
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa
File: b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa (raw, json)
Hash identifier: ljVPRY/qiAOrLo4bwyOTxR+Q2pBXpR1J8jvJIITHyPY=
Subject key identifier: FF:CE:96:A6:49:78:E6:A9:DA:33:DB:9E:5F:DC:9F:3A:2E:84:13:E8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300A76CEF5F36DDEFEAC4900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 14455
IP address blocks: 67.151.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:76:ce:f5:f3:6d:de:fe:ac:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=e5014142-e97b-4085-a5e7-5c1e1ab56fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:78:c6:97:ca:3a:c5:68:e0:72:bd:23:b8:
52:d6:cd:04:a9:1f:b9:cc:ba:81:6a:03:d4:7e:45:
01:ee:66:5b:12:bd:39:a8:05:b7:cf:1e:d0:eb:c0:
5b:6a:a0:58:03:b4:27:45:c8:ca:aa:cd:92:0e:54:
2a:fa:ef:2c:1b:6b:34:da:c4:e8:e0:37:f8:ce:bb:
83:87:de:7b:bc:fc:fc:14:14:a9:63:42:f3:cd:70:
8d:79:32:a6:4c:b6:d0:94:90:90:5b:65:4a:b2:f6:
ef:c9:60:99:d2:4d:be:ac:5a:89:32:1f:cb:33:9d:
b9:a9:ed:7a:7a:7c:6a:4b:7a:e2:ac:91:3f:92:ce:
e9:ec:b1:8b:3b:34:33:71:01:cc:ab:16:10:6a:c6:
f9:d7:bc:aa:31:29:fd:1f:1d:8b:ae:eb:16:cd:94:
05:19:dc:f0:6e:c2:20:7e:2a:42:df:48:07:42:da:
23:c1:f6:63:9f:59:82:88:9e:1f:67:6b:26:14:fb:
7c:eb:73:57:2d:36:1f:b3:ac:09:36:43:7d:9b:cb:
09:46:45:1b:d2:7b:ed:67:bd:f6:e3:d9:cf:f5:24:
19:43:c9:f4:63:34:22:7e:50:37:a3:aa:31:53:29:
f9:32:d4:d7:7b:56:17:98:09:d0:a4:c0:ed:6d:16:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CE:96:A6:49:78:E6:A9:DA:33:DB:9E:5F:DC:9F:3A:2E:84:13:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.151.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:ff:96:99:d5:db:19:00:ce:85:a7:19:25:01:5d:89:75:9e:
63:2f:cf:d7:df:f9:bd:a6:0e:bb:a0:26:80:e6:40:3d:79:70:
51:41:bb:6f:17:3f:80:52:9b:bd:f1:9d:80:a1:0a:b5:71:d7:
8b:cd:64:03:fb:e8:e3:cd:d3:09:91:16:9e:14:2d:07:0b:58:
3f:8c:bb:65:f4:b0:fa:a0:d5:6f:49:7c:83:d4:cb:ca:32:db:
68:fd:7d:97:f4:e0:f6:1f:b6:de:9b:40:72:28:60:80:29:59:
f3:5e:49:72:35:89:2e:34:eb:5a:8b:c1:b9:b2:2c:49:15:1d:
7c:e8:b7:cd:89:b4:81:94:d0:48:40:0f:cc:a0:51:9d:62:9b:
28:0a:02:27:f7:20:04:d9:bb:0d:e1:63:b7:41:6a:ec:33:4c:
ae:40:a1:07:76:fd:31:9a:ec:71:f5:7f:2c:75:77:81:2c:a8:
01:f6:72:3b:1a:f3:3a:9d:8d:b8:ff:d2:c4:24:75:6f:cc:19:
b6:4b:c7:38:32:06:81:35:a9:9c:f2:92:e9:36:b4:7d:e6:ed:
17:20:60:d6:a4:d6:37:ee:20:1e:79:a2:dc:60:eb:2d:96:d3:
17:4f:d0:dd:5f:36:bb:09:cb:88:32:b4:b8:ef:fb:54:ec:9f:
9a:9c:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:45 2026 by rpki-client