
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88297b31-0f08-3530-937e-7c363db5d127.roa
File: 88297b31-0f08-3530-937e-7c363db5d127.roa (raw, json)
Hash identifier: +147kMHzC7XjTy8PDYDCDp4WvmVSIMUN5IYhu8VsuEs=
Subject key identifier: 08:FD:FC:FD:95:44:27:E7:F3:26:0F:C3:C0:22:0C:ED:A0:EA:46:EA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E890114F1FDD142027B372780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88297b31-0f08-3530-937e-7c363db5d127.roa
Signing time: Sat 18 Jul 2026 02:36:26 +0000
ROA not before: Sat 18 Jul 2026 02:36:26 +0000
ROA not after: Fri 16 Oct 2026 02:36:26 +0000
asID: 7029
IP address blocks: 173.189.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:89:01:14:f1:fd:d1:42:02:7b:37:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 18 02:36:26 2026 GMT
Not After : Oct 16 02:36:26 2026 GMT
Subject: CN=5ff256ed-651d-4146-aae4-a30e8fe0b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:e2:4b:28:90:43:15:0f:7f:fd:be:6a:2f:
00:24:15:7b:4a:54:4b:e9:3b:49:e6:d6:b6:f9:62:
4b:d3:65:cb:57:e0:83:7f:cc:69:b6:b2:cb:f8:34:
82:d6:2f:8e:73:e8:27:66:27:2c:bb:c0:0c:d7:e1:
b0:a9:98:bd:26:84:86:63:ca:ba:dc:45:d7:c5:4f:
88:94:69:8b:23:84:85:53:7b:75:cf:d6:a9:15:b8:
ac:2a:cb:a1:9b:10:37:46:d1:b3:91:bb:14:e3:8e:
65:13:98:e6:72:6b:a1:b0:5f:09:5f:b3:af:2f:23:
b2:31:fe:bb:b2:14:b3:98:f5:26:f7:55:8d:90:c6:
c4:63:4a:1a:60:46:5d:dd:45:cd:4f:12:ab:d1:c0:
f2:f9:ff:38:1e:5d:59:5f:a7:0b:26:09:53:bc:18:
61:98:11:d0:e8:7a:59:3d:92:c7:b7:56:f2:c6:ec:
75:a3:e9:2f:dd:56:e8:91:8c:50:e2:b5:da:6d:d3:
34:00:a2:5f:23:81:91:f0:32:d0:40:4a:48:58:5b:
9e:05:f0:9e:5e:a4:09:85:25:ac:88:f9:6f:7e:82:
23:62:cf:c9:c3:92:77:11:5d:fd:6b:bb:4a:d2:fd:
f1:6d:f4:7a:39:22:36:72:a6:98:20:37:6e:71:61:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:FC:FD:95:44:27:E7:F3:26:0F:C3:C0:22:0C:ED:A0:EA:46:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88297b31-0f08-3530-937e-7c363db5d127.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:57:a8:91:fb:15:f9:da:e4:ae:bc:93:15:8a:75:a5:9d:a1:
e5:12:22:bf:57:f9:3a:33:e2:77:25:b5:17:ae:a2:6f:64:c6:
2e:62:ea:18:86:63:f2:34:c7:bb:da:41:b2:1f:5d:8f:38:48:
99:97:93:96:a7:94:e8:3d:7f:c0:33:ca:6d:75:6e:2c:a3:3d:
9c:4f:ab:78:89:ff:a6:8e:93:5d:f6:b9:d7:2d:29:43:da:e9:
41:27:46:2c:da:9a:b8:c9:a4:98:c5:bb:36:ee:69:f1:64:7f:
f2:0d:94:6b:80:ae:63:97:ee:95:5d:1a:78:43:31:21:45:0a:
3f:ff:ea:20:4b:12:17:9b:91:84:fd:ae:71:bb:95:15:bf:2f:
ba:ca:bf:97:5b:a8:4f:9b:57:b6:98:69:8c:93:68:b4:2e:19:
7e:8b:13:65:a0:03:84:6c:82:ab:b9:66:73:8c:5e:b5:b4:df:
e8:5b:86:12:30:90:bb:bd:e6:2c:b4:d3:f4:3a:0e:ef:7b:4d:
73:9c:27:cd:36:f8:d8:ce:ae:58:d5:3d:21:cc:05:d8:4c:3e:
4b:d8:30:a6:b4:19:58:f5:29:6c:21:61:2d:cd:b4:00:a5:5d:
9a:3d:e5:39:44:42:f8:1e:e4:df:4c:0b:6a:fd:be:41:23:2c:
13:8a:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:43 2026 by rpki-client