
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa
File: 9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa (raw, json)
Hash identifier: jVFT4crf2KH1M7M9xCsktUPwBTuzpwywKx3pUtZ3N78=
Subject key identifier: 4B:E3:EF:E6:2D:77:6F:31:6A:95:81:90:01:BF:0C:0D:17:7B:D0:92
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A7B368D7A44EAF3047B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 40399
IP address blocks: 205.232.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:7b:36:8d:7a:44:ea:f3:04:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=ebf0fe71-74e0-4763-bb0d-76b5ac35f9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:78:40:43:eb:16:63:af:12:6b:59:65:81:
16:71:22:e3:2a:fa:dc:26:34:3f:8e:7d:93:b9:7f:
36:bf:e8:72:48:d4:c9:cd:1a:14:cb:e2:c6:60:85:
5f:6c:b5:b9:1f:d0:ba:b7:8b:66:c1:73:89:ec:2a:
88:11:32:fa:44:a5:fd:83:b8:11:36:32:3a:de:9c:
fc:53:af:56:65:86:76:5f:d3:36:75:7f:9e:ad:05:
23:f8:f9:f6:be:32:40:8f:06:b7:21:86:1a:31:42:
47:49:2c:36:db:54:5b:21:5a:2f:9f:88:f3:60:73:
e0:8b:5b:08:14:f2:75:e5:01:74:9a:a7:c9:df:9d:
a2:52:0d:1e:6b:56:bc:c1:dd:36:e3:c8:d6:80:a6:
03:dd:43:cf:69:9f:73:42:90:55:f9:aa:78:82:0a:
9f:16:a5:a1:5b:9a:92:bf:76:88:f5:4e:42:27:e8:
27:c3:27:cc:79:c0:50:ca:47:74:ff:2b:06:28:fa:
53:47:30:87:e8:61:37:5c:c1:ac:94:69:f5:88:28:
ee:02:44:b6:11:d7:0d:4f:d4:8b:e3:c8:31:1e:36:
fb:2c:8c:16:24:29:65:ae:34:bf:d2:52:9d:cd:75:
1f:7e:46:24:32:45:4a:eb:dd:b1:20:ce:04:c3:79:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:EF:E6:2D:77:6F:31:6A:95:81:90:01:BF:0C:0D:17:7B:D0:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
205.232.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:df:cf:e1:10:e1:e9:fc:18:33:d4:bc:d7:08:4b:19:d8:00:
8a:e8:02:03:7d:9c:ff:88:b9:8e:8e:73:ab:81:ef:aa:f9:38:
ee:17:b4:07:09:e9:7e:cd:0a:5b:fb:a7:6d:b0:f1:84:e0:d9:
3e:d9:6c:c0:55:a6:fb:f5:a8:1a:55:55:57:49:ce:53:33:25:
3e:19:65:ff:c3:27:c6:10:e8:91:84:84:39:5e:3d:40:24:98:
3b:c0:5d:a3:95:66:8e:55:83:d0:11:cd:a9:e4:d5:42:be:bf:
fc:3b:d1:21:5c:76:5f:44:f9:41:86:4c:65:aa:4c:00:3d:d1:
ce:0c:32:a1:e6:01:96:a3:c7:e5:f7:3f:9d:4e:e9:12:94:a7:
6d:17:10:84:6d:16:08:b1:4b:3c:4f:be:22:aa:bb:fe:db:4f:
42:5b:27:10:84:50:fb:d6:6f:1e:db:0b:93:ae:f4:b6:7f:8f:
4f:f3:91:52:15:e4:1c:96:30:c3:a1:85:96:2b:70:1a:72:72:
52:3e:95:46:6f:b2:1c:c0:1b:d2:b7:3a:20:ef:52:dd:f0:68:
2a:77:9a:5f:74:67:15:5a:8b:64:0f:1d:27:ef:05:da:d4:e2:
4b:21:16:d4:14:67:a1:d9:49:f1:e0:31:fe:11:22:c0:57:5d:
3c:a5:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:46 2026 by rpki-client