
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa
File: 5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa (raw, json)
Hash identifier: KFs7jV/0p9MR7NHTcobNM5uA8QV1oDeHQBw+789aykM=
Subject key identifier: B5:B1:7F:2D:E0:68:57:78:21:1E:18:DB:21:C3:FF:B2:F2:50:79:5A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E2809A018D9ED0EFF26CA69C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa
Signing time: Sat 13 Jun 2026 09:00:12 +0000
ROA not before: Sat 13 Jun 2026 09:00:12 +0000
ROA not after: Fri 11 Sep 2026 09:00:12 +0000
asID: 7029
IP address blocks: 209.2.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:28:09:a0:18:d9:ed:0e:ff:26:ca:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 09:00:12 2026 GMT
Not After : Sep 11 09:00:12 2026 GMT
Subject: CN=88465e97-3659-4ab7-9f10-6d21119ad6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:0b:92:02:6c:ab:7f:92:4d:43:0a:09:cd:
a5:6f:9f:1e:46:32:ff:11:b3:c7:31:7d:e0:fe:be:
19:3e:9b:d0:9b:e2:8d:13:60:7b:e2:5a:f1:4a:a0:
c4:f1:8b:db:9b:8a:13:e3:cf:dd:36:4a:7e:4f:18:
4d:98:09:a7:52:e0:7d:41:6b:25:15:1a:a8:4e:1c:
65:fe:46:92:b6:23:7c:07:7c:34:73:6a:39:6d:4d:
89:77:29:bc:46:f3:5c:0d:33:6f:98:d4:82:f9:b6:
66:41:8a:1c:5b:5e:39:f0:c5:15:09:b4:88:c9:2f:
3b:9f:6b:13:f2:89:b1:d7:0c:d7:60:73:f8:d8:d7:
f6:29:8f:5e:db:17:c4:b1:76:5f:c9:63:ac:35:2d:
d5:3b:cc:d7:95:09:dc:0a:79:8e:16:af:eb:4f:27:
95:7c:96:82:3c:ec:8d:33:5f:03:d2:a3:7b:19:48:
31:73:5b:1c:d9:fc:c9:52:f9:39:fb:50:cf:75:9f:
d0:94:74:95:69:ed:4a:54:b1:e7:f9:9f:e0:9f:61:
8d:f6:1d:f1:92:ee:60:46:25:d3:f9:d3:35:f9:51:
52:31:70:c2:ff:ca:d9:74:09:05:e1:a5:e3:f2:2c:
32:13:5b:81:2d:1c:ce:24:0e:b7:82:4e:6f:b2:cd:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:7F:2D:E0:68:57:78:21:1E:18:DB:21:C3:FF:B2:F2:50:79:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.2.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d3:38:d3:48:05:23:d9:bc:e9:75:25:22:92:47:f2:28:77:
8d:16:73:7d:fb:eb:c6:57:a8:7f:98:f6:d5:90:f4:ef:75:c4:
f1:ec:40:be:a1:13:45:c6:2b:5e:f6:77:09:c0:6d:6d:76:37:
23:71:48:34:c6:96:4c:7a:9b:57:bc:61:6d:88:75:a8:52:f2:
79:1d:4c:2b:0e:52:7a:1f:56:44:97:a2:69:f6:a0:69:4b:f6:
04:a5:1c:13:c7:aa:c1:60:4d:6d:60:5f:10:63:f9:66:70:16:
03:bb:f5:25:4c:91:a5:9b:63:ad:89:b0:f6:3b:40:41:77:cb:
b9:df:ae:13:09:03:77:cd:f5:ce:0d:ad:6d:15:00:99:d6:4c:
9f:e1:5d:46:0b:af:c6:21:49:30:01:91:b1:46:7c:71:e4:1e:
1e:7c:f8:11:a3:e4:e5:49:ad:4f:64:e8:5c:ec:0c:e2:8d:10:
05:5e:2f:c4:f2:da:d3:6f:e1:b1:d5:02:3d:3f:69:14:1c:c2:
5e:a6:c8:4f:a1:66:55:7c:3d:d6:6f:c7:f4:13:9a:f1:d9:97:
dc:17:3a:3a:e2:d2:40:27:a3:1b:b8:42:de:df:e5:65:e1:78:
0e:9f:67:9c:bc:73:6c:ff:73:c6:39:1d:ef:c2:03:f9:8d:f4:
cb:84:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:46 2026 by rpki-client