
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb0200b7-9831-3e63-a009-2663af5494f2.roa
File: cb0200b7-9831-3e63-a009-2663af5494f2.roa (raw, json)
Hash identifier: 3Tub26f5AW6YZUCaZ/gl6bdpTIfxf3RYKXPMUCx/vQ4=
Subject key identifier: ED:CB:0F:A4:62:32:F1:30:5A:A1:29:85:FF:3D:0A:8A:A7:40:71:D5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D8D8FFDEC6ED808F3CAB4C300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb0200b7-9831-3e63-a009-2663af5494f2.roa
Signing time: Sun 19 Apr 2026 01:00:23 +0000
ROA not before: Sun 19 Apr 2026 01:00:23 +0000
ROA not after: Sat 18 Jul 2026 01:00:23 +0000
asID: 7029
IP address blocks: 98.19.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8d:8f:fd:ec:6e:d8:08:f3:ca:b4:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 01:00:23 2026 GMT
Not After : Jul 18 01:00:23 2026 GMT
Subject: CN=43fc0632-d1af-492e-bbc3-6750f14dc25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:79:ad:d4:88:1a:3e:b5:ec:16:46:8a:83:
90:b4:be:07:e9:f4:43:69:66:6a:50:b0:b3:df:27:
a1:a5:04:b5:cb:8b:7d:45:3d:3a:94:54:47:5f:91:
e6:26:be:09:41:59:dd:6b:ce:37:1f:0b:89:e9:c4:
41:40:67:3a:c8:af:ae:82:c6:be:47:14:7a:21:64:
85:96:07:90:4b:fb:34:15:5c:0a:71:34:c2:6f:84:
6b:29:25:e4:b7:a8:96:f8:b8:f7:bc:35:7b:0a:c4:
d4:4c:0b:46:dc:21:7e:0a:f1:cc:3b:18:e8:86:90:
46:82:b8:8f:e0:e4:23:1b:85:a7:51:3f:f6:b9:b9:
7f:17:e9:54:a5:79:4c:0f:8c:a9:1b:35:e2:1f:37:
66:ee:c0:8f:e9:ea:3e:13:cb:39:2d:5e:20:66:3d:
e9:9b:7e:41:31:c1:a3:80:55:ee:5b:73:fd:b2:f6:
0a:24:aa:60:34:67:30:36:77:f9:11:a2:4e:84:52:
ec:0a:86:c3:bb:9d:1b:24:83:b9:33:9c:e6:f3:5c:
bb:a2:e3:d2:1d:39:37:f6:d7:93:04:0c:99:0c:66:
37:8d:78:62:51:a1:af:be:56:ba:e8:6e:1c:19:81:
6a:f8:82:83:23:e5:86:3b:3d:27:8a:a0:d7:97:b9:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:0F:A4:62:32:F1:30:5A:A1:29:85:FF:3D:0A:8A:A7:40:71:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb0200b7-9831-3e63-a009-2663af5494f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:38:c6:92:b1:7c:9d:1f:b4:c2:e9:42:d2:1c:00:90:01:4a:
09:08:db:6e:13:ac:1b:a5:70:2c:f5:18:48:89:46:4c:35:ff:
4b:35:4e:90:04:c7:9b:59:da:55:dc:fb:ba:41:e3:02:51:0c:
c6:f6:8b:50:1b:f3:5c:fd:27:28:e0:b0:3e:7e:4e:56:56:be:
50:78:97:35:06:f0:25:4f:3f:0c:b7:fc:66:d1:3b:67:3f:f7:
6d:01:e8:65:d0:7c:81:c1:a3:de:42:17:28:dc:4f:cf:6f:82:
f2:a6:40:9b:4c:d9:1a:e8:f7:6f:d4:fb:13:58:ff:d7:38:34:
db:fc:bb:a7:86:84:a8:76:11:cc:f4:e3:80:ef:a5:cb:c2:2c:
c9:f8:81:1d:8e:2e:8e:59:ba:9e:99:91:e2:37:a2:cf:4f:b1:
0b:78:12:ad:69:22:40:f0:6e:95:fe:83:7c:89:29:2c:6a:90:
90:34:77:96:40:b0:72:ad:62:4c:b3:82:86:a3:35:79:90:e6:
e9:04:91:01:70:39:b4:b2:34:40:67:a7:94:c9:1a:7b:49:34:
d2:3b:78:9b:29:ed:4d:93:09:2b:12:c0:2b:d9:00:b6:53:f1:
9a:68:8c:52:26:34:a3:1e:c9:f1:10:b4:c3:0d:b6:d4:65:11:
95:65:7d:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/3sbtgI88q0wwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk
NDNmYzA2MzItZDFhZi00OTJlLWJiYzMtNjc1MGYxNGRjMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qN5rdSIGj617BZGioOQtL4H6fRDaWZqULCz
3yehpQS1y4t9RT06lFRHX5HmJr4JQVnda843HwuJ6cRBQGc6yK+ugsa+RxR6IWSF
lgeQS/s0FVwKcTTCb4RrKSXkt6iW+Lj3vDV7CsTUTAtG3CF+CvHMOxjohpBGgriP
4OQjG4WnUT/2ubl/F+lUpXlMD4ypGzXiHzdm7sCP6eo+E8s5LV4gZj3pm35BMcGj
gFXuW3P9svYKJKpgNGcwNnf5EaJOhFLsCobDu50bJIO5M5zm81y7ouPSHTk39teT
BAyZDGY3jXhiUaGvvla66G4cGYFq+IKDI+WGOz0niqDXl7mF1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3LD6RiMvEwWqEphf89CoqnQHHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2IwMjAwYjctOTgzMS0z
ZTYzLWEwMDktMjY2M2FmNTQ5NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhOYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG44xpKxfJ0ftMLpQtIcAJABSgkI224TrBulcCz1GEiJRkw1/0s1TpAE
x5tZ2lXc+7pB4wJRDMb2i1Ab81z9JyjgsD5+TlZWvlB4lzUG8CVPPwy3/GbRO2c/
920B6GXQfIHBo95CFyjcT89vgvKmQJtM2Rro92/U+xNY/9c4NNv8u6eGhKh2Ecz0
44DvpcvCLMn4gR2OLo5Zup6ZkeI3os9PsQt4Eq1pIkDwbpX+g3yJKSxqkJA0d5ZA
sHKtYkyzgoajNXmQ5ukEkQFwObSyNEBnp5TJGntJNNI7eJsp7U2TCSsSwCvZALZT
8ZpojFImNKMeyfEQtMMNttRlEZVlfdg=
-----END CERTIFICATE-----
Generated at Wed May 13 12:19:48 2026 by rpki-client