
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/655fc0c1-fd90-3e99-8b3c-b1ccb780b04e.roa
File: 655fc0c1-fd90-3e99-8b3c-b1ccb780b04e.roa (raw, json)
Hash identifier: q+8pTE0VCTPcIP7O+6JWoNE6S6Nl4H40qXNVg978IAY=
Subject key identifier: E6:E2:0B:F5:88:CD:78:82:B1:CD:47:C9:70:49:18:34:9C:3C:0C:28
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D00B242BD77DA3B6B7E1FEC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/655fc0c1-fd90-3e99-8b3c-b1ccb780b04e.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 7029
IP address blocks: 216.96.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:42:bd:77:da:3b:6b:7e:1f:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=3bc50664-d3cc-4209-87f9-3c4234db7ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:cc:ce:e8:9d:7f:1c:36:b2:98:6c:bd:fa:
90:a5:6a:ab:d1:1a:d6:1d:5b:58:8b:89:d1:e9:e2:
76:ef:ff:e6:0d:81:ce:a8:f3:9d:a4:66:96:93:5d:
19:d1:77:55:0b:f8:64:2f:4c:c7:9c:9e:35:cf:5d:
80:7a:ea:c5:2f:7f:35:e8:18:0b:7b:8d:58:5b:02:
3a:c6:f3:23:e8:e5:22:f4:5e:e4:dd:5f:37:55:60:
c2:59:75:28:e5:6e:8c:05:e2:5b:be:42:af:82:7a:
0d:69:a8:8e:a7:3c:77:5f:6f:d9:f5:ac:ae:c2:2b:
2d:a5:a1:aa:c9:16:ef:48:1e:de:a8:14:33:8e:2a:
d6:ea:b8:29:bd:1f:b4:ee:d9:44:31:fd:9b:89:ea:
c2:01:9a:2d:a0:46:e6:7c:db:70:d9:31:01:5f:03:
c4:8c:83:ea:22:ed:ca:dc:8b:9a:c9:d9:09:81:b2:
ca:e0:90:b8:55:74:2d:16:3b:09:61:8e:13:3d:d2:
94:f0:d0:57:0f:a7:72:68:65:4d:28:92:27:54:ea:
a5:b2:2d:67:ee:47:b5:94:01:fb:71:09:be:6b:81:
4d:33:37:2d:fe:b0:98:b0:6a:0b:89:f8:ac:b0:00:
ea:d5:13:75:af:e1:05:3b:2c:96:7a:76:84:23:db:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E2:0B:F5:88:CD:78:82:B1:CD:47:C9:70:49:18:34:9C:3C:0C:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/655fc0c1-fd90-3e99-8b3c-b1ccb780b04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.96.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:1b:5c:36:c4:62:d2:16:74:86:7a:18:de:b2:40:87:c9:88:
f9:5b:35:43:e4:3b:59:97:13:5a:cc:95:33:66:41:08:90:b8:
4e:b1:f7:6b:34:bf:84:fd:b7:6b:bc:c5:ce:2f:35:f9:6d:03:
a5:7c:92:0f:98:72:12:e1:91:2d:cd:9f:cc:c5:65:da:1e:75:
c8:14:7c:e3:18:25:2b:78:e9:d3:58:64:bd:16:84:8d:b9:44:
8b:18:1c:91:db:2d:b4:7f:41:80:5f:e3:db:8a:3d:f3:03:ee:
cf:dc:9e:46:1b:0b:64:27:9e:5a:17:d6:3e:eb:95:85:76:57:
c6:6b:2b:12:e2:4c:1e:46:ef:cc:ad:e5:4d:ab:6e:fe:36:7a:
f1:29:62:0f:c5:8b:a9:1d:c6:c4:fb:5f:30:e6:ab:a4:e4:fe:
ce:8d:46:7a:20:52:92:84:fc:92:05:28:c2:5c:84:99:ee:3b:
0b:33:6e:54:55:c7:e8:bf:c1:73:b3:a1:e4:ad:5d:58:0d:11:
7a:37:1d:ec:7d:07:70:4b:70:66:eb:96:cb:d3:08:21:8e:01:
44:8c:6f:f2:1e:63:da:c9:d3:be:5d:cc:e2:c6:0c:e5:98:91:
17:e8:ba:6a:68:72:b8:21:75:05:d8:c4:65:b8:d0:88:e3:f1:
ad:05:44:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskK9d9o7a34f7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
M2JjNTA2NjQtZDNjYy00MjA5LTg3ZjktM2M0MjM0ZGI3ZWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC/Mzuidfxw2sphsvfqQpWqr0RrWHVtYi4nR
6eJ27//mDYHOqPOdpGaWk10Z0XdVC/hkL0zHnJ41z12AeurFL3816BgLe41YWwI6
xvMj6OUi9F7k3V83VWDCWXUo5W6MBeJbvkKvgnoNaaiOpzx3X2/Z9ayuwistpaGq
yRbvSB7eqBQzjirW6rgpvR+07tlEMf2bierCAZotoEbmfNtw2TEBXwPEjIPqIu3K
3IuaydkJgbLK4JC4VXQtFjsJYY4TPdKU8NBXD6dyaGVNKJInVOqlsi1n7ke1lAH7
cQm+a4FNMzct/rCYsGoLifissADq1RN1r+EFOyyWenaEI9vcTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObiC/WIzXiCsc1HyXBJGDScPAwoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU1ZmMwYzEtZmQ5MC0z
ZTk5LThiM2MtYjFjY2I3ODBiMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIbXDbEYtIWdIZ6GN6yQIfJiPlbNUPkO1mXE1rMlTNmQQiQuE6x92s0
v4T9t2u8xc4vNfltA6V8kg+YchLhkS3Nn8zFZdoedcgUfOMYJSt46dNYZL0WhI25
RIsYHJHbLbR/QYBf49uKPfMD7s/cnkYbC2QnnloX1j7rlYV2V8ZrKxLiTB5G78yt
5U2rbv42evEpYg/Fi6kdxsT7XzDmq6Tk/s6NRnogUpKE/JIFKMJchJnuOwszblRV
x+i/wXOzoeStXVgNEXo3Hex9B3BLcGbrlsvTCCGOAUSMb/IeY9rJ075dzOLGDOWY
kRfoumpocrghdQXYxGW40Ijj8a0FRDc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:18 2026 by rpki-client