
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa
File: 904128b2-0813-339d-a2fa-b676181812c8.roa (raw, json)
Hash identifier: miaTRo4lRCtOGBlT/z+WaNTjWYU/EcXrt6NgG8xgkkI=
Subject key identifier: 01:D1:3A:5E:31:91:1B:B4:C3:DD:43:5D:7D:22:6D:5F:72:02:74:C9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DCAFB12079226B6C77D89B900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 7029
IP address blocks: 98.22.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:12:07:92:26:b6:c7:7d:89:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=177b9f67-c59b-4a93-8a47-f13065da4369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:f3:26:47:02:04:95:f6:41:70:b0:9f:e8:
e5:e6:fc:c5:68:e7:6f:9c:e6:59:64:a3:99:57:6a:
12:b3:9b:86:c8:20:31:3c:d9:99:6e:fd:00:44:94:
73:3e:e3:b0:4a:37:1c:21:54:1e:1f:6f:58:dd:1e:
0a:94:7d:5f:66:01:8c:77:7a:1d:75:51:a8:5c:02:
a1:34:45:91:14:bc:b3:6a:18:f3:56:19:01:a6:9f:
66:34:f6:de:da:60:91:23:29:32:71:a9:81:1f:2b:
dc:26:fb:cc:83:dd:65:2f:a5:4a:72:0a:87:87:06:
d2:d5:0c:ca:78:fd:db:b0:b9:1b:7f:98:4e:6e:8c:
15:e4:91:f0:25:14:7a:57:14:41:1a:17:f0:fd:df:
23:ae:23:6b:9d:a2:f4:52:f4:58:92:b1:38:4f:eb:
b1:b4:80:82:7d:79:b0:af:85:7d:61:c0:22:63:67:
15:de:25:6f:6e:2b:2b:99:cd:34:e8:14:36:9d:6f:
fa:d0:6a:d4:69:63:c6:7c:87:b8:da:18:b0:16:5b:
37:47:00:7c:8c:d9:45:27:84:62:e8:b8:d9:fa:a2:
81:4a:0b:18:15:59:8c:96:7a:87:4c:8a:34:fa:c1:
09:cd:f2:5a:ff:ec:d1:8a:66:24:2e:8c:8c:76:4a:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:3A:5E:31:91:1B:B4:C3:DD:43:5D:7D:22:6D:5F:72:02:74:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:3b:98:27:ee:f5:1e:6d:f6:87:74:4c:43:0f:46:23:f5:1e:
2a:8f:1d:6b:7b:db:3c:4a:74:f5:eb:2b:4a:9e:dc:b8:10:40:
39:9b:77:20:f2:07:03:5c:ee:06:12:5d:3d:bc:23:86:c1:09:
7a:55:e1:8c:59:ed:e2:fa:bf:3b:ae:b7:30:c5:15:b2:c2:53:
11:b8:35:dd:78:bb:2b:fc:02:f5:a6:77:3d:7b:40:ab:25:f6:
26:f0:7c:b1:80:a4:08:50:6a:f7:9e:5d:fe:29:5d:3a:e7:61:
2e:f5:5e:ee:13:88:3d:cb:74:3b:c1:2d:dd:cd:aa:ad:7b:32:
69:16:1a:db:f1:df:35:eb:ae:bb:5e:c3:30:7e:06:63:00:96:
f3:69:70:29:90:d3:4e:ee:6c:95:e0:31:66:f2:6b:e3:ef:d1:
7e:ad:ec:5d:da:47:9f:74:dc:7b:56:30:bf:84:b1:6e:07:3c:
e4:dc:c0:83:da:82:50:d5:99:20:e1:cf:c5:a5:1a:e1:4a:da:
4a:12:4a:06:fd:d2:81:a5:70:fb:f7:ee:ef:9a:4b:9a:5f:50:
da:5c:e9:81:e2:b9:a5:f2:c6:75:2f:fc:21:68:6e:9f:fc:ee:
be:6f:83:b0:ed:ca:59:3e:0a:fb:15:7e:ec:46:f9:9e:b6:bf:
76:5f:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:27 2026 by rpki-client