
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61fdb209-959e-38e6-b77c-ce48e938df9d.roa
File: 61fdb209-959e-38e6-b77c-ce48e938df9d.roa (raw, json)
Hash identifier: DjjErPbt0+4BvPrjfxafm0A9S8xIiqWZqraoBb2T30M=
Subject key identifier: A3:E1:B7:77:92:B8:0E:AB:37:B5:A9:F3:97:45:D1:ED:48:B4:C8:8E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E0C1EEE6A0F2E153BBCF73E90
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61fdb209-959e-38e6-b77c-ce48e938df9d.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 7029
IP address blocks: 40.142.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:ee:6a:0f:2e:15:3b:bc:f7:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=19273ca6-4c57-448c-b099-123620b8ec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:e1:32:41:8d:25:39:d8:fc:49:f4:f6:63:
28:1a:47:8e:17:db:e7:e8:39:e2:9f:b0:21:b3:c5:
75:c5:a0:55:16:ca:9b:f2:3b:eb:dd:78:b1:1e:f9:
41:51:d1:79:ee:07:7f:31:24:9f:ae:81:14:a0:82:
1f:7a:71:14:b1:55:78:a0:b3:96:b7:38:24:80:88:
15:1d:07:58:d7:0c:54:8b:40:47:44:f8:7c:9c:df:
2f:dc:66:fb:af:c0:e3:c6:b2:63:9d:ce:88:c7:09:
b4:8e:15:91:32:08:15:49:48:55:3f:6c:fa:15:38:
1f:67:8a:2d:d9:cf:25:63:9e:6f:8c:51:53:32:5f:
69:66:b3:c2:97:92:fd:b7:06:3d:69:ce:a9:1e:86:
c8:dd:c3:a5:d6:e2:ce:2d:ab:7d:a2:a7:ea:3d:25:
20:c7:4b:ad:ad:ea:81:ac:fd:12:07:31:fd:7d:20:
e9:d3:52:0c:c2:61:e5:ea:af:18:de:8d:28:12:de:
36:a9:6c:1a:d9:a4:c7:4f:a2:0a:c0:b6:19:4a:fc:
f0:31:d9:61:5e:9d:3f:4a:b1:c8:c7:d7:d4:24:1f:
53:5f:42:19:ac:13:82:86:fd:28:7a:9e:45:51:c0:
95:73:8e:06:e4:9d:c5:f8:c3:6b:8b:2b:ac:8e:a7:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:B7:77:92:B8:0E:AB:37:B5:A9:F3:97:45:D1:ED:48:B4:C8:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61fdb209-959e-38e6-b77c-ce48e938df9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:3a:3b:63:e2:d0:23:82:16:3d:08:e8:5f:9e:b9:c2:31:b5:
ef:76:63:fe:d2:93:1e:bc:67:4c:82:1a:82:4d:e3:dc:04:ec:
21:52:31:f8:76:a6:8e:f8:59:c5:28:a7:52:0e:b6:f1:17:4e:
2f:d7:d4:ea:18:9d:00:a6:dd:19:76:0a:00:69:66:ae:ac:c7:
1f:a5:e8:e1:83:3c:4d:f0:4b:6b:7d:79:95:82:6e:39:74:7b:
7a:8e:23:b8:b5:88:c3:d2:19:83:dc:b0:7a:b0:bb:80:a5:95:
23:82:23:82:dd:da:72:77:6e:9f:cc:32:7d:2e:96:d2:45:f4:
d9:85:b7:fa:b9:b6:1c:05:18:38:4b:b2:7e:d0:e5:0f:e1:a0:
c0:4b:3c:59:75:24:d8:fb:ea:5c:47:e7:ae:ea:27:ae:86:e0:
b2:31:ee:7a:09:c5:5e:1d:31:ad:00:54:17:25:d9:c5:f9:b2:
db:b9:6d:10:f4:47:af:c7:bc:64:12:3d:45:49:b1:4b:4a:b0:
0d:57:57:66:40:8e:c2:68:e6:95:80:ef:08:12:61:6a:90:f1:
33:58:f1:b6:5a:7d:6a:b3:16:42:1a:d9:8e:e2:22:5c:2e:d9:
16:5a:f9:b4:e2:e6:4f:90:7c:52:fe:a6:79:5b:b2:1c:1c:2b:
97:ad:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:52 2026 by rpki-client