
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa
File: 15be2d45-d867-3d76-b5bf-f422f8eab30f.roa (raw, json)
Hash identifier: Yh9cjmBNc2EzY8bMceGRM9AXxqnzlTBM6XAYCbcg8jM=
Subject key identifier: 6F:82:2A:78:9B:65:95:E9:AC:37:D8:E7:3F:7A:85:34:11:9A:32:36
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E104F1CD2520C5EB4DF096C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 7029
IP address blocks: 2604:cb00:32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4f:1c:d2:52:0c:5e:b4:df:09:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=676c4208-274f-46b1-b3a3-9b4027a695e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:6c:52:1f:b6:82:fe:32:19:64:de:48:1a:
92:99:76:ea:6b:be:c9:27:0c:c5:0d:51:75:89:51:
32:c8:52:42:d3:6b:0e:2e:03:f3:0c:1d:a5:50:7b:
fd:70:f4:9d:a3:33:ba:28:54:a6:77:e6:8a:c1:23:
0c:40:07:6b:fa:fd:69:9c:fb:c1:f1:db:ee:1e:1e:
d3:02:db:24:11:70:94:80:34:fa:14:0a:0b:44:69:
ea:f7:86:c7:ef:0e:29:7f:eb:4f:67:c7:8e:c0:65:
8f:2b:53:41:5f:4e:78:59:32:2c:b7:9d:0b:fa:8f:
7f:fe:eb:b4:16:d9:f5:ba:99:ab:d0:f4:5f:70:3c:
2e:97:97:e6:40:01:64:5c:a2:36:32:b2:20:a5:0a:
9c:14:90:e5:45:18:87:c6:19:e4:a4:c9:d9:6c:93:
e4:c9:70:8d:a4:80:2d:8e:fb:6b:1b:9e:83:a7:8e:
03:11:a4:b8:f8:c7:85:99:39:7d:d3:44:23:6e:ad:
37:ab:50:ea:6b:1e:17:7a:3c:37:89:47:a9:11:54:
e8:52:b5:33:43:6a:8c:da:97:6c:82:4e:c3:ee:36:
59:59:32:06:d7:7a:c1:89:8e:8e:4e:fe:2f:ec:ff:
4e:55:f9:71:7e:1d:e0:2b:c9:ed:3c:e4:82:e7:58:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:82:2A:78:9B:65:95:E9:AC:37:D8:E7:3F:7A:85:34:11:9A:32:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:32::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:51:31:ec:cf:21:b2:05:09:ee:01:71:af:8d:90:e7:0c:60:
cf:42:04:f6:47:1e:58:00:3a:68:2c:fd:45:88:65:5f:24:74:
0c:28:85:b4:e5:56:5a:4a:f6:99:5e:64:90:14:22:8a:e8:e2:
fd:71:02:0d:8e:80:cd:31:51:e9:0d:35:92:49:c0:1d:f2:dd:
48:04:ef:54:23:56:7a:ae:7b:a7:a9:a4:65:40:e0:e1:21:7c:
4f:cd:b1:d3:ad:b9:8e:f3:9a:bc:c3:35:eb:8e:a5:55:85:e1:
c3:a0:0c:bb:03:9e:32:24:49:cf:9e:93:76:a9:96:a1:d4:28:
a7:f1:57:fb:08:88:6b:8a:c3:29:02:ea:8e:40:05:f8:6c:45:
28:51:6e:52:47:e5:1f:e8:ef:c8:7a:2c:69:60:71:7e:84:fb:
e8:3d:34:79:5a:32:98:33:f8:db:3f:19:bb:ef:19:eb:03:eb:
11:7f:54:5b:a9:c3:86:8b:8f:75:84:88:35:91:58:fd:6c:cb:
fa:35:27:8d:7d:89:76:65:eb:71:29:44:d6:ea:8e:08:e8:18:
60:66:f4:5a:c9:c3:19:5f:7a:fd:a1:8f:52:49:6c:74:96:61:
93:1c:0c:c1:35:6f:cb:28:ad:74:31:fb:85:ee:63:68:95:2e:
c2:71:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:48 2026 by rpki-client