
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa
File: 549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa (raw, json)
Hash identifier: umNjmaGFrUeE5+qXw7gUfCN2kcbRYuXnuN/T84jHT6Y=
Subject key identifier: 97:77:40:7F:E4:62:BD:7A:07:60:67:47:B0:89:C0:A1:00:95:A0:BF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F51D2B79B760C32F7C835B800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 75.91.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:b7:9b:76:0c:32:f7:c8:35:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=6b755d89-6ca7-4465-bb26-ece3628b040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:64:ac:bf:75:a9:73:d3:3b:8e:1d:94:1a:
46:a9:b7:f1:8a:51:30:a9:8e:7c:86:76:d3:2b:e3:
a5:a8:1d:81:85:44:22:77:d6:62:de:5f:1b:ba:9b:
2e:19:b3:8b:7f:73:15:3c:1d:1d:cb:17:df:63:3b:
12:e9:bb:ee:28:76:0d:21:72:19:a7:04:c7:00:74:
aa:f2:d7:2e:23:7b:af:ef:ae:5d:f1:55:0a:46:60:
cc:69:9e:d5:7d:2d:32:b9:df:50:4a:fd:76:fd:94:
f6:8e:6b:b8:a0:dd:19:23:b9:e7:44:72:b5:48:87:
b0:2e:71:19:ce:42:d4:ae:11:11:d0:71:57:c6:1f:
5b:d3:ca:74:78:29:b5:16:da:b4:3b:46:d4:67:b0:
d8:3e:0a:2d:80:b1:bb:f5:73:f7:7f:27:99:cf:a7:
e2:17:49:33:39:66:25:54:de:2c:ef:b6:a6:1e:de:
09:aa:ee:7c:da:e2:7d:ce:48:9c:fa:f6:03:5a:c5:
b7:cb:6e:90:00:fb:81:b3:01:8c:56:6c:93:cd:2d:
ec:0e:2c:b7:59:48:ac:6c:31:55:4f:0b:67:82:f8:
6b:56:c5:7e:86:46:cb:a5:ca:ef:3d:f4:a6:02:79:
bb:cf:b1:7d:68:8f:a9:2c:f9:80:f2:c0:65:9c:60:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:40:7F:E4:62:BD:7A:07:60:67:47:B0:89:C0:A1:00:95:A0:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:aa:cf:c7:8f:13:0e:55:5f:4c:b8:07:06:6c:73:16:42:67:
2b:1b:09:b4:48:a2:01:9d:f2:21:97:77:ba:0c:47:39:a4:4a:
07:ff:67:84:e2:60:72:e0:5f:47:c2:e7:6a:2f:37:f2:32:b5:
2d:c4:3c:2f:a6:d3:cb:6c:b7:66:99:4c:95:fb:55:da:95:b4:
93:6e:f9:19:e6:1c:80:48:a7:dc:6a:7c:b7:94:1d:da:66:33:
42:a4:d9:64:ac:19:f6:cf:c7:67:28:f6:56:d8:2f:90:06:a1:
39:7f:cd:97:e7:52:6c:d1:87:2f:26:22:fb:6c:1d:36:ea:ae:
38:e5:d6:db:28:91:d6:37:e1:55:eb:1a:f1:00:ab:fc:c7:c3:
9a:17:43:11:ea:1b:16:eb:c4:71:5b:f8:a4:86:b6:d0:20:9b:
94:fe:d9:21:71:a7:da:44:31:1b:08:de:70:9c:27:54:6c:98:
db:68:c0:1e:e4:51:14:97:b7:29:c8:8f:3d:24:24:88:18:df:
a1:86:52:0c:7e:03:6c:1c:9c:3d:c5:29:f0:31:f0:36:03:3c:
f1:da:b5:79:4d:8f:30:90:24:8f:f3:f1:56:43:19:08:7f:fb:
b2:93:03:f3:78:17:85:a4:e8:0d:87:70:a1:36:eb:60:0c:9b:
5b:79:b1:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rebdgwy98g1uAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
NmI3NTVkODktNmNhNy00NDY1LWJiMjYtZWNlMzYyOGIwNDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDRkrL91qXPTO44dlBpGqbfxilEwqY58hnbT
K+OlqB2BhUQid9Zi3l8bupsuGbOLf3MVPB0dyxffYzsS6bvuKHYNIXIZpwTHAHSq
8tcuI3uv765d8VUKRmDMaZ7VfS0yud9QSv12/ZT2jmu4oN0ZI7nnRHK1SIewLnEZ
zkLUrhER0HFXxh9b08p0eCm1Ftq0O0bUZ7DYPgotgLG79XP3fyeZz6fiF0kzOWYl
VN4s77amHt4Jqu582uJ9zkic+vYDWsW3y26QAPuBswGMVmyTzS3sDiy3WUisbDFV
TwtngvhrVsV+hkbLpcrvPfSmAnm7z7F9aI+pLPmA8sBlnGAfywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJd3QH/kYr16B2BnR7CJwKEAlaC/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ5ZDc0ZTMtZjYyNS0z
ZWYzLTk2YmUtNWE2YmZmN2JiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1uUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeqz8ePEw5VX0y4BwZscxZCZysbCbRIogGd8iGXd7oMRzmkSgf/Z4Ti
YHLgX0fC52ovN/IytS3EPC+m08tst2aZTJX7VdqVtJNu+RnmHIBIp9xqfLeUHdpm
M0Kk2WSsGfbPx2co9lbYL5AGoTl/zZfnUmzRhy8mIvtsHTbqrjjl1tsokdY34VXr
GvEAq/zHw5oXQxHqGxbrxHFb+KSGttAgm5T+2SFxp9pEMRsI3nCcJ1RsmNtowB7k
URSXtynIjz0kJIgY36GGUgx+A2wcnD3FKfAx8DYDPPHatXlNjzCQJI/z8VZDGQh/
+7KTA/N4F4Wk6A2HcKE262AMm1t5sYk=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:31:38 2026 by rpki-client