
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa
File: 7c01087c-083d-3c5b-872e-09444b7eb99f.roa (raw, json)
Hash identifier: BzANVLHpQ/oqHXie2C5D+r9fhoQV6FfB30GsThsDizM=
Subject key identifier: 0A:51:B9:B6:91:31:BE:A6:9C:AF:98:ED:7A:4C:98:25:AA:DC:87:70
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F49884B4D1B1E0361DE78F480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 71.29.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:4b:4d:1b:1e:03:61:de:78:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d3d8b6fc-beda-4f70-a294-4a810b1d61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:09:15:55:a0:0c:29:45:79:eb:c5:31:3f:ce:
4c:66:48:e4:1c:57:17:d5:dd:be:81:bf:ef:71:e6:
f6:6c:19:f8:09:50:93:dc:cc:39:a0:86:5d:b3:0e:
0a:8b:fc:53:0e:82:48:a3:4d:50:80:a6:5c:fd:ea:
01:56:2c:f2:6b:32:72:cf:f5:a0:ac:c4:7b:11:a9:
ff:16:39:8e:bf:48:7b:fa:a4:28:44:63:0f:34:1d:
36:5c:a2:42:75:8f:47:8b:16:0e:98:2e:3a:db:a8:
d9:c7:0d:4c:41:4c:f5:fe:21:1d:f8:81:82:09:23:
6f:5c:04:19:09:82:9f:d7:4f:68:bc:f6:22:b0:ad:
ca:69:f5:1b:74:77:28:b9:4a:68:a6:07:bb:e5:f2:
f4:37:a3:c7:b7:c6:b8:44:82:e1:4b:5e:b9:cf:81:
b0:8a:11:e9:6e:d3:03:27:1c:94:d4:60:69:5d:0c:
ba:aa:33:de:c9:50:31:61:22:d8:12:24:a8:ed:03:
2e:23:c1:e0:19:b3:19:61:cf:8f:c0:31:97:47:4d:
90:09:55:20:d5:bc:62:f7:38:9d:1f:1b:7d:c2:c6:
0c:4d:ab:eb:92:82:19:4d:62:5b:ff:c1:19:83:d8:
78:d5:71:92:64:72:54:9b:b2:d2:bb:b2:ad:c0:f3:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:B9:B6:91:31:BE:A6:9C:AF:98:ED:7A:4C:98:25:AA:DC:87:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:1c:a4:0b:29:44:99:12:ac:67:36:b6:14:ea:b1:82:5e:46:
95:8f:63:77:fb:df:5a:c6:de:44:94:a2:04:ad:d7:66:c9:e6:
92:ea:51:3e:60:ab:41:c0:7e:1a:a5:25:c4:b5:d3:12:d6:bd:
b9:08:72:1a:ff:4c:70:ae:bf:03:3e:b2:0a:10:de:a8:2d:01:
61:a8:f5:35:42:fe:91:14:79:f6:9c:b9:21:20:8d:1d:9a:46:
ec:a5:8f:36:c6:37:a5:dc:c6:6d:fb:ab:29:d8:d8:d6:3b:fe:
0e:33:6a:44:0e:9c:6f:67:64:dd:9a:4e:53:bc:a1:54:0d:40:
5a:be:96:9e:3e:f0:8a:5f:6b:b8:fe:af:5f:85:9c:82:50:8d:
03:ba:1e:e6:8a:7e:29:58:45:09:2d:4f:4e:6b:66:40:3b:3b:
14:bf:d7:1c:9b:ff:41:22:2b:f7:e7:10:f6:de:a2:48:b2:10:
cc:d9:bd:e4:c0:d1:44:ee:a0:66:20:c2:a0:37:df:42:78:2e:
b4:eb:e6:fb:08:8d:00:01:01:71:62:c9:6c:8b:4e:53:e4:19:
95:58:94:8b:8e:24:63:bb:42:67:db:e3:6a:ea:b3:b6:ce:bb:
39:9a:6a:ae:38:3e:55:78:e8:27:0c:0c:a1:6a:f5:f8:09:ae:
b4:ba:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:38:31 2026 by rpki-client