
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/139e7e11-d5dc-313a-9364-4ee26d68abcf.roa
File: 139e7e11-d5dc-313a-9364-4ee26d68abcf.roa (raw, json)
Hash identifier: 90MPZHkqFZ2rDJ3BJo1fKW+tbf3rtVrKSRPnlKjON7Y=
Subject key identifier: 13:1D:59:C1:BD:A8:6E:A2:E3:6E:6F:AB:08:14:C4:AC:CF:FC:3D:89
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D7F9A995385AEC4477A03AA78
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/139e7e11-d5dc-313a-9364-4ee26d68abcf.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 7029
IP address blocks: 75.91.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:99:53:85:ae:c4:47:7a:03:aa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=da7e5c78-6498-48ae-a1d4-80716883a4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:0c:11:13:23:77:ec:fa:6b:d4:8d:92:68:
f5:ac:ea:4c:9d:7e:31:94:6f:f3:f6:bf:f7:bb:f4:
96:67:3a:a7:c2:2e:cb:0f:d0:2e:4f:3e:c9:1b:27:
87:fa:70:ab:57:66:1d:aa:b9:15:74:ea:19:76:8f:
85:9d:fa:ee:37:63:e8:a0:2f:c7:86:5b:9a:f3:00:
dd:41:74:d8:31:8d:e9:73:cb:c6:cc:ee:bb:d3:5c:
2b:71:4d:fe:20:ff:0e:31:2f:a0:73:8f:47:b4:78:
de:36:60:27:8e:d9:b0:a4:38:ca:7e:47:b3:f7:4c:
aa:a2:38:68:1f:4b:c7:7e:2e:45:05:d4:57:8f:4a:
f4:50:67:50:0c:69:69:f6:0f:6b:65:5a:3c:bd:8a:
5a:8b:df:32:c4:a9:72:61:05:74:53:a0:c7:ec:f8:
fe:50:8c:08:9b:4f:9b:2f:e1:e6:8d:4e:73:1c:e0:
f2:6e:66:1e:9f:00:44:fa:85:c7:72:25:7d:f2:f8:
0e:a2:91:42:f8:e6:64:1c:61:f0:f8:cf:63:1d:dc:
22:ba:8b:d0:4c:ed:0e:12:2f:1d:de:48:cc:02:ac:
0f:e8:a8:e4:bd:2f:d0:47:32:68:50:b0:6f:83:a9:
d1:e5:6a:7c:33:2a:d4:b8:a9:65:b1:2b:2a:ba:d5:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:59:C1:BD:A8:6E:A2:E3:6E:6F:AB:08:14:C4:AC:CF:FC:3D:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/139e7e11-d5dc-313a-9364-4ee26d68abcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:2a:50:3c:b6:e5:12:23:f7:95:c4:72:e1:74:29:dc:a4:de:
0a:04:e0:7f:90:8e:fd:7b:e9:e7:8d:48:a7:01:3c:59:19:be:
54:b6:c9:93:5b:5c:f3:cf:db:60:24:f6:e2:ed:8a:7d:e4:69:
d7:bf:de:b3:a3:58:de:5a:a4:95:3b:e7:f3:12:c0:f4:da:35:
13:89:88:bc:dc:f7:ac:84:91:54:9a:fc:80:13:96:08:87:7e:
e2:01:ed:48:96:cc:fc:08:50:d0:ac:da:8f:0c:d4:c8:68:dd:
82:8d:69:eb:74:66:92:de:76:1d:26:3c:71:1a:69:ed:2d:be:
93:20:04:43:71:14:bb:69:7a:e1:2c:cc:52:91:d8:48:21:fc:
39:ed:54:a8:97:70:15:45:39:ce:bb:24:5a:cc:54:71:1b:0d:
de:b3:37:9e:c3:8b:06:31:c7:fc:ef:bd:b5:ae:5d:44:2c:87:
2d:f8:7c:34:ff:6e:6e:b9:bf:50:7c:81:70:12:b4:cc:af:e8:
95:ef:be:26:16:04:3f:2e:ec:5f:a2:91:e1:7b:23:5c:e7:c8:
5c:ba:7a:33:0e:e0:1b:d7:0a:88:0f:b1:a5:14:2f:90:99:b2:
23:7c:6e:60:bf:6c:3f:e8:24:a1:af:44:30:6d:48:88:22:f2:
3f:c6:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:35 2026 by rpki-client