
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb28950a-cabb-30af-8caa-c5bb31de0cac.roa
File: fb28950a-cabb-30af-8caa-c5bb31de0cac.roa (raw, json)
Hash identifier: bB3JspcDmuZDNlz12TJJynHh9Q6aIQp+e+ajfpZar84=
Subject key identifier: 58:32:DA:F1:56:9E:EE:71:F4:AF:96:23:1D:D8:B1:A2:5F:65:04:4E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584DCF2B1CB099B4D2D2B57CD580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb28950a-cabb-30af-8caa-c5bb31de0cac.roa
Signing time: Tue 12 May 2026 13:00:30 +0000
ROA not before: Tue 12 May 2026 13:00:30 +0000
ROA not after: Mon 10 Aug 2026 13:00:30 +0000
asID: 7029
IP address blocks: 98.16.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:2b:1c:b0:99:b4:d2:d2:b5:7c:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 12 13:00:30 2026 GMT
Not After : Aug 10 13:00:30 2026 GMT
Subject: CN=0a16a114-cec8-4492-b2b8-ac2b63da5f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:2a:97:a9:ff:c6:1e:b2:e3:26:e2:50:7f:
ed:9e:84:a3:0a:49:2e:76:a1:aa:94:68:37:a2:9f:
af:af:eb:f8:2f:33:d2:7e:73:18:3a:4d:80:1c:f3:
95:9c:0d:e6:f7:a1:f6:66:9d:45:58:f1:12:f5:95:
0f:96:2d:0d:a1:71:fc:e0:8c:bc:46:5e:6b:a7:a9:
a1:8e:3c:86:4b:8f:75:68:48:34:87:1b:7c:65:b7:
74:e2:95:4d:48:a0:c8:06:ab:5e:b0:ac:75:f4:28:
64:b8:bb:dc:4d:4c:bf:5e:2c:a6:51:11:3b:ce:1d:
09:00:31:85:50:14:95:b2:da:ae:c7:6f:96:d1:e0:
f3:11:4b:0b:31:2a:31:8f:ad:9e:83:2c:25:70:e0:
43:35:df:ec:50:38:a4:64:13:eb:21:d3:9b:c7:ad:
30:a6:6f:26:92:fe:f2:83:0f:0c:43:dc:b1:5d:ee:
15:99:08:f1:0f:24:96:f2:fe:0c:99:d5:58:ac:4e:
ce:bb:dd:6b:be:c5:6f:50:16:c2:87:9a:c2:1a:f8:
5e:13:03:63:5f:07:cb:14:b3:6e:82:aa:ca:96:7f:
c9:d6:a0:a8:04:cd:d7:cd:0f:cd:02:43:64:5d:db:
d7:28:84:9c:98:4a:c9:bd:09:a8:73:ed:0c:d9:f2:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:DA:F1:56:9E:EE:71:F4:AF:96:23:1D:D8:B1:A2:5F:65:04:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb28950a-cabb-30af-8caa-c5bb31de0cac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:dd:c1:be:6d:45:46:d3:86:3d:d9:48:e6:8c:7f:4f:0d:a6:
e9:30:40:ec:6b:3f:fa:17:cc:10:8c:64:cc:08:59:15:da:5c:
36:7f:8c:5e:ae:b5:b2:e8:86:29:c6:ac:df:36:31:64:90:ca:
a3:11:5f:aa:49:64:8b:ec:0e:cb:3b:90:3a:1b:74:f8:c9:05:
ec:4f:78:73:6d:7a:00:93:4d:0b:f6:d5:15:d3:f2:29:21:26:
71:88:7f:a1:58:a0:16:5e:be:5f:d0:73:78:18:15:3f:ac:56:
56:61:45:f3:73:79:06:2e:13:d9:0b:fb:84:cc:29:d2:83:a7:
c5:0a:24:f4:82:0d:7c:df:73:43:6d:a9:7b:4c:e9:6c:91:5c:
8e:b1:92:aa:46:e6:2d:28:4e:62:d8:7d:dc:a6:e9:86:bb:7a:
93:d3:db:28:40:79:b6:2e:b2:9d:db:bf:09:5c:06:a9:21:5b:
7a:c9:56:52:ad:f4:f7:fb:29:38:fe:a3:46:52:73:93:26:3f:
26:ec:d7:e6:d8:ab:6b:f4:12:87:48:78:96:6e:b5:de:a4:c3:
ff:ce:ea:41:5c:83:9f:7a:a2:0e:db:4e:7c:e8:9f:d8:69:4d:
5d:ad:ee:ca:d6:ca:ed:19:02:96:5f:e4:e3:c1:f0:39:45:84:
32:02:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:57 2026 by rpki-client