
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa
File: 8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa (raw, json)
Hash identifier: 23DY/UuAv94trvv+soeqwkO28zK2VBLal1upVeElzLg=
Subject key identifier: DB:DD:D4:2B:CB:D0:D4:E0:8D:38:CB:6B:36:C4:F4:E6:B8:1E:79:0F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D7F9A96DB7A80BEAECE3B6E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 7029
IP address blocks: 69.40.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:96:db:7a:80:be:ae:ce:3b:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=89be989c-ee37-45a7-a0b3-b149af77317d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:d3:75:1c:b2:b1:06:52:da:4a:a8:74:47:
c7:19:dc:9a:16:d5:41:e1:f8:30:ec:46:f3:46:60:
9a:ff:99:d1:0e:f3:6b:7c:e4:99:a7:26:78:cb:9c:
4d:c9:97:ad:b9:0c:00:69:71:92:bc:17:a0:59:2a:
77:16:d3:f6:17:1d:95:c2:70:c2:04:0d:61:7f:c1:
e1:4b:c2:59:10:30:76:0b:53:36:f6:1a:9a:98:36:
10:a2:11:41:fa:05:51:e0:41:77:38:bc:7e:c4:09:
ee:92:3c:13:69:55:58:de:08:63:07:06:54:a0:f9:
b3:f0:38:3f:3a:75:9e:f0:36:8f:06:06:bc:66:6d:
f9:81:b4:ba:a8:6e:3c:0d:39:52:40:58:84:69:79:
c2:59:be:d1:40:c4:cd:72:e4:0b:13:2a:c5:ce:6e:
eb:05:35:93:43:71:5e:d5:43:8d:12:ce:d9:0a:e7:
30:f7:94:9c:16:5f:79:76:45:80:ee:59:33:9c:d2:
3b:3c:c0:1d:03:da:e1:d5:ee:b6:3a:95:3b:37:de:
5b:9b:4c:1e:5f:b2:d4:47:9a:b7:8d:f1:da:12:45:
ad:4b:7b:20:82:01:da:84:f8:05:bf:73:ad:37:f3:
39:67:c2:e1:40:dd:7f:b5:79:2a:1b:b8:f1:2c:1b:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:D4:2B:CB:D0:D4:E0:8D:38:CB:6B:36:C4:F4:E6:B8:1E:79:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.40.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:2a:05:22:53:8a:07:02:07:5d:c9:1a:10:c1:41:34:d6:39:
06:97:12:b8:f0:92:f9:c4:62:e4:e0:53:5c:a6:39:4f:ea:f7:
22:00:2b:b5:b1:9a:b8:f4:ff:b0:a5:1e:36:8b:6b:f2:73:38:
cc:ef:d8:39:88:c0:af:c9:37:e4:c6:da:6b:b3:67:76:fd:15:
3b:46:2c:58:a6:7f:72:16:0b:2e:84:cb:39:8b:a4:fa:b5:cb:
66:9e:6f:2a:28:1d:ce:1c:37:1a:37:63:bb:b8:41:68:c5:36:
3c:fa:63:ba:f9:70:1f:2a:aa:a8:8f:84:f4:83:79:ab:0b:03:
73:fe:d5:fb:fe:8b:29:0c:b0:1f:d1:9b:20:d9:9d:fc:31:10:
1f:24:6e:de:d9:7a:53:8d:d9:67:64:ec:e1:93:98:f3:21:fb:
88:6d:9c:c4:c1:aa:2b:2f:d5:47:cc:a6:bb:e6:06:13:cc:e1:
26:cf:53:38:a8:a6:e3:9a:e7:46:cd:1b:99:84:ae:95:a8:f8:
1b:ed:41:fe:c8:7a:0e:d9:bd:5e:94:1e:5e:8a:98:84:f8:95:
ff:dc:65:59:6a:5d:63:0e:28:42:91:a7:7b:36:b8:d0:84:69:
1b:05:12:8f:91:c1:75:65:7d:ea:3a:72:a9:0b:64:5e:55:95:
3d:5e:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:49 2026 by rpki-client