
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa
File: 3291ce7e-1c70-365c-8047-a30a9edf18a4.roa (raw, json)
Hash identifier: 5lOTywpuU4mu64M8apt8Kp5Gqv/DWszdotEJNwkrk7U=
Subject key identifier: 0D:C5:18:8B:34:05:24:81:76:14:44:A5:2F:CE:EC:92:AE:4B:6A:E5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D00B25C084D4AA72950232500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 7029
IP address blocks: 98.22.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:5c:08:4d:4a:a7:29:50:23:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=285496d6-e192-45b9-bd76-883b94042c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:f5:a8:1b:1a:c3:cc:41:ed:48:0d:d2:31:
b4:4d:29:60:8e:ea:73:80:02:84:ac:12:d2:f2:32:
90:f0:eb:37:6c:b3:e5:7f:53:0a:76:be:71:29:13:
d1:d6:b8:1a:5f:50:d9:24:99:ee:a5:ec:dd:cf:f0:
fa:6e:cc:3e:40:7d:b2:9a:67:27:f2:54:14:a0:90:
8d:99:c5:10:39:9a:6b:38:fa:4d:2f:12:3a:81:17:
f6:b8:7c:b6:c9:c1:c8:c8:3f:6f:a8:71:5f:cc:f9:
a7:08:cd:80:1d:61:36:4d:02:e9:0b:c4:f6:dd:03:
09:72:c7:cc:53:23:3c:4f:9a:c4:d4:f0:30:66:39:
ee:a0:3d:e8:ce:d7:23:1d:1c:9c:15:c1:ad:4a:5f:
0d:57:64:4d:e3:3f:cd:04:9c:d8:8f:fb:d2:13:8e:
ac:93:4a:ac:c9:a9:ea:76:3c:74:fe:bc:64:19:de:
d6:8d:ad:2f:97:4d:3e:b2:1a:f5:37:cb:a3:10:78:
51:9e:72:0e:fe:03:b5:00:da:aa:39:7d:22:13:6c:
a1:bc:75:00:17:e0:b6:c8:92:0e:ac:c6:9a:ae:a7:
ea:90:d3:95:cc:2e:81:2c:5b:55:18:8c:61:42:73:
15:47:f3:5d:26:8a:a1:97:91:fe:78:b4:2a:bb:76:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C5:18:8B:34:05:24:81:76:14:44:A5:2F:CE:EC:92:AE:4B:6A:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ea:6c:7c:5e:3e:2a:a4:35:1c:57:4f:30:ea:e6:82:51:ff:
c6:f2:0d:6b:04:5c:d4:cd:8c:31:70:fc:25:0d:6a:10:00:a5:
c7:78:80:2a:f5:6c:0c:e1:a8:4f:ba:d0:29:72:7a:da:4a:2f:
c8:a1:3e:30:36:f8:b1:55:0d:a1:0a:eb:01:6d:b0:e3:48:9b:
c9:a8:1b:9f:f7:60:53:04:0d:ad:e5:e8:fb:40:fc:8d:da:14:
b3:5c:2b:84:fd:3c:05:94:f2:29:e9:9f:d7:19:a3:58:bf:67:
a6:14:e2:44:71:a4:41:6e:be:91:43:df:f1:d0:ec:7d:13:f4:
17:42:fc:9d:5c:6f:f7:31:11:80:36:31:cf:46:c5:f6:b0:f3:
ce:13:97:2c:06:be:a9:26:34:dc:22:39:e8:f2:41:e4:4c:94:
96:e3:b6:da:4b:64:e9:65:78:f7:89:e2:c7:62:77:3f:2c:3f:
e1:90:86:48:7a:4e:fa:9c:54:39:5b:fc:c9:66:bf:db:42:f3:
a9:fc:77:9a:80:42:d7:fa:ec:01:96:f5:0f:fd:ef:7d:9c:1a:
0a:39:18:83:a9:2f:94:23:a8:a1:83:3e:cb:b0:67:61:44:0d:
dc:ae:1c:18:46:2b:91:f2:91:39:73:25:c8:ec:88:30:0c:1a:
6e:71:42:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AslwITUqnKVAjJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
Mjg1NDk2ZDYtZTE5Mi00NWI5LWJkNzYtODgzYjk0MDQyYzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCH1qBsaw8xB7UgN0jG0TSlgjupzgAKErBLS
8jKQ8Os3bLPlf1MKdr5xKRPR1rgaX1DZJJnupezdz/D6bsw+QH2ymmcn8lQUoJCN
mcUQOZprOPpNLxI6gRf2uHy2ycHIyD9vqHFfzPmnCM2AHWE2TQLpC8T23QMJcsfM
UyM8T5rE1PAwZjnuoD3oztcjHRycFcGtSl8NV2RN4z/NBJzYj/vSE46sk0qsyanq
djx0/rxkGd7Wja0vl00+shr1N8ujEHhRnnIO/gO1ANqqOX0iE2yhvHUAF+C2yJIO
rMaarqfqkNOVzC6BLFtVGIxhQnMVR/NdJoqhl5H+eLQqu3Y27wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3FGIs0BSSBdhREpS/O7JKuS2rlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5MWNlN2UtMWM3MC0z
NjVjLTgwNDctYTMwYTllZGYxOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhYwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALqbHxePiqkNRxXTzDq5oJR/8byDWsEXNTNjDFw/CUNahAApcd4gCr1
bAzhqE+60ClyetpKL8ihPjA2+LFVDaEK6wFtsONIm8moG5/3YFMEDa3l6PtA/I3a
FLNcK4T9PAWU8inpn9cZo1i/Z6YU4kRxpEFuvpFD3/HQ7H0T9BdC/J1cb/cxEYA2
Mc9Gxfaw884TlywGvqkmNNwiOejyQeRMlJbjttpLZOllePeJ4sdidz8sP+GQhkh6
TvqcVDlb/Mlmv9tC86n8d5qAQtf67AGW9Q/9732cGgo5GIOpL5QjqKGDPsuwZ2FE
DdyuHBhGK5HykTlzJcjsiDAMGm5xQvI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:00:00 2026 by rpki-client