
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ee65215-a90b-3961-af11-97e0c9050404.roa
File: 6ee65215-a90b-3961-af11-97e0c9050404.roa (raw, json)
Hash identifier: 9C05RkxFPfWZ8juDvhMq7PNYW34GK7BybAGpwj7gI0E=
Subject key identifier: 06:AC:DC:F8:88:DC:30:93:80:5D:65:49:10:7D:87:EE:F2:EF:FE:72
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D1F4A62C29C8398955373EE80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ee65215-a90b-3961-af11-97e0c9050404.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 7029
IP address blocks: 173.188.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:62:c2:9c:83:98:95:53:73:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=2318d48c-065e-45e2-b4e6-35130a1335c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:ab:68:b7:23:92:9e:8b:4d:d3:e5:e5:5b:
be:96:29:a9:8e:49:de:7e:fe:15:3a:c0:73:d2:d2:
35:0a:2a:32:ca:2d:a3:43:e9:21:29:cf:c8:a5:b5:
12:8a:2d:49:62:58:60:76:86:15:1c:11:ea:68:cc:
1c:b3:bc:83:d7:d5:c7:de:26:20:93:c4:2d:15:69:
39:3d:9c:29:86:6d:db:c6:9f:04:91:65:f9:02:1f:
49:ce:40:28:89:73:92:59:f5:f1:81:b3:47:7b:f6:
36:a3:5c:45:60:31:76:74:66:c5:f2:53:78:49:ae:
da:de:a5:59:c6:45:41:68:83:b3:6e:63:8d:93:74:
60:d8:45:fa:89:90:e7:ab:7a:98:67:0a:9b:f2:67:
74:b7:04:e1:61:65:9b:dd:71:b8:b3:00:34:59:f2:
93:51:30:1b:79:51:c6:03:4c:4f:d0:a7:66:41:c8:
9f:ac:49:31:dc:73:b4:23:76:d3:ab:48:41:3c:91:
1e:81:fd:59:b1:c1:81:6d:cc:83:45:b1:58:8e:4b:
7d:02:b2:75:11:84:f1:f9:19:3c:02:bf:53:f5:bd:
8f:79:f0:fb:9c:95:cf:58:fe:cf:84:29:74:73:4e:
81:fc:c1:1e:cd:ab:cb:aa:3d:05:5b:67:77:3b:3c:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AC:DC:F8:88:DC:30:93:80:5D:65:49:10:7D:87:EE:F2:EF:FE:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ee65215-a90b-3961-af11-97e0c9050404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:eb:aa:a7:5f:7d:23:6d:34:18:54:f6:05:cf:aa:ab:60:ea:
04:26:7c:e5:f0:a8:a2:66:27:a8:36:b7:22:d4:66:35:cf:6b:
5a:be:81:8c:8f:02:21:92:47:67:d9:60:7c:fd:a6:2d:0e:12:
b1:38:57:17:c8:09:f9:9c:c8:a3:4c:ef:11:e8:7c:c5:dd:d9:
08:9c:1c:ce:94:f1:de:24:c1:90:96:4d:20:59:60:75:10:b8:
b7:35:cb:5a:8f:29:91:8f:9a:b5:41:e9:f0:97:17:0a:33:80:
b3:f7:10:cf:8f:40:99:c8:6c:e2:74:aa:8a:64:d2:00:ed:15:
16:75:43:b7:c8:e8:e2:be:c5:3b:dd:e0:da:97:c4:40:dc:ad:
f4:3c:5f:6e:6d:14:04:9a:9f:26:a7:2f:9d:83:cd:37:b6:dc:
78:43:17:77:16:c0:f9:e5:c5:a6:f0:73:3b:99:ee:95:7b:b3:
64:9c:c6:b8:b5:c1:85:16:78:71:24:b2:3b:a2:e4:65:f3:66:
94:32:2b:bf:5e:ca:d5:0c:cb:61:35:3d:c1:d4:14:69:1b:27:
dd:7c:0a:dc:d9:45:0f:89:3b:01:c6:6a:c4:1c:10:01:bb:15:
88:e6:dd:b3:1d:fb:8e:0a:6e:10:9b:7d:d8:cd:66:3d:41:8c:
fc:b5:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:07 2026 by rpki-client