
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa
File: 56588bee-0151-3526-84ef-5faf988bdba3.roa (raw, json)
Hash identifier: d5lPRK1AeGN0BFQqBGba/q7+ZTYuJCjRuhnRJsl+IxM=
Subject key identifier: ED:B4:63:EF:20:0F:33:17:24:E3:06:48:68:0E:96:53:B4:F4:FE:B9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D3E000B61B08B770F37C13880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 7029
IP address blocks: 67.214.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:0b:61:b0:8b:77:0f:37:c1:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=744616c4-40ce-40ca-a3d1-6ff36de493bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:eb:72:b2:6a:b0:4d:fc:c6:28:9e:7b:60:
fc:77:1e:a3:a8:48:16:c3:dc:59:27:5e:ab:90:05:
7d:a7:91:96:6c:48:58:1c:0b:33:9e:e1:7a:6e:4c:
8a:55:64:83:a2:cd:e8:f5:02:6a:83:9b:37:89:19:
4d:c8:f5:8c:8f:78:2b:74:3d:ca:d1:7e:80:c6:7d:
88:61:b6:61:30:18:79:b6:90:7e:ba:f0:54:bf:37:
44:1a:6c:bc:c2:20:8a:e4:24:d7:10:b2:b2:d3:1f:
2e:d2:25:77:f0:75:33:f9:8f:6b:d4:5d:73:69:a1:
f3:b7:49:d8:ab:60:9c:a9:d2:45:51:ef:a5:ff:c2:
95:b3:71:2b:e0:9b:77:e2:c4:01:22:8c:cd:bc:b7:
e4:7b:9a:1f:96:bf:68:18:a9:52:5a:4e:28:d4:31:
f8:58:ab:a2:30:99:ac:cd:0e:94:1b:82:c0:13:6b:
43:f5:57:39:27:4a:b1:cd:a8:7e:2a:0c:7c:a5:d8:
37:03:b3:58:c4:d5:91:c2:6f:a3:20:d0:0f:90:c2:
76:ca:fe:ac:6f:e4:95:5b:a9:87:99:0b:1b:95:4e:
c6:28:95:2f:94:f7:2d:ea:54:e4:5c:36:26:cd:c2:
e8:3c:ea:e1:21:ee:2b:71:64:1f:15:6a:69:81:fd:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:63:EF:20:0F:33:17:24:E3:06:48:68:0E:96:53:B4:F4:FE:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:55:80:4c:e1:fc:29:5d:cd:ec:7c:8e:6e:26:74:56:ec:e1:
8a:29:52:96:3a:10:38:6d:ad:10:55:e2:fb:84:52:24:25:06:
cf:b6:70:46:5d:e7:49:df:28:66:41:e2:b8:0c:26:cc:bd:42:
bf:e5:1f:ba:48:d6:c7:e2:98:e1:c1:72:88:b4:52:2d:a0:f0:
64:22:03:1a:88:58:bd:0c:2f:e6:d2:b6:98:b6:de:02:43:19:
e1:d7:b0:a0:a1:26:ec:60:77:82:e4:b5:6b:aa:a5:5c:d4:4c:
cc:12:0c:ea:66:a8:b7:3a:c0:ae:1d:70:1f:b2:27:52:73:7c:
40:81:38:0e:8e:b0:72:f5:cb:3a:fe:b8:c2:57:a5:97:90:51:
c7:18:3c:60:85:c3:10:5a:bf:18:36:32:68:0a:7c:81:34:a0:
3c:a4:1e:0c:e2:48:c3:e5:68:b9:cb:ab:5a:5d:6a:99:28:59:
95:75:aa:78:14:cc:8a:54:7a:27:6a:4b:f0:09:65:aa:ea:d8:
a4:fc:2d:f8:f0:d1:36:1e:a5:17:cf:11:df:20:7a:e5:81:3c:
25:3c:b0:2c:b8:07:2a:82:b5:86:f7:10:61:12:81:7e:3e:bf:
c3:6a:f5:44:71:52:3e:58:79:57:a2:24:24:e7:c1:ee:8c:85:
7a:59:05:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAthsIt3DzfBOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NzQ0NjE2YzQtNDBjZS00MGNhLWEzZDEtNmZmMzZkZTQ5M2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNLrcrJqsE38xiiee2D8dx6jqEgWw9xZJ16r
kAV9p5GWbEhYHAsznuF6bkyKVWSDos3o9QJqg5s3iRlNyPWMj3grdD3K0X6Axn2I
YbZhMBh5tpB+uvBUvzdEGmy8wiCK5CTXELKy0x8u0iV38HUz+Y9r1F1zaaHzt0nY
q2CcqdJFUe+l/8KVs3Er4Jt34sQBIozNvLfke5oflr9oGKlSWk4o1DH4WKuiMJms
zQ6UG4LAE2tD9Vc5J0qxzah+Kgx8pdg3A7NYxNWRwm+jINAPkMJ2yv6sb+SVW6mH
mQsblU7GKJUvlPct6lTkXDYmzcLoPOrhIe4rcWQfFWppgf2cnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO20Y+8gDzMXJOMGSGgOllO09P65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY1ODhiZWUtMDE1MS0z
NTI2LTg0ZWYtNWZhZjk4OGJkYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9YQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxVgEzh/Cldzex8jm4mdFbs4YopUpY6EDhtrRBV4vuEUiQlBs+2cEZd
50nfKGZB4rgMJsy9Qr/lH7pI1sfimOHBcoi0Ui2g8GQiAxqIWL0ML+bStpi23gJD
GeHXsKChJuxgd4LktWuqpVzUTMwSDOpmqLc6wK4dcB+yJ1JzfECBOA6OsHL1yzr+
uMJXpZeQUccYPGCFwxBavxg2MmgKfIE0oDykHgziSMPlaLnLq1pdapkoWZV1qngU
zIpUeidqS/AJZarq2KT8Lfjw0TYepRfPEd8geuWBPCU8sCy4ByqCtYb3EGESgX4+
v8Nq9URxUj5YeVeiJCTnwe6MhXpZBbw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:18:39 2026 by rpki-client