
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa
File: 7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa (raw, json)
Hash identifier: hPbVb1XI5Bi09uPmKCIed/FUVYjTRda/QWiIm2mAPF0=
Subject key identifier: 4C:4A:F2:52:C4:36:08:D2:30:08:F7:CA:D2:66:C7:E0:6F:34:61:E7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EA4451AABC7EAD03B9F63BB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa
Signing time: Mon 27 Jul 2026 21:00:11 +0000
ROA not before: Mon 27 Jul 2026 21:00:11 +0000
ROA not after: Sun 25 Oct 2026 21:00:11 +0000
asID: 7029
IP address blocks: 63.255.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:45:1a:ab:c7:ea:d0:3b:9f:63:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jul 27 21:00:11 2026 GMT
Not After : Oct 25 21:00:11 2026 GMT
Subject: CN=c92975bc-4be2-4707-8f0e-d66dac9194e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:4d:93:01:e6:b2:71:e6:ea:86:71:8f:83:
b8:eb:97:13:f4:7e:1b:22:fd:5f:dc:2f:21:bf:7e:
65:e6:aa:9e:4e:b0:e5:51:13:4b:72:81:c7:e1:b6:
36:87:bc:58:67:0a:7e:0b:bd:44:6e:ec:c7:61:50:
25:9d:31:3d:14:c9:7c:66:af:0c:88:cc:59:ae:fa:
62:e7:37:27:c9:93:84:1a:57:56:f2:b9:f3:18:32:
4e:e8:35:4e:2a:cf:7e:b8:cb:43:37:67:6d:86:5b:
67:be:8c:99:23:fe:70:31:8e:df:0e:51:c0:20:f3:
56:7e:a7:b7:4f:44:93:ba:5f:4e:ff:25:0a:02:42:
05:90:77:cf:be:46:7b:bd:95:1a:63:54:37:4b:9d:
88:e4:e9:74:f1:95:c1:34:42:0c:e9:24:d5:d8:b3:
d6:87:57:cc:9d:67:f8:4b:05:51:b2:a6:f3:60:82:
33:dc:a0:35:57:3e:e0:bb:89:9a:01:f1:7e:94:62:
c5:1c:f9:b7:fc:5e:80:fd:2b:9c:85:74:e8:af:4b:
5c:40:a8:e4:16:40:48:12:31:ec:90:48:cc:10:0d:
3c:9f:a3:7a:85:18:86:90:a5:3c:e1:2f:f6:1c:71:
21:95:e6:13:d5:6b:7a:00:e8:e4:ef:24:af:c2:e5:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:F2:52:C4:36:08:D2:30:08:F7:CA:D2:66:C7:E0:6F:34:61:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.255.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d4:81:fd:8f:b1:99:de:b3:cf:89:c0:e4:3d:59:fc:16:43:
20:b7:d5:d8:e2:70:4f:8e:de:79:c0:d9:77:51:d6:fc:24:8d:
21:ac:08:7f:8f:46:32:d4:a2:0d:02:bf:e5:53:54:cf:36:f9:
94:9b:f3:f6:f2:d2:49:05:aa:fe:69:d0:49:a5:39:f9:9a:c5:
63:8d:2c:df:09:6d:ec:ed:79:7f:2a:7f:ea:40:d2:2c:a4:97:
65:91:64:cb:f8:89:e3:40:92:e6:1e:9d:40:ff:5e:92:52:12:
14:bb:56:ca:f3:b5:82:a9:9a:4a:37:f5:88:96:cd:dc:b3:cf:
8c:ac:f7:71:20:0c:03:f0:71:d4:74:f5:0f:3c:c7:f7:7a:77:
e9:cd:ca:c7:1f:73:35:e9:3e:41:7e:ec:df:54:bc:d5:2c:5b:
6a:e6:4f:17:9e:a0:08:37:56:f2:08:ea:5c:9d:62:0f:66:b3:
7e:e1:06:71:b6:ef:46:62:9f:9f:76:bf:cb:f0:29:f4:08:0c:
d7:6e:24:f2:2c:ab:5e:61:02:b8:65:ac:a2:79:56:e7:6d:13:
f9:89:63:c4:ba:f8:b3:30:0d:27:7c:d3:76:38:03:6e:17:a4:
7c:26:b1:ac:d5:83:16:2f:16:89:2d:c0:fe:50:22:69:6f:51:
4b:09:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:23 2026 by rpki-client