
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91592978-0c16-3a4f-8fcd-1722428bd842.roa
File: 91592978-0c16-3a4f-8fcd-1722428bd842.roa (raw, json)
Hash identifier: OlVBG/GjHojtbuqohqXNDJVspN3D1pT2HXx9ZN8ppz0=
Subject key identifier: 3A:A2:E0:27:FF:DC:2D:A1:0F:97:2C:80:AC:41:0A:E3:17:CC:80:4F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D2BDA01D16C191434A0266BC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91592978-0c16-3a4f-8fcd-1722428bd842.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 7029
IP address blocks: 71.28.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:01:d1:6c:19:14:34:a0:26:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=96a945a8-8a36-44f5-960c-4d26c32bf405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:12:e0:7b:ba:64:8d:5b:18:32:48:ed:f2:
58:df:4e:ca:b6:27:81:42:a8:57:ca:41:e3:c7:b9:
34:e6:f3:b6:6f:3d:72:2d:79:54:d4:5d:cc:a9:86:
1b:1e:1e:f5:6f:c1:3e:0b:f9:47:98:6a:ad:9c:2d:
b0:f2:02:46:b5:34:94:42:82:ce:d3:53:e8:2c:af:
86:db:5b:6f:a0:70:9f:65:65:3e:75:4d:aa:60:17:
b5:a7:3c:b8:bb:7d:4e:aa:67:6f:da:cd:4b:90:66:
a8:9e:1b:5c:3d:93:99:43:1b:23:f8:36:bb:48:e0:
4b:bf:87:11:79:ed:b6:72:b5:b9:e8:11:f6:20:67:
18:22:85:6e:03:e1:8b:71:12:5e:3b:ef:fd:59:53:
56:5e:6d:40:fa:4d:83:71:cd:a4:08:d9:37:6e:42:
f4:f7:af:78:c0:8a:b8:53:f8:a3:0b:8c:fe:95:33:
fe:66:a0:d0:71:67:ed:52:29:3a:5d:af:cf:76:9f:
1e:bd:5b:e8:a5:8e:da:85:c5:51:1a:37:05:19:25:
e4:0f:84:a7:ae:3d:ef:c0:7f:79:00:53:cc:6a:01:
80:70:e7:89:08:d1:67:0e:a9:fd:2a:db:03:4d:fd:
e6:84:58:4c:cf:28:c5:97:cd:db:1d:ce:6d:dd:77:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A2:E0:27:FF:DC:2D:A1:0F:97:2C:80:AC:41:0A:E3:17:CC:80:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91592978-0c16-3a4f-8fcd-1722428bd842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:de:10:2f:40:37:6c:24:aa:12:3b:4e:99:bd:a6:c6:7f:46:
a8:70:87:bd:6c:a9:44:75:17:98:24:bd:fd:ad:e7:43:a4:90:
1f:f9:3c:84:7b:90:9b:7c:f0:1e:45:5d:ab:31:38:ab:be:55:
7b:f4:14:61:48:53:26:8e:60:40:46:89:13:a5:9b:7f:18:36:
d4:5d:4c:4b:60:c7:04:5c:1f:a7:e8:f6:be:dd:06:78:c9:8c:
50:f2:e0:df:c1:ae:3d:2a:fe:aa:91:37:fd:f8:b7:d5:03:74:
85:60:d2:c6:66:3c:8a:40:c9:8d:51:e8:e5:55:7e:07:34:91:
e0:83:ef:92:a2:67:f3:09:5a:36:3a:55:39:60:9c:a6:74:4e:
e0:84:e3:43:07:95:5c:9b:03:4b:9a:ce:97:89:cc:69:f1:3e:
78:29:32:e3:50:e9:ef:5e:08:37:de:4f:70:2b:f6:17:51:cc:
17:5c:e9:30:76:be:c1:57:bc:c7:1a:b4:5f:91:d9:1f:b8:7d:
44:5b:26:94:73:09:45:49:fa:49:8a:32:87:0d:af:ba:9f:2b:
90:17:96:2a:eb:15:0f:3c:5a:d9:7b:43:0e:f8:3b:9a:22:4f:
e9:0b:05:3e:56:7d:61:90:88:6f:ae:db:2d:92:11:e1:58:1e:
c7:92:2b:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gHRbBkUNKAma8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
OTZhOTQ1YTgtOGEzNi00NGY1LTk2MGMtNGQyNmMzMmJmNDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGIS4Hu6ZI1bGDJI7fJY307KtieBQqhXykHj
x7k05vO2bz1yLXlU1F3MqYYbHh71b8E+C/lHmGqtnC2w8gJGtTSUQoLO01PoLK+G
21tvoHCfZWU+dU2qYBe1pzy4u31Oqmdv2s1LkGaonhtcPZOZQxsj+Da7SOBLv4cR
ee22crW56BH2IGcYIoVuA+GLcRJeO+/9WVNWXm1A+k2Dcc2kCNk3bkL09694wIq4
U/ijC4z+lTP+ZqDQcWftUik6Xa/Pdp8evVvopY7ahcVRGjcFGSXkD4Snrj3vwH95
AFPMagGAcOeJCNFnDqn9KtsDTf3mhFhMzyjFl83bHc5t3XfwEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqi4Cf/3C2hD5csgKxBCuMXzIBPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTE1OTI5NzgtMGMxNi0z
YTRmLThmY2QtMTcyMjQyOGJkODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7eEC9AN2wkqhI7Tpm9psZ/Rqhwh71sqUR1F5gkvf2t50OkkB/5PIR7
kJt88B5FXasxOKu+VXv0FGFIUyaOYEBGiROlm38YNtRdTEtgxwRcH6fo9r7dBnjJ
jFDy4N/Brj0q/qqRN/34t9UDdIVg0sZmPIpAyY1R6OVVfgc0keCD75KiZ/MJWjY6
VTlgnKZ0TuCE40MHlVybA0uazpeJzGnxPngpMuNQ6e9eCDfeT3Ar9hdRzBdc6TB2
vsFXvMcatF+R2R+4fURbJpRzCUVJ+kmKMocNr7qfK5AXlirrFQ88Wtl7Qw74O5oi
T+kLBT5WfWGQiG+u2y2SEeFYHseSK84=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:53 2026 by rpki-client