
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa
File: c26c0b20-8706-3524-a0ea-85fc730e35b1.roa (raw, json)
Hash identifier: 2r6SF23prMFXWmu/xo9NqidxEcHD3rT5lwz4YM7ldHc=
Subject key identifier: 01:E6:98:7E:CB:98:9A:20:4E:CD:43:A2:7E:EF:AE:34:B1:3B:25:E6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300AA9DC7B89634109970800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 72.25.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:a9:dc:7b:89:63:41:09:97:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=87614a34-b716-4fe6-9f4d-6ad33ed82d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:c2:bb:0f:8f:7d:ed:4b:55:0d:a9:21:83:
02:8f:b5:be:1a:57:a7:21:77:38:08:61:f0:4a:96:
f0:60:7c:bf:f3:9b:5e:3d:cc:29:f9:39:29:c5:5d:
e8:98:cf:be:5b:64:9f:14:83:9d:f0:30:75:2e:bc:
f9:88:21:14:cf:d7:47:7e:63:b5:9b:83:b5:4d:13:
b0:49:af:19:26:54:2f:b6:5c:ca:90:6d:3f:d8:43:
90:7e:bf:f7:da:e7:7a:21:49:d0:c9:9d:d2:10:2e:
6c:41:46:00:37:fd:be:13:55:19:d4:1f:c2:97:c5:
12:5f:6e:c4:af:c1:37:86:cf:63:e5:de:24:9c:f3:
f3:6c:3b:e5:97:de:6f:3f:a5:d8:09:52:78:b2:32:
0e:9b:f5:95:1e:c3:a9:71:1c:9c:1d:c5:05:3f:a7:
30:d0:96:20:cb:7e:b3:f4:a9:76:c9:42:82:55:9e:
41:27:5f:39:64:2d:8f:2f:04:87:a9:c0:ac:97:f3:
09:09:ae:69:58:3e:f0:ec:47:ae:b3:87:24:e1:55:
31:27:03:37:70:dc:9e:de:3c:f3:9b:43:48:6d:d9:
92:f2:97:ef:f5:0b:46:c3:fe:b6:ea:6b:33:d2:8a:
ef:5b:8c:8d:f3:2c:6c:ed:07:cd:16:5b:5e:e9:77:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:98:7E:CB:98:9A:20:4E:CD:43:A2:7E:EF:AE:34:B1:3B:25:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.25.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:d9:2e:10:63:fb:a3:9d:9d:33:bf:1c:44:93:40:20:fc:f4:
17:81:7b:c6:6a:b3:d0:ab:33:04:d6:f4:e6:55:3a:82:7b:2f:
4f:9f:48:be:1b:5b:f2:7f:2a:99:53:a7:f8:42:56:4c:5d:e1:
42:11:49:81:d8:b3:05:f5:d4:9e:2c:bb:11:b6:54:bb:de:1b:
a9:9f:d8:f5:ba:d4:45:37:e3:5c:1b:30:2b:8a:9e:95:88:4f:
fe:ba:51:8b:55:20:3f:d5:68:d0:b7:d0:db:d2:07:c2:54:69:
ef:f3:26:87:ea:e0:18:29:8c:70:c4:eb:f2:96:26:45:e3:f2:
29:37:53:62:45:0e:db:ed:2f:85:af:a2:36:ff:63:7b:ab:6b:
ee:52:85:5b:70:4d:e6:f4:99:8c:e1:9b:4a:b2:2f:eb:9f:13:
55:c8:5d:42:62:c7:0f:91:e7:3c:9b:a2:f3:0a:39:9d:c4:b1:
d3:55:4f:e3:d2:2c:fe:e3:d9:c5:d9:3d:13:04:d8:1c:81:04:
48:a8:dd:b5:52:d1:1f:19:dd:ec:44:03:cc:fa:f4:6f:72:82:
8a:cf:d2:7d:30:d4:fa:33:f4:f8:1f:93:e7:8a:65:f2:5f:5f:
de:86:1f:54:72:4a:00:46:47:a8:8f:99:29:ff:a9:de:c3:46:
4a:09:27:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqnce4ljQQmXCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
ODc2MTRhMzQtYjcxNi00ZmU2LTlmNGQtNmFkMzNlZDgyZDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiPCuw+Pfe1LVQ2pIYMCj7W+GlenIXc4CGHw
SpbwYHy/85tePcwp+TkpxV3omM++W2SfFIOd8DB1Lrz5iCEUz9dHfmO1m4O1TROw
Sa8ZJlQvtlzKkG0/2EOQfr/32ud6IUnQyZ3SEC5sQUYAN/2+E1UZ1B/Cl8USX27E
r8E3hs9j5d4knPPzbDvll95vP6XYCVJ4sjIOm/WVHsOpcRycHcUFP6cw0JYgy36z
9Kl2yUKCVZ5BJ185ZC2PLwSHqcCsl/MJCa5pWD7w7Eeus4ck4VUxJwM3cNye3jzz
m0NIbdmS8pfv9QtGw/626msz0orvW4yN8yxs7QfNFlte6XepPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHmmH7LmJogTs1Don7vrjSxOyXmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzI2YzBiMjAtODcwNi0z
NTI0LWEwZWEtODVmYzczMGUzNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBkQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfZLhBj+6OdnTO/HESTQCD89BeBe8Zqs9CrMwTW9OZVOoJ7L0+fSL4b
W/J/KplTp/hCVkxd4UIRSYHYswX11J4suxG2VLveG6mf2PW61EU341wbMCuKnpWI
T/66UYtVID/VaNC30NvSB8JUae/zJofq4BgpjHDE6/KWJkXj8ik3U2JFDtvtL4Wv
ojb/Y3ura+5ShVtwTeb0mYzhm0qyL+ufE1XIXUJixw+R5zybovMKOZ3EsdNVT+PS
LP7j2cXZPRME2ByBBEio3bVS0R8Z3exEA8z69G9ygorP0n0w1Poz9Pgfk+eKZfJf
X96GH1RySgBGR6iPmSn/qd7DRkoJJ2U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:20 2026 by rpki-client