
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa
File: 126dd560-3b8f-36a3-82c0-bc110b196871.roa (raw, json)
Hash identifier: G18daZjulLEVnKxWLgyzZxlSPx1o+uZ3yES9fABMK3o=
Subject key identifier: 2C:95:43:BA:CA:4C:72:54:E5:E7:33:8C:1D:9A:6F:C8:28:B4:C8:A4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F5E62CA2F0192806FBAA06080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 7029
IP address blocks: 75.88.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:ca:2f:01:92:80:6f:ba:a0:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=dd546a93-6a28-48b2-8075-ad0e126233e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:1e:fd:4e:90:51:65:3e:01:8b:b3:9c:f2:
5f:26:b3:c9:fa:66:63:c3:d5:29:e8:8d:be:2e:4d:
e9:2d:ad:19:70:66:d3:75:ff:f0:9f:0c:1e:24:5c:
c6:f7:9f:90:5b:1e:94:0b:ba:92:7b:2c:b5:79:f4:
4c:61:49:89:65:46:b0:bb:fe:30:ef:79:d6:30:76:
13:c0:03:b1:7b:9d:1f:9b:80:89:4f:07:33:e3:b2:
9b:4b:22:3a:78:32:10:7a:cf:ff:6b:11:85:16:f3:
22:3e:f5:b4:0a:18:11:05:7c:24:08:23:26:90:63:
bc:87:e5:22:5d:30:5b:a1:09:2a:57:46:b6:f7:43:
33:7d:63:87:ab:93:8c:3a:d6:09:75:ec:36:52:ba:
af:79:e3:b2:35:13:a2:0b:64:59:97:2b:c2:c7:aa:
73:40:13:d3:17:10:84:ef:b7:9d:0a:ed:13:d8:c3:
48:2c:37:06:68:ff:56:21:90:e5:4b:05:79:8d:b9:
a0:88:68:17:01:d8:42:2b:24:bc:b0:63:db:c9:00:
c8:8a:49:2f:9e:0a:dd:47:29:d4:98:95:2b:ff:ca:
ab:51:27:29:e7:51:a2:0a:a7:9f:8d:1d:1b:d1:07:
f5:46:7b:c5:e7:39:b5:31:e5:f8:20:17:3c:d0:60:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:43:BA:CA:4C:72:54:E5:E7:33:8C:1D:9A:6F:C8:28:B4:C8:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ed:96:05:bd:8e:61:0d:22:17:f7:9f:6d:77:78:85:d1:33:
55:5b:db:04:a7:5f:f7:eb:13:98:cc:37:9a:9f:1e:d2:47:a8:
96:2b:98:28:24:17:39:b4:74:12:73:c8:82:42:c3:f6:40:c3:
92:54:af:6b:00:2c:33:d5:38:40:bb:47:5d:10:29:c7:2a:4d:
5e:d7:ea:d3:9c:ff:df:65:78:76:ed:df:91:cf:23:82:63:56:
c5:be:8b:f4:f1:f4:6a:16:b6:8e:59:5c:c5:51:9d:09:45:a1:
dc:ba:5c:da:31:bf:4f:5c:88:0e:50:2a:0b:ce:96:e2:0d:50:
a3:df:fa:53:f4:38:dc:21:d5:87:b4:64:11:6e:7c:55:6f:63:
87:9b:53:01:6d:8e:f2:09:35:02:eb:e1:fa:89:1a:fb:c7:dc:
0f:bd:8c:3e:7b:0a:42:6f:3f:b0:d5:82:d9:67:fd:c8:bc:65:
e1:87:34:69:b7:4d:2f:3c:bc:ec:fc:5c:35:b9:56:62:a9:0d:
4e:f5:83:0a:3a:8c:97:30:69:46:8f:53:5d:bf:e0:44:28:38:
c4:be:d2:8f:d9:6a:f5:de:6e:3f:fc:8c:b6:3f:bd:52:7c:80:
3a:0c:0d:7d:ca:9f:54:ad:19:fa:1f:40:72:a7:5d:5f:f2:d6:
d1:64:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:13:57 2026 by rpki-client