
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa
File: a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa (raw, json)
Hash identifier: JQOVX215mw0bfQmnU3aSTTPcf2+u3fquJNinDc/cbTI=
Subject key identifier: 9A:4A:17:84:34:A1:C2:44:B7:B9:A8:C1:11:A0:9C:24:22:AE:C1:13
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F51D2B3ECB5CFF5A8EA5E01B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 7029
IP address blocks: 98.19.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:b3:ec:b5:cf:f5:a8:ea:5e:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=a3a3f87a-6d20-445b-ae1c-500463218f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:0c:3c:e5:fb:69:f6:88:35:5e:6b:ad:cb:
0a:33:de:02:8d:b8:3f:c0:ed:ab:85:0e:b9:7c:ec:
60:f9:75:09:e8:8a:54:c0:05:82:dd:c6:09:f4:3f:
e6:6c:8c:13:47:32:e9:ee:5d:c5:b6:56:c3:9f:57:
5e:8a:9d:8d:d3:e5:07:3b:7f:88:21:4a:4e:fa:66:
ba:65:05:56:14:a4:78:38:b4:4a:c5:0f:8f:42:40:
75:30:32:3e:1b:74:66:f4:ef:6a:1a:9c:6b:39:9c:
b8:1c:2d:7f:50:00:c0:ac:71:3b:45:1e:22:52:dd:
3a:57:1f:36:a0:d3:0f:28:7c:1a:df:09:1f:a2:a9:
65:ea:46:eb:cf:18:40:c0:5d:e3:f7:ab:db:38:36:
86:1a:e7:0c:99:5a:e5:a5:04:e5:85:0c:01:d2:57:
ce:29:29:75:13:2b:63:20:ee:e1:0b:8f:ff:99:04:
5c:eb:00:c1:ed:ea:fe:24:4e:1d:b8:a9:32:c5:a0:
c1:ed:a8:64:c3:96:b8:66:03:0b:63:c5:94:42:8f:
94:55:2a:cc:d5:f8:42:61:df:4c:98:33:21:a6:ad:
c3:d8:76:84:32:d7:12:ba:75:63:86:76:a9:cd:a4:
aa:9b:73:26:3a:68:07:9a:69:d6:36:8f:84:05:b1:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:17:84:34:A1:C2:44:B7:B9:A8:C1:11:A0:9C:24:22:AE:C1:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:9e:b6:e8:15:e7:ae:af:bc:9b:25:42:5d:f6:7b:f8:a0:21:
6f:dc:4a:94:f7:01:ef:b6:3a:14:86:f5:ef:42:40:58:7f:85:
26:4d:7a:2d:ff:49:ca:d0:aa:2d:76:52:0d:c0:00:79:a6:fc:
36:73:14:1e:37:7f:02:2a:3d:8f:97:f1:e6:e9:59:02:93:bb:
b8:f9:83:52:6c:5d:93:d5:3b:d7:a4:8b:37:39:0d:e4:f9:06:
e9:25:8b:d9:ec:ca:5e:f7:b9:37:d2:c1:a1:40:f9:25:b1:0a:
0f:57:db:f2:8d:b6:0c:fc:61:6b:d5:44:4d:33:4a:b3:99:e1:
bb:36:1f:76:a5:44:de:04:7e:af:a8:a7:da:67:77:ec:77:2e:
df:6d:81:6d:2a:d5:94:ca:58:76:89:63:dc:0d:33:fb:e8:c0:
7d:d2:a1:52:75:27:c0:26:b4:ef:83:30:74:e6:d3:22:b1:00:
bb:6c:71:d2:4b:ad:3c:0f:26:66:3f:66:80:75:b8:97:7f:cb:
b6:13:40:55:0e:8a:8c:69:2a:dc:15:44:38:df:65:3f:ad:0d:
3f:48:7f:ae:90:e7:0f:03:64:03:c2:56:71:29:5c:1c:5d:f4:
b8:ea:a7:34:cc:8c:60:f9:61:96:bc:34:a9:95:60:93:1c:05:
67:19:d9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:17:13 2026 by rpki-client