
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa
File: 13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa (raw, json)
Hash identifier: OvJ+Q4TTLTDrtujFZ3KFn+UIPmccifSPcKj+mzB/wOY=
Subject key identifier: F2:1E:88:3A:5A:CD:44:CD:5E:DF:81:3A:35:04:9C:FD:CB:F1:E7:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D7F9A9735FF65BCAA38FE5C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 7029
IP address blocks: 71.28.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:97:35:ff:65:bc:aa:38:fe:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=09ef7a92-21a3-41db-af25-bfecd35420a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:c7:f5:58:21:c2:21:50:d2:70:32:c1:e5:
82:99:9d:0e:93:cc:f6:7b:f4:75:20:6b:17:fa:a6:
16:11:43:4b:73:1e:4c:07:74:6b:fe:c3:60:be:e6:
ab:cd:b6:7c:57:0c:c6:1d:ee:cf:7b:7a:2f:b8:28:
2f:c0:b1:a7:e7:5e:ff:c3:53:2e:cf:8c:a6:25:46:
1c:cc:23:0e:09:d0:e9:09:e3:ef:56:5f:b6:0e:16:
bc:60:0c:b5:db:d5:fa:e0:f9:e2:43:3c:95:09:54:
06:54:a3:57:09:81:5b:e2:f5:f1:fa:dc:38:e0:96:
04:91:eb:56:98:a9:9d:98:ac:9c:b5:dd:9a:74:21:
a9:96:73:d1:52:7b:df:ed:82:25:8f:ce:50:56:5d:
75:8f:d4:81:dc:a8:93:ac:5f:7e:1b:67:3a:2e:ca:
78:e5:a6:8a:3c:c8:ae:0f:24:87:9c:af:cc:9a:66:
4d:46:0e:88:a3:85:2f:19:43:3e:ca:77:e5:ee:89:
e0:32:d8:4a:e4:43:b7:13:6a:18:78:88:77:73:c9:
9c:71:84:98:95:7d:ee:89:11:58:a5:03:1a:ee:9a:
13:33:95:3b:68:45:29:c9:38:49:cf:e1:2e:0f:7f:
b5:85:cf:a9:84:f3:9e:26:fb:64:d4:39:a8:2c:e1:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:88:3A:5A:CD:44:CD:5E:DF:81:3A:35:04:9C:FD:CB:F1:E7:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:5d:5f:d6:eb:e3:6a:1f:99:a4:2a:36:d2:53:81:5f:35:bb:
81:6f:61:cd:cf:ed:5d:25:69:03:0a:a4:25:f2:83:f7:4c:15:
f0:13:0c:e3:b4:e2:4e:25:73:8a:6a:95:57:21:51:97:fc:72:
fc:08:9a:b9:cb:19:ef:85:92:e8:18:6f:57:f6:a5:4b:84:dc:
a9:b6:d1:6b:f7:c4:89:f4:3b:0f:60:cf:fd:20:bf:d2:10:91:
7c:69:5a:99:01:89:6e:ee:f3:3a:9f:97:58:cd:59:ca:85:cd:
d5:c9:ae:49:c4:68:25:ac:a5:7a:68:22:83:a1:2b:ac:cf:17:
1f:1b:30:15:29:7c:c1:b9:b3:71:e2:d3:e1:e1:08:5b:e8:91:
51:c1:b2:f1:c8:ef:b0:76:38:d1:0a:52:9e:a6:86:1b:24:5d:
eb:4f:3b:9d:b1:eb:24:17:ba:6a:01:7a:d9:05:03:85:0f:4a:
73:ce:64:63:22:50:1d:d6:d9:f3:87:76:d6:54:5b:0e:3f:e4:
8e:b0:fd:aa:75:c8:16:c9:06:d9:82:b2:71:18:58:ec:cc:30:
95:a8:3c:4b:5f:f0:06:0b:87:de:b2:53:2e:93:97:ad:05:14:
02:5e:c2:83:f2:ea:2f:f4:e9:47:5d:66:76:2b:a4:d0:67:e1:
90:13:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:04 2026 by rpki-client