a:73:87:0e:5e:2e:a3:06:de:79:c0:9a:03:16:09:7e:
0a:66:58:71:9d:5a:74:6e:77:f6:d7:01:cc:09:7b:63:1d:48:
59:c4:3e:cb:02:0f:5c:a3:9c:1d:97:05:71:0f:2a:5b:32:fe:
87:43:d9:6a:ef:33:be:fd:f6:ea:00:40:e2:e5:5a:c5:87:39:
e8:dd:e4:d7:b0:60:b7:4e:7b:58:1b:10:76:ad:0f:f4:a5:12:
81:10:40:6a:0e:f3:a1:df:30:c6:1d:e5:7b:5c:ef:7f:dd:9b:
12:23:46:3a:7a:85:63:c9:53:d6:b2:2d:54:37:8d:28:3a:99:
d8:16:d9:b0:f6:b6:95:dc:4a:f5:1b:d0:df:35:58:37:95:bf:
94:d6:91:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:43 2026 by rpki-client