
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa
File: 9d08a5cf-3277-3703-9515-b5271bca93a5.roa (raw, json)
Hash identifier: 2Xn0TH8FLsTiGV1USVklSWaJa3KALT1QHCglt0A1m0Y=
Subject key identifier: 7E:7D:1C:13:EB:8E:11:6C:17:13:9C:51:4E:9D:B8:DF:29:3A:2D:EB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F024232767C3F99070BB6BAF1
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 7029
IP address blocks: 98.20.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:32:76:7c:3f:99:07:0b:b6:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=edc4ad46-cfc6-49c1-aa6a-f7a739bdc00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:b6:3c:76:b9:cf:69:1a:1f:16:50:30:95:
4e:f2:50:0a:f0:5b:b2:09:0c:41:71:39:9a:74:6d:
ce:e3:7c:34:2d:eb:3b:2c:70:93:5c:4d:95:d1:08:
43:56:69:0b:c6:f9:32:3e:0c:4f:2e:77:b6:96:96:
da:43:68:06:bc:ab:61:3a:ad:57:ac:f0:dd:ea:af:
a0:4e:6f:71:4a:71:44:e1:43:71:eb:23:aa:94:36:
06:84:03:4b:15:5b:5e:bb:05:d8:69:eb:bc:22:df:
61:1b:a6:d8:0b:12:8a:5b:91:7f:76:cf:47:08:ab:
01:fa:ce:f5:32:49:da:7e:e6:e9:30:02:22:4e:78:
db:dc:74:c3:cc:8c:e2:01:e0:28:91:6d:8c:b6:17:
dd:0e:72:1e:97:a7:ef:2e:f1:8d:51:50:18:ca:92:
d3:c0:3d:76:bd:70:06:91:bc:c5:d2:a4:b7:34:d2:
16:4d:d8:1f:b0:83:0b:cd:35:ec:49:88:41:34:f0:
6b:c9:b4:55:ee:7c:43:40:83:2b:b8:17:06:a0:d3:
b9:ba:3b:04:49:9f:8b:79:08:92:39:fc:47:72:43:
35:d1:7d:93:a6:e4:04:a2:58:15:8e:a2:e4:9f:6c:
a0:11:4d:e7:31:6e:12:d8:93:cf:f6:2e:f4:1e:b4:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7D:1C:13:EB:8E:11:6C:17:13:9C:51:4E:9D:B8:DF:29:3A:2D:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:2e:b2:9d:81:cd:35:31:4d:9d:92:1c:90:ca:17:28:07:65:
d0:5d:78:d6:16:d6:5f:71:b8:90:19:cb:f2:52:56:0b:04:e6:
58:51:4e:65:ad:f0:50:67:23:bf:ab:42:ea:dd:bd:1e:20:11:
30:37:31:56:0e:43:ff:d1:85:94:a7:0f:51:ab:a9:76:12:ca:
71:03:6f:a1:73:4c:ef:5d:91:68:bc:42:a4:93:62:6b:43:64:
0f:c7:ff:de:30:e0:54:4a:61:90:c4:55:5a:3f:8f:4f:c4:ca:
e2:3b:80:a2:df:c0:da:25:95:f1:84:65:88:c6:b5:a4:59:10:
af:08:6f:a2:36:1f:56:07:c5:ae:90:2e:4e:47:9a:8e:46:13:
4f:2b:35:1c:9c:c3:28:d4:cc:b5:a1:31:85:a7:bf:1b:c6:cd:
dd:c5:05:5d:23:52:0c:bd:f4:57:80:01:02:2a:01:dd:c2:ca:
74:bd:29:f4:a7:f6:a3:d3:8b:83:03:47:5e:64:5d:d8:87:4f:
15:4f:ef:30:48:7b:be:12:98:4c:0f:90:58:bc:10:e9:63:a1:
6f:8e:19:ef:e0:5c:ac:59:6b:05:0a:12:62:a1:5b:37:a8:67:
0e:14:1f:38:82:e0:4d:e7:82:94:14:a1:08:3d:e9:67:34:1b:
e5:b8:a6:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjJ2fD+ZBwu2uvEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
ZWRjNGFkNDYtY2ZjNi00OWMxLWFhNmEtZjdhNzM5YmRjMDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquW2PHa5z2kaHxZQMJVO8lAK8FuyCQxBcTma
dG3O43w0Les7LHCTXE2V0QhDVmkLxvkyPgxPLne2lpbaQ2gGvKthOq1XrPDd6q+g
Tm9xSnFE4UNx6yOqlDYGhANLFVteuwXYaeu8It9hG6bYCxKKW5F/ds9HCKsB+s71
MknafubpMAIiTnjb3HTDzIziAeAokW2MthfdDnIel6fvLvGNUVAYypLTwD12vXAG
kbzF0qS3NNIWTdgfsIMLzTXsSYhBNPBrybRV7nxDQIMruBcGoNO5ujsESZ+LeQiS
OfxHckM10X2TpuQEolgVjqLkn2ygEU3nMW4S2JPP9i70HrRMRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH59HBPrjhFsFxOcUU6duN8pOi3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWQwOGE1Y2YtMzI3Ny0z
NzAzLTk1MTUtYjUyNzFiY2E5M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhRwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEusp2BzTUxTZ2SHJDKFygHZdBdeNYW1l9xuJAZy/JSVgsE5lhRTmWt
8FBnI7+rQurdvR4gETA3MVYOQ//RhZSnD1GrqXYSynEDb6FzTO9dkWi8QqSTYmtD
ZA/H/94w4FRKYZDEVVo/j0/EyuI7gKLfwNollfGEZYjGtaRZEK8Ib6I2H1YHxa6Q
Lk5Hmo5GE08rNRycwyjUzLWhMYWnvxvGzd3FBV0jUgy99FeAAQIqAd3CynS9KfSn
9qPTi4MDR15kXdiHTxVP7zBIe74SmEwPkFi8EOljoW+OGe/gXKxZawUKEmKhWzeo
Zw4UHziC4E3ngpQUoQg96Wc0G+W4piw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:09:32 2026 by rpki-client