
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ea8abd-b491-33dd-99f7-f006786f0bbb.roa
File: 90ea8abd-b491-33dd-99f7-f006786f0bbb.roa (raw, json)
Hash identifier: UeyltyVTaCtIhWGu43lgTf3WZfgS08Ym6MDvxih0LbE=
Subject key identifier: D8:9A:34:7D:64:44:3E:F6:69:48:F0:71:3A:4C:57:8C:8D:75:12:B6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F51D2B8CA750FE90FFEE621B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ea8abd-b491-33dd-99f7-f006786f0bbb.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 98.16.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:b8:ca:75:0f:e9:0f:fe:e6:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=582fd27a-1c6b-4420-a225-006d6f167919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:45:a2:c0:41:cc:98:96:1f:c5:3c:91:3e:
6e:4a:90:a3:ac:e9:3f:14:b6:bf:15:e0:89:49:fd:
2d:8c:12:05:3e:29:06:b6:a1:71:a3:82:31:cf:bb:
17:ae:91:77:04:a8:06:8a:68:28:08:de:d3:e3:8e:
19:9e:17:30:96:50:c8:a9:bb:9e:2c:b4:fe:5d:14:
1a:1b:30:e3:33:f8:5b:86:63:e7:b1:75:40:f6:d7:
ab:6f:7a:c3:07:b5:f5:a5:0a:53:7b:3a:a1:43:4d:
e6:27:97:51:74:50:ba:ef:87:9b:8e:25:93:a8:f6:
73:33:21:26:26:5f:37:ef:06:ff:42:63:85:49:d9:
44:3f:a2:60:ef:4c:91:f3:ef:5a:bb:6a:58:cb:f2:
9a:97:84:78:b5:3d:79:22:44:53:3b:26:77:04:98:
73:60:66:50:ba:22:2e:c8:56:34:81:b5:4d:51:a9:
7c:d6:3d:21:f4:79:78:9c:99:07:d5:f6:9e:9b:a6:
f4:c7:8a:01:03:a5:6f:b6:7f:d6:50:fb:9a:19:54:
13:3b:d7:4a:d0:f1:c8:8d:01:ff:fe:cf:d7:c3:82:
62:9c:a9:48:ca:34:aa:53:e3:bc:9a:e4:76:fa:89:
63:81:73:a2:50:f1:9a:1c:1b:d7:b0:cf:5e:ff:60:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:34:7D:64:44:3E:F6:69:48:F0:71:3A:4C:57:8C:8D:75:12:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ea8abd-b491-33dd-99f7-f006786f0bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c1:2a:db:3e:b1:a4:bf:54:02:39:c4:65:f2:da:ec:0b:75:
68:7a:43:8a:f3:d0:c3:f2:39:d4:39:4f:c7:87:78:ec:c2:cb:
17:e6:5b:49:d0:0a:59:1c:2b:9a:36:14:d9:0c:8b:21:cd:14:
83:bb:c3:a1:f5:9d:a7:20:dc:0a:1a:68:0a:43:8d:64:d1:8b:
1c:87:a1:69:1a:52:b9:8b:69:a6:ac:bc:63:be:b4:24:b1:b7:
a4:8d:c2:e5:8c:96:7b:6b:a6:82:39:b3:8a:94:13:9e:42:32:
fb:8e:08:a9:2e:73:b8:37:6f:43:2a:bb:e2:4d:ad:d8:6d:54:
59:4b:95:36:c8:87:4b:95:41:20:1f:28:7d:7c:cb:ff:b7:85:
7b:41:be:46:e0:f6:d8:66:c6:b1:39:de:db:09:9c:93:07:0c:
43:3e:e7:f1:72:63:9d:cf:cf:e4:ae:f1:ee:7b:21:40:d6:3a:
1a:04:01:0b:66:87:af:d6:78:af:3a:4a:2a:72:68:8d:92:54:
a0:e8:c5:ee:5e:18:f2:e5:6e:2c:b7:3c:a5:af:96:43:1b:5f:
37:c3:35:ec:24:68:45:c3:af:bd:9a:7d:eb:df:65:2e:5c:52:
c4:f0:f5:3f:60:15:6c:24:4f:6e:bf:cd:aa:b8:dd:be:ef:88:
7a:2d:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:24:19 2026 by rpki-client