
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa
File: 71a70251-1310-373d-a2b3-3aecbe490726.roa (raw, json)
Hash identifier: wHRpqyyIZsmotUGY6avrxsXfD3xa6+nvPxa+hd0ntQQ=
Subject key identifier: CC:17:16:59:79:67:EA:A2:DB:53:AB:19:50:67:9F:7E:DD:B9:6A:8F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DC135E0F4A2F013AF68653EC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa
Signing time: Thu 07 May 2026 13:00:31 +0000
ROA not before: Thu 07 May 2026 13:00:31 +0000
ROA not after: Wed 05 Aug 2026 13:00:31 +0000
asID: 7029
IP address blocks: 71.29.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c1:35:e0:f4:a2:f0:13:af:68:65:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 7 13:00:31 2026 GMT
Not After : Aug 5 13:00:31 2026 GMT
Subject: CN=dc471b74-03ae-43a3-a22a-e0573d17f5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:bd:c5:b1:6f:4e:b3:87:82:ad:40:61:7e:
02:6a:04:42:ee:67:a9:3f:05:cf:dc:a0:81:fb:c5:
3e:0c:19:a0:bb:3a:9f:9f:7b:58:13:9b:2d:99:d0:
f3:04:e4:0c:54:30:1f:85:44:f8:66:79:78:a6:c8:
d5:72:b7:fe:bd:73:ab:37:f4:c5:20:a4:26:10:7b:
f5:61:99:a5:57:e7:a8:b0:6d:d7:38:5f:ce:2f:bd:
a4:93:e2:57:8a:5b:c4:50:df:26:6a:4b:39:50:f0:
e2:24:84:a9:dc:37:63:ec:4c:43:fe:31:c0:0d:af:
cd:5a:2d:e6:21:11:e0:1c:d6:73:f2:d5:ed:41:fa:
32:cb:b4:0f:a1:1f:d4:a0:39:1b:15:e7:c8:84:c1:
06:87:45:6e:d1:b3:56:00:83:de:28:b8:85:b6:47:
ea:bf:f6:16:40:a1:59:2d:cb:71:2d:9a:0a:2e:71:
fc:1b:ef:6f:3f:d2:49:c3:63:9a:b9:b1:94:e7:a7:
64:d5:1c:be:64:a5:97:ee:80:d8:e5:51:46:b4:a2:
c2:8f:f0:d2:ae:f2:dd:20:2e:a4:0d:5e:d6:88:5a:
83:2c:f2:9a:36:7d:97:67:57:7c:60:be:9a:96:62:
17:04:21:75:e5:ec:55:fc:63:3d:a7:0c:63:6e:08:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:17:16:59:79:67:EA:A2:DB:53:AB:19:50:67:9F:7E:DD:B9:6A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:69:bd:2c:75:d6:dc:51:17:fd:8b:36:b5:43:22:1e:c0:61:
7a:8f:b3:86:89:87:a6:37:db:76:55:e0:40:cf:37:3a:b5:38:
42:f6:54:61:07:3e:ed:cd:d0:70:ec:17:a3:d3:37:40:1b:2c:
63:a3:ae:10:0e:34:65:46:46:95:50:9a:4a:8f:80:5b:20:8d:
a6:eb:51:be:c6:68:73:59:86:b5:68:6f:f3:c9:c4:97:97:d0:
67:40:d4:c3:d9:ff:85:86:83:81:ad:ea:ad:bb:0f:a5:dc:44:
e9:83:71:63:37:59:25:09:20:12:8e:b5:56:c8:f2:ef:54:35:
15:fd:11:ab:61:41:0c:73:32:4e:d2:c1:c9:dc:d0:5d:58:1b:
f7:87:a6:28:e0:a7:05:b9:cf:ac:9d:20:ea:5d:91:df:33:ed:
42:1f:e4:01:2e:fb:e3:9c:08:24:80:84:db:e1:ff:97:ea:9c:
3b:13:85:00:73:08:ee:50:17:ce:c3:73:0e:9c:ee:fe:2a:97:
2c:ec:52:fe:dc:a3:a4:39:6e:37:84:0f:1d:54:05:7f:e8:cb:
12:d6:50:9d:81:0c:6f:cf:87:25:45:a2:6d:14:56:28:ff:f6:
4d:1a:6d:56:05:99:68:a0:99:e1:7c:87:c7:b5:c5:c2:7d:4c:
bc:ed:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:52 2026 by rpki-client