
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa
File: 4f247c08-da54-303e-bd38-05ed013d791a.roa (raw, json)
Hash identifier: mPzMgA2tapmW/EfVS+EFbS87q/NwoQ7S8uEcfRnw2Ac=
Subject key identifier: D4:6F:A5:33:34:B6:A0:0B:7A:0C:1D:A3:A6:72:51:E4:A2:85:70:F2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E7E94E1C19A87AEF065472000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 7029
IP address blocks: 71.30.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:e1:c1:9a:87:ae:f0:65:47:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=b0e864c7-6776-4db0-9168-e00e04783f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:cb:d3:13:f7:88:ac:19:74:2e:dc:be:cb:
7c:d3:7c:2b:39:2d:01:c9:78:b3:c7:35:db:10:87:
76:11:e3:60:8e:ad:03:f7:96:6c:6c:7b:ef:f3:53:
a9:a8:7d:c4:80:fd:b7:bc:69:72:a3:41:07:cc:46:
4f:3f:5e:b5:0f:53:7b:c8:fa:29:80:de:10:63:fd:
32:df:d1:e0:2f:1d:02:48:d1:e7:94:68:8c:47:fa:
1d:f1:c0:55:17:dd:ef:5d:40:3b:af:8b:e3:46:08:
d4:3e:a2:5b:af:43:fc:ae:12:91:b0:c8:bb:63:2d:
f6:1b:20:dc:94:52:d9:1f:fb:66:3d:d7:91:bf:92:
ac:2b:b6:52:43:d1:3b:d9:d7:c4:19:28:17:85:5f:
9d:28:f1:cc:c3:3a:d3:1e:3a:b3:80:0e:83:0f:37:
38:69:a5:08:0f:ae:9b:b7:93:73:98:83:4f:e2:f2:
65:31:67:cf:75:b9:ff:39:b8:3a:75:c4:61:83:34:
77:b0:54:0a:91:39:0d:c3:07:ea:64:45:6b:a8:94:
9c:df:54:c4:7c:90:b7:09:cd:15:8d:93:cb:81:86:
f6:d0:90:50:67:cf:27:25:60:95:67:a4:64:21:8f:
71:b8:6d:82:b6:3e:00:b6:1e:f9:1a:7a:f7:61:10:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6F:A5:33:34:B6:A0:0B:7A:0C:1D:A3:A6:72:51:E4:A2:85:70:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:92:e8:f3:90:30:71:5a:10:13:18:a6:fe:83:fb:34:e4:70:
9d:52:af:17:6a:df:e4:4d:60:19:ba:bb:fc:98:1c:54:4a:52:
a4:01:d8:ab:a8:52:07:1e:14:d0:66:17:15:51:49:56:d9:c7:
33:99:88:09:b5:4b:8d:5f:c2:38:ee:13:4a:7e:31:bb:40:cf:
dd:c8:07:17:d6:a7:c9:04:0a:a4:45:60:f1:17:ee:c0:5f:14:
49:31:df:8d:46:bb:14:26:3c:c3:09:a1:ec:c0:b3:80:ba:a5:
1f:2b:c8:b6:a0:b8:7b:58:89:c0:48:9a:8d:d4:69:9c:ab:8e:
5a:13:eb:a9:55:fe:24:16:bd:69:38:03:54:5d:fe:4c:73:7e:
f6:b0:3f:f1:3a:63:23:66:8a:b4:84:b7:ef:cb:75:09:f3:f5:
4a:21:d3:3b:91:b3:58:59:c6:55:67:4e:86:7a:a1:a1:76:03:
a1:3c:45:6a:17:ae:e8:d1:21:2e:9c:c1:4f:f0:01:b8:2a:bd:
b6:bc:0c:11:a6:c9:72:7a:08:55:fe:9b:49:10:e6:59:db:1c:
82:03:89:ec:55:47:09:8d:9f:27:ae:9d:8b:77:95:03:29:b5:
56:5f:34:ef:cd:cb:94:81:86:70:11:90:03:d6:58:fb:03:bb:
f7:8b:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:06 2026 by rpki-client