
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa
File: 736dd3da-b7fc-332b-a64b-9670e8707f23.roa (raw, json)
Hash identifier: XWNxEwQLRt7U2+OZbm0NWbBK+zH179DMmXlpTqVqKVw=
Subject key identifier: 1E:A0:1F:BF:FF:DF:58:6D:7C:C1:FF:C0:AB:40:DC:15:E7:61:A8:47
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584B7F523FC08A32F6FCD8554380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 7029
IP address blocks: 71.29.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:3f:c0:8a:32:f6:fc:d8:55:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=e1edbeb6-f892-4490-9586-be062d53ccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:54:45:75:6d:7c:b3:9b:e2:cc:ce:7d:96:
0d:3f:f7:b7:b3:53:a7:d6:46:f2:2b:f3:a2:15:b3:
c0:05:0a:f4:e7:c6:7d:0f:cb:22:6a:42:86:13:d7:
66:3a:67:02:05:98:c3:90:fd:21:aa:95:0b:18:79:
d4:bb:68:c6:2a:fb:b1:96:c9:e6:9f:af:45:4e:0d:
24:12:c2:d9:70:8f:92:e1:1f:62:bd:2d:7b:93:eb:
c1:6a:5a:71:da:2a:84:87:52:bb:70:56:23:4e:ef:
8f:30:8a:38:90:6f:96:d2:05:96:7f:1c:a3:f3:80:
c6:17:bc:75:f7:35:71:23:1d:75:2d:fe:0b:29:77:
e2:d1:f1:fc:98:91:7b:b8:a1:69:f1:96:69:d3:3d:
24:e5:6a:c0:b4:d2:4b:b0:64:41:6b:5e:52:24:ab:
38:73:de:b0:7b:7a:8d:7d:93:b6:b0:cf:62:ed:31:
31:a8:1c:8f:9a:f1:3e:76:71:03:18:3f:b7:f0:f5:
cf:32:37:82:29:35:3d:db:5c:e3:10:b9:9e:ab:b8:
85:bc:d7:ad:86:15:3f:4c:65:a3:b5:fe:7e:a4:9a:
da:d1:8f:34:20:95:ff:50:66:68:16:6f:de:17:e5:
b9:a3:f7:14:df:a7:b6:9b:e8:2c:75:76:58:b8:dc:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:1F:BF:FF:DF:58:6D:7C:C1:FF:C0:AB:40:DC:15:E7:61:A8:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:46:f3:d8:9a:be:48:14:92:f0:9f:30:c6:f1:09:7c:84:4c:
33:38:30:b5:c7:49:3a:fe:0c:c7:5e:67:a3:df:66:02:8d:83:
d2:dc:1d:14:b1:cd:65:c7:21:e9:5e:36:02:e7:e7:72:e4:b3:
81:cd:b7:1e:61:6a:5c:cc:b2:66:9e:10:05:2b:5a:4b:94:f5:
b1:74:67:ca:13:ef:26:49:f2:96:85:40:5e:cc:ab:75:d8:3a:
41:b3:a7:64:96:de:b9:7f:d6:64:aa:c0:26:d3:3a:82:95:fb:
f8:78:2b:ea:e7:4e:e6:57:30:d5:6f:3b:a0:37:a2:8b:fd:47:
bc:ae:50:b9:53:f4:25:94:d2:3f:21:82:89:dc:5d:e3:41:d6:
28:cf:d9:03:96:ee:49:b0:c2:62:c2:77:97:62:c6:80:22:74:
09:8f:e3:d7:7a:6b:d0:1b:35:8c:b6:a6:fa:65:81:d8:69:b3:
ce:30:74:4d:a4:70:3a:ec:55:2a:a0:d0:c3:10:a5:07:51:60:
5e:84:18:67:cc:4b:a3:13:cb:c6:27:2e:fd:46:76:d9:cc:0e:
46:3b:ba:ff:ce:97:e3:91:d3:2c:5c:fc:91:df:bc:09:03:5d:
76:e7:43:26:1a:ae:86:67:a8:c1:cb:52:7d:2d:9e:fe:01:1b:
28:d7:0f:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uj/AijL2/NhVQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
ZTFlZGJlYjYtZjg5Mi00NDkwLTk1ODYtYmUwNjJkNTNjY2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP5URXVtfLOb4szOfZYNP/e3s1On1kbyK/Oi
FbPABQr058Z9D8siakKGE9dmOmcCBZjDkP0hqpULGHnUu2jGKvuxlsnmn69FTg0k
EsLZcI+S4R9ivS17k+vBalpx2iqEh1K7cFYjTu+PMIo4kG+W0gWWfxyj84DGF7x1
9zVxIx11Lf4LKXfi0fH8mJF7uKFp8ZZp0z0k5WrAtNJLsGRBa15SJKs4c96we3qN
fZO2sM9i7TExqByPmvE+dnEDGD+38PXPMjeCKTU921zjELmeq7iFvNethhU/TGWj
tf5+pJra0Y80IJX/UGZoFm/eF+W5o/cU36e2m+gsdXZYuNyldwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6gH7//31htfMH/wKtA3BXnYahHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzM2ZGQzZGEtYjdmYy0z
MzJiLWE2NGItOTY3MGU4NzA3ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx34MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItG89iavkgUkvCfMMbxCXyETDM4MLXHSTr+DMdeZ6PfZgKNg9LcHRSx
zWXHIeleNgLn53Lks4HNtx5halzMsmaeEAUrWkuU9bF0Z8oT7yZJ8paFQF7Mq3XY
OkGzp2SW3rl/1mSqwCbTOoKV+/h4K+rnTuZXMNVvO6A3oov9R7yuULlT9CWU0j8h
goncXeNB1ijP2QOW7kmwwmLCd5dixoAidAmP49d6a9AbNYy2pvplgdhps84wdE2k
cDrsVSqg0MMQpQdRYF6EGGfMS6MTy8YnLv1GdtnMDkY7uv/Ol+OR0yxc/JHfvAkD
XXbnQyYaroZnqMHLUn0tnv4BGyjXD9U=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:56:52 2025 by rpki-client