
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/530f27f8-d2f1-361a-94d6-4e1543d243bb.roa
File: 530f27f8-d2f1-361a-94d6-4e1543d243bb.roa (raw, json)
Hash identifier: pnBthvbBltyHct6K4DR/W4ELjKHSVleJi206y3ucE/Q=
Subject key identifier: D3:39:17:CB:68:AE:CA:D1:07:FC:F4:D5:33:10:61:BB:AD:70:81:E6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A96047B126519BEC37700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/530f27f8-d2f1-361a-94d6-4e1543d243bb.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 66.152.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:96:04:7b:12:65:19:be:c3:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=c726a88a-f926-4e29-9ce4-6a83793f3bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:89:09:19:7c:a2:63:da:d7:40:f0:54:71:
dc:91:31:05:6f:c6:25:1e:60:cb:e4:05:aa:7b:c9:
2a:e4:2e:5c:54:5e:85:b9:8b:44:56:75:74:0c:f4:
68:3d:9c:2c:7d:7b:f3:19:13:51:7a:4f:c2:5e:eb:
5d:ab:40:c2:1c:5d:63:43:42:eb:e0:f5:60:52:fa:
45:2c:fe:0f:4d:8a:74:1e:b8:3a:7a:ab:c7:f1:da:
36:9e:88:fa:82:a2:14:27:11:b6:21:85:95:79:ed:
3f:62:9b:87:cd:39:21:b3:3a:5f:64:32:b8:8d:b1:
fe:15:5c:ff:e9:dc:dc:be:86:38:16:ad:6b:44:00:
b1:ec:8b:00:44:c5:84:24:99:53:d5:e1:c1:e7:a7:
f0:32:db:e6:02:db:32:09:17:dd:1c:08:05:57:de:
4a:65:93:37:02:18:16:b6:ea:06:2f:60:e9:6d:0d:
54:89:58:f8:f3:5b:d2:c3:f6:2a:21:43:0e:1f:60:
29:7a:38:65:8c:e2:90:47:d4:3e:7c:3b:b4:eb:d6:
e8:a2:3d:a0:93:dd:3b:0e:73:ee:ab:47:ee:7e:04:
e8:c9:39:cf:94:47:73:97:13:4e:76:a0:c0:9d:5f:
75:44:7e:8c:57:df:f4:a9:d9:97:4f:82:4a:26:9a:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:39:17:CB:68:AE:CA:D1:07:FC:F4:D5:33:10:61:BB:AD:70:81:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/530f27f8-d2f1-361a-94d6-4e1543d243bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.152.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b4:1b:21:6d:cf:c4:ae:6b:23:92:fa:2f:5d:18:85:90:9a:
02:4f:d1:65:6c:70:99:57:e2:3f:fb:bd:40:0c:bc:82:5e:cd:
67:fa:02:1e:a6:36:24:22:1f:95:54:e8:c0:6b:0c:54:cb:76:
89:bf:f4:9d:f8:60:3b:88:41:b8:98:73:26:96:4f:1b:97:9c:
f3:46:ca:14:d7:37:5a:e4:38:6a:72:b9:1e:37:9a:cc:bd:36:
7d:67:df:a8:7c:77:b8:8b:36:2d:5f:27:b6:90:c2:89:34:2a:
71:b8:be:e3:de:b6:af:29:b5:58:3c:55:fc:6f:2d:2c:2c:d3:
93:66:64:d0:82:2c:06:fb:0f:8f:48:b3:eb:c6:6a:ad:f4:88:
6b:80:68:ea:e7:9e:d8:3f:90:05:a6:05:b9:32:fe:69:7f:a3:
3f:4e:e6:18:1c:3f:a3:e7:e1:4e:e3:6c:a5:28:a0:31:19:48:
26:e8:2d:bc:78:70:d4:30:fb:c2:ef:bc:ec:90:ea:fe:82:92:
5d:c3:28:8b:6a:99:b2:98:1c:a6:b1:0f:d4:a1:3e:a0:8e:13:
9c:bc:bb:9c:5f:8b:eb:d5:82:3d:5a:d4:5f:a6:16:a5:66:cf:
f5:c0:7f:99:3c:24:73:a0:35:34:87:25:0d:6a:40:d3:0d:01:
d6:51:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:48 2026 by rpki-client