
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa
File: 488d7a87-5ecd-3b50-9364-606749816097.roa (raw, json)
Hash identifier: 6oqUa+tqRO5dcIjp86Gu5xXe5HnJJA8UeN0NO0dqCZM=
Subject key identifier: 1E:3C:B2:D0:74:75:79:E5:2C:8C:B3:42:68:67:E3:80:64:BF:73:B4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E104F146774C5037D11382F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 7029
IP address blocks: 64.206.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4f:14:67:74:c5:03:7d:11:38:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=ff8d1768-00ed-487f-a174-076d76657123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:37:34:72:6b:e3:07:32:6b:4f:d9:5f:34:
ed:a8:10:7c:f4:1a:3f:4d:76:64:90:f7:f5:dc:95:
99:df:4f:61:89:a0:17:45:cd:df:80:65:b9:17:dd:
11:68:ac:60:78:90:45:0f:23:20:d1:05:bb:3e:d4:
ed:94:30:1f:e7:aa:fa:1a:19:07:06:93:1b:d3:6c:
ad:62:06:c2:8f:56:f6:a2:34:47:83:30:9a:16:d3:
ea:02:71:ac:8c:4e:36:b0:66:db:9e:4b:fa:16:a8:
f0:b4:14:50:8e:c4:61:5d:ef:21:e1:bd:2e:08:6d:
e8:b5:85:41:c1:3b:ab:f3:8b:91:77:f2:29:c1:75:
0d:9c:b0:70:29:cc:b3:be:99:b2:93:a9:ab:e1:70:
93:80:2a:25:23:3f:c3:b4:4c:ce:80:4d:bb:20:b9:
58:35:26:9a:7b:c2:2f:a5:1e:4c:3c:12:9b:be:30:
71:29:cd:c4:5d:28:14:ba:8f:85:3c:2d:b1:52:6d:
17:ca:8e:09:37:59:72:94:26:45:7d:f9:1d:2a:ef:
67:6d:9b:91:29:18:76:c8:e0:c5:d7:de:bc:20:be:
55:d8:43:01:9b:55:9f:db:96:cd:cc:ff:e7:1b:bc:
64:b6:26:9d:75:9a:6c:d9:9a:da:8e:35:3b:0e:70:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:B2:D0:74:75:79:E5:2C:8C:B3:42:68:67:E3:80:64:BF:73:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:61:e7:10:e1:9a:52:1e:81:82:6b:a7:9d:cf:3b:0d:d7:fb:
c1:ff:4f:28:37:10:ea:9c:a5:58:3c:95:13:76:d0:7e:ea:b7:
a0:fe:44:fc:64:77:25:00:cc:5b:a0:81:c5:75:cd:99:3d:a6:
85:39:63:00:cb:55:ca:9a:72:51:e9:99:80:fc:9f:e7:b2:b4:
54:f3:00:7b:28:36:07:5e:dd:ff:ca:77:bf:e7:b8:01:3a:e1:
d7:00:dc:e5:d1:20:ca:21:1a:ae:20:f8:9a:fc:57:05:33:81:
a1:bc:e1:cd:de:4a:92:a9:d5:3e:d2:e0:03:f4:d3:00:1b:56:
b3:a8:b0:b3:d6:7d:e7:6d:69:ea:a8:ae:a4:b0:0b:1e:36:1d:
bf:fa:6e:f1:98:71:4a:9e:2e:d4:f5:5f:11:02:98:e2:b0:98:
1e:91:02:22:4f:1b:bc:b3:4e:72:d3:04:5f:a2:6a:fd:04:47:
6d:c3:b1:68:52:f8:8a:f3:f6:00:e2:ae:d1:03:8a:0e:ba:c5:
94:1b:24:c5:e3:3e:f5:9a:a0:fa:2f:a1:9a:23:79:fa:5f:50:
67:a3:10:44:12:be:41:b8:be:52:55:0f:5a:88:b2:56:38:58:
8b:99:ac:00:90:db:a9:06:09:45:dd:66:a0:5c:19:1e:ef:a4:
5a:ce:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:06:04 2026 by rpki-client