
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa
File: 53f53f3e-52d0-3160-85a6-218a002fc7d3.roa (raw, json)
Hash identifier: iss6BQDSVbw2fDm498CJDwMa24CGgcWlI9VmxzFg9d8=
Subject key identifier: 1E:6B:49:0A:04:AA:ED:82:85:87:CA:EE:DA:F4:80:CC:8B:48:0C:4E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A777FAF383FABD2AFD280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 166.102.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:77:7f:af:38:3f:ab:d2:af:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=c161269f-1d20-49d7-9e80-458393bd5753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:95:27:9d:5d:f1:85:5a:e4:cf:b5:29:34:
b2:5c:88:04:7b:19:4e:ce:64:d0:35:b4:75:92:96:
e0:58:0d:e7:93:cc:1d:d1:49:05:0b:93:a8:4f:53:
a1:6b:d8:4a:1e:07:59:f1:79:6e:80:b3:1c:3c:aa:
85:f6:d0:25:c5:2b:75:51:d6:b6:61:e8:c1:e8:0a:
1a:28:9b:4c:74:44:39:cd:db:a1:88:fe:87:86:ef:
bc:81:01:34:da:41:02:0a:30:a6:74:f6:ed:89:4d:
71:da:1d:ee:c7:4f:67:10:cd:53:0b:0a:35:99:f2:
ea:f8:1f:f3:71:2a:30:2c:55:91:d5:f4:f0:98:f0:
e3:ae:a3:d7:e2:c4:f6:28:86:7b:c1:01:db:15:79:
2b:4c:c3:8a:58:6b:f9:9c:ca:ad:e0:e8:b5:7a:58:
86:17:0e:07:48:00:eb:40:6d:1c:38:62:b0:64:c7:
26:1b:e0:b9:ff:3a:c2:1d:6e:96:c8:49:ba:b4:b5:
b7:56:5e:1d:f4:b7:7e:7c:0e:bd:4c:4f:49:8a:95:
5b:b9:bc:31:1d:44:02:98:0b:0d:d6:a9:90:97:85:
83:87:c8:41:91:cc:6a:c6:ef:cb:de:d7:c3:fd:66:
54:b3:97:d8:be:12:84:57:bc:06:39:c3:f0:bb:d6:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:49:0A:04:AA:ED:82:85:87:CA:EE:DA:F4:80:CC:8B:48:0C:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
166.102.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:2e:4a:3f:ff:a6:bb:63:b2:52:08:02:45:47:5c:3a:b3:5e:
c4:20:e6:e4:8e:e0:3e:29:c7:99:ad:00:48:18:b5:51:f2:b5:
df:2a:83:ad:0a:4a:9b:85:94:47:f0:d5:23:f6:16:af:4e:83:
76:f0:18:de:0a:15:65:f3:ea:5a:c3:5a:15:5f:7a:2c:eb:f4:
db:ab:15:60:e8:01:1c:71:b9:be:55:c3:34:77:c2:3f:55:ec:
b3:a9:f0:1d:9b:09:1c:5e:85:19:0b:ac:67:a1:2f:0d:8c:b6:
3a:49:7b:30:a0:62:f9:92:7f:00:4b:93:e0:5d:f7:d8:a9:7e:
74:b7:52:7b:50:81:fe:62:53:b1:af:b1:84:b3:67:41:32:d3:
1a:7b:01:06:df:8e:4e:2f:2c:d7:9a:3c:8c:50:65:54:36:9d:
99:bc:06:0e:b2:2b:8d:23:ba:98:a5:8a:bb:aa:21:0a:ce:df:
a6:0d:dd:a4:03:67:e5:4f:f6:dc:18:6d:ed:09:9b:b7:0f:56:
35:4b:01:53:d1:54:7a:7d:3b:64:f3:32:df:8c:43:21:14:cc:
ae:70:d2:f2:80:4b:ea:a0:79:df:83:29:0e:a0:8f:da:41:00:
a5:d3:56:57:d1:7d:e0:c0:ad:64:b6:14:d5:4b:6f:81:09:70:
e7:66:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:31 2026 by rpki-client