
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa
File: 4c7661b5-4727-3944-9cf3-442581b9861b.roa (raw, json)
Hash identifier: Kz58q6zOQTwrUy3vuQbkC605yMwtXL1Wq1LWDk+IUM8=
Subject key identifier: F0:2A:77:CB:2C:FC:B6:A2:51:BE:9F:12:07:E2:71:1B:10:01:13:1B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A670F5CFC99CE5F4DABC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 40.138.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:67:0f:5c:fc:99:ce:5f:4d:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=389afd82-44f4-4e80-8a61-0b46b6a0fc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:58:39:84:1f:e8:70:5c:2b:6d:71:63:f6:
d9:16:5f:4b:33:94:ce:bb:de:87:18:9f:90:76:8d:
fd:85:de:be:b8:59:e8:5e:df:68:93:4c:f9:6f:f0:
13:d0:d2:72:29:93:67:cb:80:5f:36:ab:28:26:fa:
6f:87:a6:7c:9a:0a:f5:b9:7d:bd:12:44:bd:c8:27:
45:85:8f:30:87:29:fd:2e:ab:31:46:dd:0e:7f:b9:
9f:de:d7:56:29:46:84:06:12:8b:b0:73:89:aa:e4:
31:3f:ee:5b:ba:9c:0b:30:29:c6:40:0b:eb:2f:c9:
f1:5e:5d:d1:00:bd:41:2b:8e:8d:f9:c7:e8:b9:e0:
e5:39:fb:a4:5f:63:97:ad:a6:2f:e6:8e:63:32:37:
16:6f:ff:40:68:9b:57:1c:0b:8d:e3:b4:26:2c:6a:
33:8d:e0:f8:83:0a:2a:b8:94:e1:08:35:9e:ba:c2:
f0:e9:b2:59:cf:32:15:fb:d2:33:45:18:35:70:d0:
c0:c0:36:1d:57:c3:8a:4d:0d:0d:4c:a7:61:27:1b:
d7:8c:8e:69:5f:f1:5b:cf:20:88:9e:03:f6:18:e2:
38:18:f4:b1:58:3f:cb:21:54:51:81:67:4b:7f:58:
b2:ea:eb:28:b3:d2:04:21:50:ff:db:d2:d0:23:2d:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2A:77:CB:2C:FC:B6:A2:51:BE:9F:12:07:E2:71:1B:10:01:13:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.138.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a3:21:09:a5:44:24:71:6c:88:63:9b:e2:6a:1b:e0:a9:c7:
d4:12:a4:d7:e1:8a:b4:a8:2a:60:35:85:d8:9e:92:8d:53:57:
8b:06:ba:3d:c0:b7:9d:e3:c0:7a:1f:04:73:64:3e:80:7f:e5:
0f:c6:6a:35:74:54:d2:f1:0c:ef:ad:ac:98:41:01:75:fc:9e:
59:83:f2:69:ac:46:2c:c1:c3:c1:8a:53:6e:12:4d:ee:7e:8d:
fc:a4:46:98:5d:5b:5c:e2:48:18:d5:29:ab:bb:1f:99:63:b5:
50:7c:18:f0:6c:e9:2a:08:c1:82:e7:87:ae:7e:76:a4:b1:40:
81:93:31:4e:95:c9:4d:bf:e3:75:82:fb:2d:eb:75:d9:d6:f9:
1c:9a:2a:c4:fd:b5:f6:37:b5:6a:3e:50:49:8a:8f:cc:cf:a8:
66:bf:7a:a8:57:10:76:f3:8e:70:e5:10:d7:14:63:b1:fe:91:
87:2c:e2:f8:e2:e2:1d:05:03:98:22:41:e7:25:c9:73:44:47:
02:85:e9:74:de:8e:aa:94:f5:1c:4e:4c:16:5f:0e:23:1b:cf:
a5:6c:99:fd:d0:da:aa:ef:fa:bd:42:bb:15:9b:28:67:00:d1:
bc:63:d6:9d:91:71:83:17:87:5a:8f:54:e9:5d:56:7d:67:46:
28:40:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:03 2026 by rpki-client