
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa
File: 4dbd7895-f3ba-3d0d-b188-30de2693e387.roa (raw, json)
Hash identifier: kSXUAzF/JsMEha3BO1DagmvFCX3IiF9w0828c6AbFZM=
Subject key identifier: D8:4B:06:24:F7:B9:37:08:A3:9D:3E:82:9C:0D:3A:20:16:57:E0:79
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F2EED28F40EF0FA7A89390D08
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa
Signing time: Tue 15 Sep 2026 13:00:12 +0000
ROA not before: Tue 15 Sep 2026 13:00:12 +0000
ROA not after: Mon 14 Dec 2026 14:00:12 +0000
asID: 7029
IP address blocks: 50.96.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2e:ed:28:f4:0e:f0:fa:7a:89:39:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 15 13:00:12 2026 GMT
Not After : Dec 14 14:00:12 2026 GMT
Subject: CN=20eb5308-4801-43da-8864-f2324e3c72de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:89:91:05:52:01:ce:3b:07:b9:f0:41:ae:
eb:c8:4b:51:9e:2b:07:32:82:cb:bf:72:0c:f7:39:
4b:dc:c5:bc:1a:e9:fd:6d:d9:48:62:bf:8b:db:54:
69:8f:7c:20:d2:1e:a5:7d:9a:33:b1:42:b9:9a:01:
20:66:ed:cf:53:1d:82:c7:a6:14:13:c9:91:f7:fa:
b0:84:21:a2:34:56:41:ac:7a:c2:55:e0:11:f9:e7:
45:3f:9f:31:b1:cd:5b:a2:68:d6:49:62:22:d7:78:
a6:ca:de:ba:d0:ec:20:5b:a6:3c:f2:6d:04:47:08:
0e:ef:3c:24:72:a2:0f:c4:0f:80:91:85:57:49:fd:
1a:7d:70:c6:7f:68:2d:24:41:97:f7:65:dc:a6:71:
e3:b2:e6:f6:8d:90:81:de:ee:3a:cf:0d:a2:d0:f5:
d2:dc:66:f1:70:33:34:1f:05:50:35:d2:40:af:51:
98:de:19:30:e8:fa:18:1a:b1:6c:33:68:ef:cf:05:
46:62:7a:1f:83:1e:2b:b1:45:b2:e3:a7:97:35:85:
f6:b5:08:0d:77:1b:74:be:07:e4:e4:14:ad:19:3c:
6a:fc:c8:11:4c:46:93:84:20:bf:37:50:83:91:bf:
4a:6b:01:25:6b:30:dd:84:d5:c2:13:df:57:8f:5a:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:06:24:F7:B9:37:08:A3:9D:3E:82:9C:0D:3A:20:16:57:E0:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2f:e9:d8:35:e8:2a:68:69:9b:25:d1:24:0b:6c:ed:d9:ec:
ec:38:04:26:f9:bd:4a:52:3f:e1:77:73:22:5f:1c:e3:2f:22:
2e:6b:03:51:7e:2a:b6:18:54:8a:9f:66:2d:eb:26:bf:c8:69:
08:f5:b7:3e:99:e7:bb:9a:4f:0b:88:6f:5f:c5:8f:44:e0:de:
db:bb:ed:33:fd:a5:57:2d:c3:05:33:5d:81:e9:4d:9c:db:b9:
75:20:70:e1:71:91:62:55:1e:de:68:aa:0f:23:87:6b:d1:4b:
47:e7:88:e2:6d:62:4c:9a:66:6d:03:71:c3:31:7a:2a:13:65:
4e:eb:91:97:db:73:4c:1b:19:94:f4:b8:17:75:e8:65:46:84:
8f:53:e4:e8:76:39:19:64:12:0a:f5:ac:8c:ed:99:35:6c:f8:
99:ad:e5:f3:e8:9b:e8:15:76:bf:6e:b9:d6:79:2d:d6:f9:d4:
57:90:14:ad:6b:6c:e3:b5:64:68:7b:a0:4d:35:cc:0f:16:89:
35:f7:c4:b0:3f:2c:ab:66:96:37:2f:90:27:aa:fd:1b:77:0c:
b8:97:dc:42:f1:00:b0:a1:86:af:9d:d7:ea:ba:98:0a:fa:56:
42:a0:1a:93:aa:70:e6:ba:1e:b7:e3:8b:70:a1:df:28:03:32:
0f:41:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:04:46 2026 by rpki-client