
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa
File: 5012a183-6945-305b-9c9c-de9ba51406f9.roa (raw, json)
Hash identifier: XUR9xiPVZxLE+4Ttq0RsqD3mHSSzkalcCTDt/Hif/6s=
Subject key identifier: 0C:AC:29:F1:FE:DA:78:55:3D:E2:F6:77:20:72:15:DE:96:4B:42:F2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DB4A58BD61D8A7B4C2FA76640
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa
Signing time: Sun 03 May 2026 01:00:23 +0000
ROA not before: Sun 03 May 2026 01:00:23 +0000
ROA not after: Sat 01 Aug 2026 01:00:23 +0000
asID: 7029
IP address blocks: 209.253.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b4:a5:8b:d6:1d:8a:7b:4c:2f:a7:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 3 01:00:23 2026 GMT
Not After : Aug 1 01:00:23 2026 GMT
Subject: CN=873ede87-3d1e-46cf-bc1b-670bd6dc1e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:c6:9f:6a:fc:2b:5c:98:2d:d3:89:c6:f7:
d9:27:e9:0d:1b:cc:67:cf:84:f1:dc:ac:9c:b8:bc:
71:56:b0:94:98:3d:94:d1:3d:53:30:c3:0c:48:cd:
c2:6c:65:30:a7:e2:dc:e5:c2:8a:67:e2:8c:ec:1a:
dd:c2:a0:51:c3:5d:5d:39:de:31:91:c7:d7:8c:62:
fa:d1:c2:8f:7c:e0:9c:4f:9f:dc:aa:4c:cc:8e:30:
99:78:11:e3:c2:fc:21:52:e1:3d:08:27:5f:df:15:
0b:2d:22:54:11:13:19:76:9b:21:dc:ac:6b:38:b8:
60:aa:eb:af:5f:8e:17:a9:46:02:72:b2:91:70:2e:
c3:1d:10:56:03:ed:97:37:f0:60:d9:f2:7f:14:f4:
38:f8:4c:09:ae:9f:bd:ee:35:5a:1d:b3:f3:e6:9f:
3c:66:2e:a6:76:58:ac:07:fe:cb:14:5e:c5:4d:45:
24:81:0b:9f:33:65:bb:c0:8e:50:73:0a:a7:7e:55:
14:6b:11:ab:81:3d:55:85:39:5b:be:54:1b:52:6b:
34:80:47:57:03:ba:3a:d0:9f:2b:25:c9:c5:ec:36:
a9:99:59:dc:db:16:48:a9:b2:30:76:cf:88:71:2a:
ca:72:50:ee:ac:fe:dc:1e:ee:b8:1d:39:be:b6:df:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:29:F1:FE:DA:78:55:3D:E2:F6:77:20:72:15:DE:96:4B:42:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.253.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b5:50:88:12:56:89:4e:56:02:88:1d:65:ed:09:f2:0f:ae:
63:2d:15:7f:0e:da:bc:45:2a:2e:c4:11:81:ba:62:0e:bb:ef:
64:6c:dd:1a:ee:ee:00:b9:1b:2e:28:30:39:e9:5f:89:96:b4:
ac:19:ad:27:92:66:3b:47:f4:94:a5:50:ef:dd:e0:40:bd:57:
11:67:41:8c:a3:62:18:75:77:34:b0:1b:8f:e6:f1:fe:73:81:
c3:03:d9:5a:ec:bd:fc:55:3e:f7:7c:bf:65:01:86:7e:f7:14:
34:43:f3:19:f0:cb:11:7e:0b:04:53:80:cf:fa:eb:54:8d:40:
97:10:5a:ce:a1:98:6a:72:9d:e6:47:da:36:db:fb:d8:d5:27:
00:a9:e4:8b:47:e0:45:7d:d4:06:02:60:e7:77:76:84:dd:82:
b8:e6:0b:8d:93:21:1d:04:bd:22:f4:f6:ba:8c:16:a0:f2:b0:
5a:8c:9f:29:82:78:63:f1:45:a3:17:81:8d:3f:cf:02:a2:5d:
bc:d9:3d:6d:36:09:0d:6c:e2:24:98:62:2d:69:a1:a2:36:c8:
04:b3:b0:38:85:c7:3b:08:43:51:d7:bf:85:33:3f:9a:d1:8d:
ec:04:a9:09:d8:5f:5d:f2:6f:44:e9:7c:9f:17:08:0f:4d:35:
86:48:da:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYvWHYp7TC+nZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
ODczZWRlODctM2QxZS00NmNmLWJjMWItNjcwYmQ2ZGMxZTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBvGn2r8K1yYLdOJxvfZJ+kNG8xnz4Tx3Kyc
uLxxVrCUmD2U0T1TMMMMSM3CbGUwp+Lc5cKKZ+KM7BrdwqBRw11dOd4xkcfXjGL6
0cKPfOCcT5/cqkzMjjCZeBHjwvwhUuE9CCdf3xULLSJUERMZdpsh3KxrOLhgquuv
X44XqUYCcrKRcC7DHRBWA+2XN/Bg2fJ/FPQ4+EwJrp+97jVaHbPz5p88Zi6mdlis
B/7LFF7FTUUkgQufM2W7wI5QcwqnflUUaxGrgT1VhTlbvlQbUms0gEdXA7o60J8r
JcnF7DapmVnc2xZIqbIwds+IcSrKclDurP7cHu64HTm+tt/t7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAysKfH+2nhVPeL2dyByFd6WS0LyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTAxMmExODMtNjk0NS0z
MDViLTljOWMtZGU5YmE1MTQwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHu1UIgSVolOVgKIHWXtCfIPrmMtFX8O2rxFKi7EEYG6Yg6772Rs3Rru
7gC5Gy4oMDnpX4mWtKwZrSeSZjtH9JSlUO/d4EC9VxFnQYyjYhh1dzSwG4/m8f5z
gcMD2VrsvfxVPvd8v2UBhn73FDRD8xnwyxF+CwRTgM/661SNQJcQWs6hmGpyneZH
2jbb+9jVJwCp5ItH4EV91AYCYOd3doTdgrjmC42TIR0EvSL09rqMFqDysFqMnymC
eGPxRaMXgY0/zwKiXbzZPW02CQ1s4iSYYi1poaI2yASzsDiFxzsIQ1HXv4UzP5rR
jewEqQnYX13yb0TpfJ8XCA9NNYZI2ug=
-----END CERTIFICATE-----
Generated at Wed May 13 11:26:14 2026 by rpki-client