
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a6ddd52-096e-3e64-b97e-03bd79f69c0f.roa
File: 5a6ddd52-096e-3e64-b97e-03bd79f69c0f.roa (raw, json)
Hash identifier: y8y+Eohp7WRHOwN0eRr1nL5pJUzGKYOMu4KM41MMhFI=
Subject key identifier: B2:37:09:2D:61:9C:A6:19:B9:AA:38:7D:3B:02:57:D5:07:13:7B:4A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A9EFA11F319548A5C6740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a6ddd52-096e-3e64-b97e-03bd79f69c0f.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 216.97.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:9e:fa:11:f3:19:54:8a:5c:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=23b575f5-7704-43b9-abdb-9b96766eda7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:82:90:97:b2:e0:80:07:e6:50:93:6b:60:
21:40:e0:c4:56:23:35:77:86:8a:25:b2:9f:f4:de:
71:78:27:d3:be:48:fc:31:5b:05:c0:bf:12:f7:fb:
e8:be:1c:ec:70:a7:d2:2d:db:52:07:78:89:9f:93:
4b:e3:e4:e3:a3:3f:f3:d1:1d:c8:78:37:93:af:38:
65:48:6f:56:04:63:fb:7e:57:c2:76:9c:15:c5:51:
0a:c2:c6:44:70:b9:9f:35:d7:11:69:48:63:33:35:
4d:d7:b3:30:0f:95:9d:b4:f8:89:6e:1c:92:75:05:
60:52:5b:88:c4:bd:56:90:83:96:e9:fc:54:c5:19:
52:2e:c6:43:07:20:c3:5a:d7:12:19:4c:ec:3d:57:
92:ae:82:b1:0d:2b:0a:73:4f:28:04:a1:c3:83:19:
8c:9b:93:80:da:43:4b:e9:9f:d6:b3:10:6b:3f:aa:
c1:6c:82:1b:46:ef:3e:b9:6b:97:98:72:93:7e:8b:
f4:4c:45:52:07:da:20:ba:77:b4:82:d8:4e:75:86:
f0:4d:fe:48:b9:96:6d:4b:85:ae:1d:bf:46:58:47:
85:4d:cb:73:2a:6c:33:17:1c:d2:7a:e0:f1:88:26:
c4:a0:4f:79:1e:4e:a5:43:b7:d8:89:67:3e:73:e4:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:09:2D:61:9C:A6:19:B9:AA:38:7D:3B:02:57:D5:07:13:7B:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a6ddd52-096e-3e64-b97e-03bd79f69c0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.97.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:67:c5:5d:9f:ff:5c:23:43:84:2d:90:21:48:c8:20:8a:0b:
24:5c:81:64:01:fb:4d:30:f1:86:47:d5:0b:39:10:ab:e0:2d:
45:ab:56:8e:8f:00:21:16:9b:cb:6e:65:b4:6c:19:21:c5:38:
1c:1a:78:aa:16:3f:8b:ae:cf:cd:24:3b:bc:aa:1e:76:f9:14:
38:f8:c5:4a:9b:ea:34:d9:fc:df:35:c7:8c:60:97:2d:7f:3b:
3e:a0:66:32:62:ae:56:df:65:4d:fd:fd:d8:1c:31:79:29:78:
a1:bb:a5:b7:46:c3:bc:0a:68:61:4f:ce:7f:24:f5:34:c4:60:
9f:e0:8b:40:0f:b9:d0:97:c6:93:90:59:f1:a1:58:68:d2:62:
7f:2a:bf:ae:fc:23:cf:a9:04:4f:5b:2d:e6:c2:7e:5c:30:1c:
1a:12:f7:bf:6d:f0:12:bc:a4:8a:70:12:fa:ef:02:7b:db:16:
e5:63:a1:76:9f:39:ae:4c:55:68:8d:af:d7:cf:ff:f1:75:76:
ea:ce:11:de:46:c5:2a:0d:30:d2:a4:cd:a0:34:94:4d:1d:d2:
b0:ad:91:ea:d3:e1:cd:10:ca:68:c7:f9:09:3e:62:f4:5c:a5:
2e:2c:f3:3b:af:3e:ef:6c:eb:10:df:4f:3c:8e:5b:51:50:3c:
8b:f0:85:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp76EfMZVIpcZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
MjNiNTc1ZjUtNzcwNC00M2I5LWFiZGItOWI5Njc2NmVkYTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3KCkJey4IAH5lCTa2AhQODEViM1d4aKJbKf
9N5xeCfTvkj8MVsFwL8S9/vovhzscKfSLdtSB3iJn5NL4+Tjoz/z0R3IeDeTrzhl
SG9WBGP7flfCdpwVxVEKwsZEcLmfNdcRaUhjMzVN17MwD5WdtPiJbhySdQVgUluI
xL1WkIOW6fxUxRlSLsZDByDDWtcSGUzsPVeSroKxDSsKc08oBKHDgxmMm5OA2kNL
6Z/WsxBrP6rBbIIbRu8+uWuXmHKTfov0TEVSB9ogune0gthOdYbwTf5IuZZtS4Wu
Hb9GWEeFTctzKmwzFxzSeuDxiCbEoE95Hk6lQ7fYiWc+c+R11QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLI3CS1hnKYZuao4fTsCV9UHE3tKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWE2ZGRkNTItMDk2ZS0z
ZTY0LWI5N2UtMDNiZDc5ZjY5YzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERnxV2f/1wjQ4QtkCFIyCCKCyRcgWQB+00w8YZH1Qs5EKvgLUWrVo6P
ACEWm8tuZbRsGSHFOBwaeKoWP4uuz80kO7yqHnb5FDj4xUqb6jTZ/N81x4xgly1/
Oz6gZjJirlbfZU39/dgcMXkpeKG7pbdGw7wKaGFPzn8k9TTEYJ/gi0APudCXxpOQ
WfGhWGjSYn8qv678I8+pBE9bLebCflwwHBoS979t8BK8pIpwEvrvAnvbFuVjoXaf
Oa5MVWiNr9fP//F1durOEd5GxSoNMNKkzaA0lE0d0rCtkerT4c0QymjH+Qk+YvRc
pS4s8zuvPu9s6xDfTzyOW1FQPIvwhfg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:40 2026 by rpki-client