
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa
File: 46e898e8-09ea-3a9b-a977-d135334936f2.roa (raw, json)
Hash identifier: UTtCPTcTSJ95wi/naPRfwO7resCTC9D1R7rpjHBUOMs=
Subject key identifier: 58:E3:AC:84:F7:7E:08:B3:FA:29:A1:0B:EE:9C:2B:A3:86:1D:C7:07
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EA788854D5486139E070BAB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7029
IP address blocks: 67.140.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:85:4d:54:86:13:9e:07:0b:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f3c8cc44-5a3a-47e3-8a59-a20bcde1bca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:d7:0b:09:16:c4:77:f5:8b:1c:16:c2:56:
52:36:e5:0b:df:9b:55:9e:b7:6c:fe:9b:31:aa:09:
a1:f3:71:6b:35:29:15:f3:99:ed:6a:b6:bf:5f:e7:
f8:9f:cc:bc:05:aa:1e:f3:8b:53:10:39:03:93:f1:
09:e5:7d:4c:c2:94:57:84:a4:ae:18:81:94:85:21:
2c:fd:13:7b:6f:66:a8:0b:83:f0:88:0d:c5:04:0e:
3c:a7:41:52:f4:cb:c9:9a:9b:1e:99:9f:31:32:6a:
62:bc:63:94:e9:fd:90:d7:ab:97:20:f8:40:f0:71:
84:56:6b:bc:ba:65:63:08:bc:4e:fc:d7:ba:37:45:
ff:cc:70:d3:5e:86:09:0a:33:16:3e:07:c9:6d:b1:
f6:f3:20:8c:be:ed:71:21:81:13:fa:9d:29:59:b4:
dd:0b:6b:c5:d7:c7:46:31:95:21:6d:bd:b7:56:cc:
3e:7a:bd:5b:dc:bc:1f:24:1a:cb:c9:95:4a:90:4c:
23:a7:ea:c4:90:ac:74:4b:52:8c:3d:c0:16:47:c0:
43:1d:eb:df:48:70:93:7e:0a:14:ea:c6:d2:22:e8:
90:76:62:19:41:9c:7a:1b:10:7c:93:44:8b:9a:4b:
c5:ee:41:2f:90:7d:fd:8f:2b:7e:11:10:b5:c3:95:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:AC:84:F7:7E:08:B3:FA:29:A1:0B:EE:9C:2B:A3:86:1D:C7:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:93:a2:70:69:21:7a:bd:a5:f5:75:2f:0f:88:63:ec:e8:fc:
7c:ca:93:42:1d:0e:15:e3:5a:4f:88:1a:10:50:af:48:a3:8f:
dc:a0:8b:5d:18:85:9b:7e:43:6c:1f:35:58:3e:2c:f7:7a:e3:
49:96:2f:06:1d:e3:42:23:d3:98:5f:d1:8c:a9:db:2e:22:2f:
15:ee:f7:b3:71:7c:d2:e7:c8:cc:b4:52:79:0c:36:e3:25:0b:
7a:26:bf:17:40:24:ee:0f:01:60:65:72:b1:83:71:0d:f1:7e:
b8:ed:27:2f:10:31:93:dd:68:b7:a0:0c:9b:d6:e2:8a:c4:95:
95:1b:7a:62:09:4e:6a:b4:2d:47:c5:22:41:e9:43:8a:41:59:
b7:eb:17:04:0f:bf:70:58:28:c9:a9:1c:9f:33:93:5f:b7:4f:
51:10:51:45:42:94:6e:fe:d7:d4:bf:78:23:3e:fb:18:1a:19:
c4:87:02:a0:35:56:64:f7:96:69:dc:b3:eb:7a:a0:6e:c8:ec:
85:42:1d:83:0f:96:17:33:21:d4:5d:76:ec:3c:b4:40:d3:cc:
76:40:9b:a1:fb:f8:cf:2b:e1:64:bc:9d:be:49:76:bb:85:c9:
15:83:8d:e5:88:3a:fa:16:9d:a6:c2:5d:e8:e6:9c:e5:e3:1e:
01:21:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:20 2026 by rpki-client