
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/110d94be-ee17-3fd2-9682-a663cbb49138.roa
File: 110d94be-ee17-3fd2-9682-a663cbb49138.roa (raw, json)
Hash identifier: OSZmv2ZHCUQXFe7dvWu5DG+0w6/q+BMbcTawCffa/0A=
Subject key identifier: B0:EC:F8:DE:00:7F:C6:E3:56:B9:47:58:36:6B:32:9E:75:66:BA:3F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584B9C0964CFDEE3FD9108A1E180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/110d94be-ee17-3fd2-9682-a663cbb49138.roa
Signing time: Wed 22 Oct 2025 19:52:44 +0000
ROA not before: Wed 22 Oct 2025 19:52:44 +0000
ROA not after: Tue 20 Jan 2026 20:52:44 +0000
asID: 7029
IP address blocks: 2001:19b0:c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:09:64:cf:de:e3:fd:91:08:a1:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 22 19:52:44 2025 GMT
Not After : Jan 20 20:52:44 2026 GMT
Subject: CN=f52a5fc7-3d8b-46b0-84e6-58dabacb309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:fc:76:2d:dd:30:a3:61:f2:a0:10:c6:ea:
0a:1d:51:36:2c:76:d2:db:ea:ef:bf:2f:ac:cc:0f:
bd:ee:60:2a:2d:6e:3c:29:d0:ef:5b:bb:e8:ac:9d:
03:f6:8e:07:10:bb:14:ef:d8:72:95:c9:d5:cf:71:
7a:01:80:40:b1:fd:5e:08:ab:ac:cb:38:c5:c3:e9:
fe:18:d4:2f:7e:a0:9c:21:65:f2:66:b2:a2:78:29:
a2:b2:f9:b8:f0:76:eb:27:39:7b:9a:99:54:9e:e5:
06:59:70:7e:dd:bd:fe:3e:10:6a:6c:5f:06:e8:e8:
93:7b:95:07:d9:00:82:7f:8d:cd:93:8e:02:4d:7d:
b6:38:eb:84:e3:65:77:b3:af:20:15:14:0a:50:f2:
13:49:8a:de:1d:05:31:c7:4d:be:89:b5:b3:3d:e5:
70:2e:6c:ec:1f:50:b6:7f:bb:88:f3:7c:a8:27:5a:
15:99:f3:2b:85:fe:8f:8c:bd:f0:92:49:41:d6:3d:
17:b3:3c:74:d0:37:64:6b:11:70:5e:dd:e7:75:8a:
a2:ee:9c:7f:4f:5a:d5:3c:70:d6:53:36:84:21:fe:
ef:4e:29:8e:1f:9e:f3:5e:e7:49:96:4c:07:d0:70:
8d:8f:33:8d:18:81:90:dc:0c:30:41:b7:94:25:ee:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EC:F8:DE:00:7F:C6:E3:56:B9:47:58:36:6B:32:9E:75:66:BA:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/110d94be-ee17-3fd2-9682-a663cbb49138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:19b0:c0::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:14:20:99:52:9f:75:ba:b5:a0:90:c2:9d:d6:d1:3b:00:65:
87:22:b0:c6:31:61:b4:cc:31:92:50:1c:7e:35:0f:ff:28:46:
eb:89:56:8f:25:17:c5:e8:07:b2:ee:22:98:5a:25:65:e7:f6:
f5:ba:fa:7e:5e:47:9b:3e:0f:ca:37:f9:57:3e:76:28:97:59:
24:4b:b1:55:9c:fd:51:7b:2b:69:2c:37:65:90:a4:d4:40:3b:
43:51:6a:37:b3:9b:72:2a:9e:12:a9:78:cb:8d:9d:81:3d:58:
df:9e:e7:39:c8:df:76:a9:2d:96:b9:d4:29:18:1e:05:0b:49:
50:91:a0:78:84:1c:6d:b1:c3:47:95:7c:5e:8f:4e:9e:8b:7d:
8f:16:4b:00:aa:cb:27:15:04:b3:32:f3:2f:60:cb:0c:1a:7d:
e0:76:6d:52:57:c5:de:f7:4d:20:6a:74:1d:4d:52:1e:83:21:
8c:38:bc:14:b3:04:da:ad:47:48:b0:0f:e9:6b:e2:58:72:f1:
08:15:8b:e6:e8:ad:0b:3c:5a:e9:a1:69:97:8a:ad:2d:eb:74:
06:68:fa:da:ee:9e:6f:2c:72:f3:e5:3c:46:a8:85:67:8d:21:
99:fe:f1:2e:8a:f1:52:e4:e5:2c:a6:87:8b:76:d1:92:63:ba:
68:99:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:53:57 2025 by rpki-client