
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa
File: e4efbffc-2324-3f3b-be0b-927acd18aae1.roa (raw, json)
Hash identifier: UVDFqCMxpzdehcx+GUVCq+EsEfngrvbNMil9gNCnCKY=
Subject key identifier: 0E:F0:3F:87:9D:D5:4B:BD:F4:31:C4:01:52:28:33:89:34:9A:FB:AD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D300AA9FB5EC9326B63CD67A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 7029
IP address blocks: 173.191.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:a9:fb:5e:c9:32:6b:63:cd:67:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=ddcd3925-f4bf-4707-b63b-7ff9a895a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:2f:04:74:de:13:e8:3f:18:e1:1d:cb:0e:
bf:24:fe:5b:c3:5b:13:14:f9:63:77:95:52:59:07:
c0:aa:27:0a:b4:fc:9d:48:e2:17:dc:fc:26:21:a6:
d9:59:42:cd:e3:f4:d4:ff:68:2d:5b:ba:90:6d:4a:
1d:d8:e7:7d:ff:4a:2c:32:d9:3b:fb:61:86:a3:36:
ff:b1:23:03:ae:29:a0:1e:56:72:78:01:bf:60:02:
91:53:23:88:af:79:a1:c7:43:f7:75:d6:ca:ee:7c:
3d:15:87:3a:92:8c:a1:28:2c:58:c5:54:22:26:73:
c7:6c:8c:7d:0b:2d:d6:44:79:5b:ce:1a:23:a2:ec:
b4:f0:e4:f8:a5:ed:09:37:13:d1:ba:ac:01:a3:e4:
50:96:59:75:38:83:0c:e2:9c:9a:4d:35:7e:58:1d:
79:49:dd:95:7a:8c:a9:be:57:b1:ca:ff:d5:54:fd:
a4:b6:96:fa:4f:42:58:cb:47:81:b1:99:a6:fb:20:
52:15:12:44:8a:8c:60:a8:4f:5f:f1:2d:21:2e:dc:
9e:c6:1d:06:2f:14:4c:ba:db:19:77:22:b5:ad:cf:
78:6c:2f:b6:d0:31:01:0d:19:7c:ef:05:58:70:e3:
f4:09:9e:fc:e0:0c:ef:7b:e3:08:4f:ef:f2:5d:c2:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F0:3F:87:9D:D5:4B:BD:F4:31:C4:01:52:28:33:89:34:9A:FB:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:02:4f:bf:98:9a:bb:2e:9c:0e:12:8b:18:08:4c:15:2a:19:
03:f3:43:15:65:fb:0b:50:88:60:8c:b3:69:d3:57:7f:35:51:
2e:ee:fe:d0:bc:e9:29:5b:34:f4:84:b7:52:48:11:32:84:c6:
63:d3:6e:1d:1e:51:f9:ed:ef:96:33:23:63:a7:f1:13:56:cc:
bc:dd:f5:1a:f8:ac:e4:96:f0:3d:96:a8:ab:a7:4e:f9:93:b1:
49:55:9e:53:3c:29:21:63:12:35:e2:49:c2:86:22:02:f2:80:
a5:f7:30:8b:23:94:cd:30:71:59:b9:ab:f3:da:b2:be:dc:22:
46:f1:56:68:5f:91:00:4a:7b:b9:43:26:20:3f:ef:3a:5d:f3:
67:87:b5:45:6f:7d:5c:11:cf:4a:4a:8e:90:3c:8e:80:bb:a4:
b1:40:e2:33:5d:de:3a:0a:22:d3:fd:c7:94:03:0f:88:a8:5c:
e4:c6:c9:36:69:13:be:37:76:f1:f2:ba:ce:36:bf:70:6c:ab:
10:68:c4:52:b0:b4:1d:ad:07:15:bb:b1:42:44:f6:f3:80:a8:
b2:0e:ee:10:ac:ce:e6:9a:1b:42:48:84:b0:b6:1f:8a:03:98:
ba:25:f6:96:97:82:68:12:c4:2b:2c:cb:47:8e:1c:ad:96:aa:
b6:5f:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:10 2026 by rpki-client