
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa
File: 8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa (raw, json)
Hash identifier: RTKa94AE3Hk/hNEXiQ5tvpbkDZ6e69FsqXT/uQ+LUCk=
Subject key identifier: C6:77:C9:95:1F:45:2C:F0:67:62:27:97:B2:F4:06:A0:56:44:95:E9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A7DB3852E3BB73F809080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 72.25.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:7d:b3:85:2e:3b:b7:3f:80:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=2df548ce-27bb-415e-891d-cb3646af76f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:f3:ec:7c:5f:5b:02:cb:a2:70:98:9f:e6:
4f:39:66:38:12:cb:4f:95:b0:e0:8e:f8:bc:f1:b8:
15:dc:e7:62:ee:70:73:49:08:2c:1e:2a:bf:fc:64:
9e:a8:45:98:dd:55:10:1a:8b:70:ce:96:6e:ea:9f:
11:2c:47:f9:05:f8:7c:81:56:86:7e:f5:f2:76:32:
ba:1a:34:c4:5d:cf:f5:57:26:3d:81:46:18:2a:ec:
cb:8c:0f:c1:3a:ce:42:c6:03:c8:74:69:f6:bd:32:
66:2c:27:8c:ad:6a:36:e6:4f:2c:51:29:43:49:67:
d7:8e:08:8f:71:0c:99:b5:e7:71:58:d9:07:3d:55:
50:85:c1:25:c5:f1:8e:dc:7f:61:fc:22:c5:7c:e6:
38:23:a6:39:b2:e4:08:0a:26:cc:e7:a5:c5:0f:99:
f1:97:11:d6:f6:ec:fc:ee:b4:cc:60:b3:13:cf:c8:
d0:49:b1:9e:28:95:2b:55:42:33:fd:8e:16:e5:e7:
05:71:43:7f:a8:99:28:4f:0c:eb:60:d3:9a:52:94:
ad:e0:99:4a:33:0f:0c:f7:d0:b0:17:24:88:fe:b0:
d0:2a:b8:b8:a4:8c:84:c3:7f:6a:e3:2c:8f:59:19:
c6:92:4a:7a:46:4b:2d:02:29:dd:4a:2c:d3:40:cf:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:77:C9:95:1F:45:2C:F0:67:62:27:97:B2:F4:06:A0:56:44:95:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.25.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a2:c4:8a:5c:76:f9:31:2f:a4:8f:56:f7:f9:a8:e5:89:c8:
97:44:9e:af:c7:27:79:a3:f2:ef:57:ae:50:18:aa:ee:7c:31:
1b:4e:00:bc:4f:6d:20:f3:16:df:e3:a6:19:24:cf:62:c6:c4:
36:b1:39:08:08:49:a8:2e:1d:de:c1:84:4f:83:e7:16:2a:b8:
c3:60:99:54:68:9c:8c:93:73:07:56:7d:d6:98:87:fa:cc:ad:
28:ae:33:76:f0:6e:05:a5:ef:80:18:1f:71:b4:4d:fe:1a:6e:
cd:ef:fb:66:f3:cb:f7:e6:e0:93:f2:91:e2:5d:1a:0a:f4:e7:
3b:50:18:dc:44:29:25:a7:ff:20:00:b4:db:9c:a1:20:cd:a6:
02:34:64:9a:ce:54:d3:a6:d7:17:56:3a:45:1b:bf:9c:4e:34:
8f:6e:95:ad:f9:e2:79:a2:3e:a1:81:08:0b:a9:c4:6b:4a:c9:
8b:e4:ce:89:88:ba:b1:47:c9:8d:ce:03:9a:5c:b6:d5:1e:a3:
58:75:05:a4:45:f7:cb:b5:07:26:55:9d:ad:45:31:11:0c:20:
0d:0f:09:8a:33:dc:80:db:e4:8e:d2:4e:d8:20:52:f1:b2:8d:
4c:e6:ea:59:f9:1a:e2:e2:d7:e2:ec:a4:f9:a4:ad:80:ed:86:
8f:3c:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:26 2026 by rpki-client