
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa
File: 3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa (raw, json)
Hash identifier: m6Lcl5Or97RQAyVFdnBvXa87S0LTMsgd/yNaY00QnAY=
Subject key identifier: 7B:88:92:0E:9B:2B:14:3C:30:74:D8:B9:99:02:C1:A5:62:B4:1E:E4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E104F1275D354AAF1C0170580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 6983
IP address blocks: 209.165.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4f:12:75:d3:54:aa:f1:c0:17:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=654d3125-f605-4230-b961-ba208aff4e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:84:7b:81:76:38:65:cb:20:58:a2:48:7d:
f4:8a:46:a6:f0:10:49:ff:fc:bc:5f:8e:be:6f:a4:
de:ff:b5:ac:be:8d:b1:ca:00:b8:af:2a:55:35:1b:
c2:2b:87:05:c9:64:61:cb:ba:70:17:50:b6:b9:9b:
19:12:e7:f3:0d:94:0a:24:a8:07:8c:bc:19:1d:61:
53:25:15:b5:76:4b:61:70:ef:fb:c2:37:83:50:95:
b6:35:30:25:f3:3c:cf:19:b4:99:e9:69:79:26:45:
0b:98:e7:3a:78:13:43:9b:9d:3d:4c:e3:7d:fd:b2:
01:e2:78:4b:47:4c:0f:9d:9c:3a:47:b6:13:cc:19:
2c:cf:8f:e5:ef:84:f3:96:16:2f:a7:67:32:cd:54:
a0:8b:0f:22:67:47:7d:bf:f4:19:22:31:76:bf:54:
e9:09:24:d0:0f:e7:0a:de:fb:6a:9f:d7:38:fe:7c:
73:ef:c8:bc:1a:8c:37:a9:47:a1:ef:ae:2b:db:99:
11:59:d0:1b:cc:4d:40:dc:49:69:c7:25:ec:a7:a5:
8c:89:5e:b5:2f:91:04:2e:8a:f7:57:c5:44:d4:e8:
c2:e8:17:21:6d:63:a3:af:ae:23:50:3e:92:dd:4d:
a6:7e:27:8c:d4:bf:d8:6a:47:8d:a1:ea:f4:70:2f:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:92:0E:9B:2B:14:3C:30:74:D8:B9:99:02:C1:A5:62:B4:1E:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.165.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b2:c9:21:0d:09:bd:d5:35:ee:c0:77:65:7a:0e:73:d4:d1:
fe:45:2e:a6:d9:92:4e:3d:86:e7:d8:51:60:5a:c1:f1:38:f3:
ce:5b:94:fd:74:b7:d5:25:5b:92:17:32:aa:7f:8a:db:ed:81:
54:29:c9:d5:3d:34:70:e4:ac:66:59:a4:08:d3:a8:e8:9a:58:
6e:d1:30:00:e0:81:6e:c4:9c:2a:c3:f3:83:e3:e7:f1:bc:1d:
b9:e5:4d:2b:c5:62:e0:ca:d4:43:9a:fe:e4:51:de:be:48:31:
d8:39:a8:db:28:f3:84:85:1a:b0:09:fb:ce:c2:b3:17:39:8c:
2c:59:e7:2e:9c:08:a9:bf:16:42:f0:5a:33:33:5a:9d:a7:de:
eb:f5:2d:83:07:79:0a:ce:71:ed:17:e8:f5:6b:dc:73:2a:41:
3f:7e:b2:62:d4:54:7c:b1:bc:6d:f4:f7:57:66:6c:ff:04:d6:
26:54:e3:8f:c6:06:0d:e9:da:91:56:9d:f5:21:b0:25:e3:55:
34:5a:f0:6e:fd:81:b8:82:a3:e3:95:d5:32:aa:e4:32:b1:46:
84:9e:5b:94:1c:49:29:a1:39:8a:7d:2f:0a:0b:bc:06:91:a6:
6c:41:31:04:82:73:65:ee:7c:10:70:6e:ae:84:32:96:40:31:
6c:c1:ef:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxJ101Sq8cAXBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NjU0ZDMxMjUtZjYwNS00MjMwLWI5NjEtYmEyMDhhZmY0ZTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnWEe4F2OGXLIFiiSH30ikam8BBJ//y8X46+
b6Te/7Wsvo2xygC4rypVNRvCK4cFyWRhy7pwF1C2uZsZEufzDZQKJKgHjLwZHWFT
JRW1dkthcO/7wjeDUJW2NTAl8zzPGbSZ6Wl5JkULmOc6eBNDm509TON9/bIB4nhL
R0wPnZw6R7YTzBksz4/l74TzlhYvp2cyzVSgiw8iZ0d9v/QZIjF2v1TpCSTQD+cK
3vtqn9c4/nxz78i8Gow3qUeh764r25kRWdAbzE1A3ElpxyXsp6WMiV61L5EELor3
V8VE1OjC6BchbWOjr64jUD6S3U2mfieM1L/YakeNoer0cC+9TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuIkg6bKxQ8MHTYuZkCwaVitB7kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I2NzdlYjAtZDYzNy0z
YWUxLWFkZDgtNjMyOTNiNWQwYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOyySENCb3VNe7Ad2V6DnPU0f5FLqbZkk49hufYUWBawfE4885blP10
t9UlW5IXMqp/itvtgVQpydU9NHDkrGZZpAjTqOiaWG7RMADggW7EnCrD84Pj5/G8
HbnlTSvFYuDK1EOa/uRR3r5IMdg5qNso84SFGrAJ+87Csxc5jCxZ5y6cCKm/FkLw
WjMzWp2n3uv1LYMHeQrOce0X6PVr3HMqQT9+smLUVHyxvG3091dmbP8E1iZU44/G
Bg3p2pFWnfUhsCXjVTRa8G79gbiCo+OV1TKq5DKxRoSeW5QcSSmhOYp9LwoLvAaR
pmxBMQSCc2XufBBwbq6EMpZAMWzB7zE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:50:34 2026 by rpki-client