
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa
File: 89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa (raw, json)
Hash identifier: ZylFJDiqNyEUpWmNoqwenKJBdB2wlCLvmEkBljs0kDI=
Subject key identifier: 41:31:92:5B:19:98:DE:D1:55:B1:5A:B7:59:41:F1:FF:3F:D5:98:5D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D3DFFE5212FF3C02AB531A880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 7029
IP address blocks: 173.187.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:e5:21:2f:f3:c0:2a:b5:31:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=7f00e1dd-b7d8-4624-99b9-4bb5c0038dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:3c:0a:4f:d6:e5:2c:12:09:88:52:7f:72:
00:f0:9b:bd:10:01:bd:67:0a:19:6d:85:76:c8:a9:
80:ac:c9:45:41:74:34:61:b2:ca:a9:3d:91:57:d7:
77:00:4d:c4:b1:df:60:6d:03:43:80:13:84:4e:8e:
32:4d:cf:47:ff:98:7a:69:80:d3:1d:78:22:20:b9:
8f:8e:57:76:7b:a2:c8:05:10:bc:0c:aa:0e:c7:22:
35:d4:2e:80:d6:fe:23:1a:8e:33:92:70:56:90:76:
9b:6c:40:ee:9d:78:a6:c4:ea:6f:52:9a:c6:71:34:
6b:81:1d:d4:72:d0:df:5a:ff:ba:99:58:3b:f0:05:
44:17:dd:e7:89:f4:4f:c8:99:b4:be:b0:0c:74:2e:
92:9a:fd:06:95:07:96:8e:f8:58:7b:98:af:bf:ea:
b2:53:5a:f7:04:ce:99:67:2e:44:8e:83:d6:57:3f:
18:74:26:6f:8f:ac:18:71:fe:0b:18:68:5e:a8:ad:
f4:a5:62:c3:0e:5b:19:8d:f3:8b:88:ec:b1:83:aa:
1c:66:24:76:8c:91:9b:50:4f:02:b2:2d:2a:f4:ba:
b6:6d:ce:a3:d6:6c:e4:42:64:88:de:56:50:86:c4:
a1:bc:7c:8e:55:c7:17:78:a3:f4:bb:0b:83:bf:3a:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:31:92:5B:19:98:DE:D1:55:B1:5A:B7:59:41:F1:FF:3F:D5:98:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:9c:30:da:31:82:82:8d:71:5d:f8:1d:1e:21:a2:9b:30:69:
eb:ac:75:1c:6d:73:ab:fd:83:7b:0c:2c:10:c6:06:35:8e:e1:
b2:09:7f:84:bd:4b:f0:da:8b:39:fa:db:b5:c3:55:fa:7a:6a:
a9:61:41:46:bb:15:50:c5:4b:d6:eb:4e:ad:f1:62:ef:6c:30:
67:38:80:5a:3d:10:e3:2d:f5:69:b1:26:f0:65:d7:13:39:62:
73:8f:40:f8:b5:6d:22:27:c2:41:8f:7f:0f:1a:ae:fe:47:14:
d9:94:d5:b5:d9:7a:c3:70:27:f7:88:67:7a:ae:da:2a:20:30:
1b:d9:20:cd:79:78:f6:0f:aa:60:63:ba:8d:3c:ad:d4:45:6f:
1b:e4:76:e0:dc:23:a8:24:8e:66:d2:82:b0:70:af:2a:c5:0e:
88:51:9e:96:7d:33:97:a2:16:57:8f:61:67:2a:34:8b:4c:4a:
ce:4c:3f:10:d4:e1:9b:90:6f:ed:3c:35:67:3c:1e:e1:33:7c:
0b:b9:86:5e:6a:54:28:1c:33:aa:63:75:31:fc:3d:3d:96:da:
b0:f6:89:a7:c1:3d:5a:dd:01:2a:02:89:5e:0f:fc:9a:d5:1e:
1d:12:89:db:b1:dd:80:c8:1d:cf:81:62:9c:fe:d6:b2:c4:c2:
d4:6b:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:42 2026 by rpki-client