
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31c3d2dc-5c15-3eab-9db1-41dc3f67e65a.roa
File: 31c3d2dc-5c15-3eab-9db1-41dc3f67e65a.roa (raw, json)
Hash identifier: 2CoKjbiG2Ej7Zjuo0IV4xCb/oIsFbpuqZH+TgICr/WE=
Subject key identifier: A9:9B:DE:61:AD:6D:40:CB:5F:39:4C:70:57:98:2C:AE:46:BC:17:7B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D7F9A928D56AB985EBBE712B8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31c3d2dc-5c15-3eab-9db1-41dc3f67e65a.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 7029
IP address blocks: 75.89.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:92:8d:56:ab:98:5e:bb:e7:12:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=e8e8c47b-bece-4ae8-be5a-3044d85c6a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:0b:f4:8d:f8:b7:b9:07:d8:26:1f:e2:1b:
9c:66:39:e9:21:dd:44:f4:02:bc:15:1c:17:38:28:
60:17:87:c8:ab:9a:d7:28:79:53:08:ec:2d:2d:99:
a0:8b:d8:c1:0b:da:63:d3:6e:e0:24:37:63:a1:08:
49:25:61:51:12:63:1f:79:e5:eb:4f:5b:d5:24:bb:
e8:84:3f:76:5b:72:27:38:58:46:8c:59:43:81:68:
4e:89:be:c0:e3:90:30:8c:a0:f1:e7:3d:c0:5b:ad:
3e:fa:e3:7f:36:41:6a:df:64:cc:46:45:66:f5:45:
d2:b1:c3:88:54:49:91:f0:25:4a:bb:d8:18:cd:f8:
71:38:82:af:d1:88:79:6d:94:ed:ad:4f:39:2b:eb:
bc:95:f5:a7:bb:79:3f:d2:1e:f9:50:62:bd:08:55:
e2:9f:e8:bf:e2:20:86:10:e0:bb:ef:fc:e8:7a:09:
47:a9:6e:e3:1a:a8:08:52:d0:97:25:9c:6a:3b:6c:
ad:65:d9:1e:8e:fa:d4:a1:21:08:86:e6:a1:3e:b4:
af:8b:9b:88:21:ae:8f:b8:4a:51:84:5f:d7:ab:67:
10:d2:8e:1c:f9:58:15:c8:37:36:9b:87:58:41:15:
d0:2c:f8:f7:48:59:78:c2:24:80:dc:17:d1:06:8d:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:DE:61:AD:6D:40:CB:5F:39:4C:70:57:98:2C:AE:46:BC:17:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31c3d2dc-5c15-3eab-9db1-41dc3f67e65a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:79:a8:6c:bd:b1:e4:71:58:c9:28:dd:7a:b0:61:82:ee:8d:
eb:92:e0:59:cd:8f:eb:70:c8:d4:38:71:c7:c4:29:42:da:bb:
d8:18:5f:30:f0:7a:ba:c5:5b:ea:42:91:33:50:83:5a:2a:5c:
8f:a4:33:ff:02:e3:86:36:fc:23:9d:93:99:3b:ec:c6:79:d4:
88:72:55:b9:fd:40:a6:33:0e:eb:d4:fe:67:1c:4a:33:16:12:
af:c9:f0:29:d4:dc:21:0c:55:08:48:d9:70:ca:f6:7a:3a:0a:
33:0c:3b:89:5a:76:a1:83:21:7d:18:b7:51:42:66:24:62:30:
32:ae:49:56:95:04:a8:1b:20:21:14:93:fa:82:c4:47:fb:cd:
b3:cc:ce:59:69:6d:91:fa:a4:ea:2e:e9:d7:4f:42:1f:5c:99:
b6:db:7f:c9:4a:0d:11:6c:96:f5:e2:8e:5b:58:22:bd:39:e5:
1b:cc:6b:f6:b3:8d:46:62:c0:fd:85:41:5c:e9:84:fb:cb:f7:
2c:76:fe:07:a3:22:62:ae:1e:b9:72:56:46:59:89:82:5c:ba:
c3:92:57:97:d9:a5:12:d2:97:b5:50:71:56:83:9d:98:80:d5:
07:dc:32:65:04:2f:44:cb:c7:8f:78:dc:44:70:49:ff:04:5b:
d0:15:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:57 2026 by rpki-client