
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942442b3-c04c-308c-b253-fa2e7d4a7986.roa
File: 942442b3-c04c-308c-b253-fa2e7d4a7986.roa (raw, json)
Hash identifier: mw6yAxQRSwKVu48xujgpi+Q5eT8+aXnqBmbLODQbQik=
Subject key identifier: D1:72:F9:4E:C3:E8:4B:A9:B1:EB:C3:E4:68:E8:C3:D3:E4:40:B5:DB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F0242334FE3B264D508B7C700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942442b3-c04c-308c-b253-fa2e7d4a7986.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 7029
IP address blocks: 173.191.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:33:4f:e3:b2:64:d5:08:b7:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=810e317a-93e1-4c01-b90f-e4ac988fe3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:17:c4:de:33:6d:99:9d:3b:a8:30:a4:e8:
54:9c:7b:cb:e4:ab:cd:35:fb:b6:b9:ed:54:1c:df:
97:7a:0d:73:90:49:df:4e:54:ec:d6:d0:7a:a4:dd:
79:d5:3b:e2:70:d9:42:0b:48:93:d8:a3:f7:f4:16:
30:66:d4:e4:ad:87:e1:75:ae:e5:6f:5e:a8:e9:66:
d3:ab:23:28:d3:40:dc:ac:7b:58:97:74:55:4a:65:
2e:5c:63:77:cb:ae:81:60:cc:0c:18:09:e6:96:84:
be:3d:ca:38:f6:7c:d2:b1:14:ba:96:28:77:78:b4:
9b:04:83:af:08:f7:fa:9d:ff:43:3c:e9:53:4d:97:
4c:4c:0d:9d:7f:5e:85:d1:ad:28:a7:c9:90:2a:90:
69:41:d8:97:51:16:aa:75:ae:1b:65:87:d2:3f:19:
33:e1:62:df:90:f6:76:36:e6:47:57:8d:7b:f5:0b:
70:17:fe:24:09:da:1b:34:91:fa:52:df:42:8b:68:
6f:a7:7d:e9:4a:e4:bb:cb:0f:7a:1e:6e:d0:e8:5a:
18:48:db:d6:02:cd:ef:82:66:42:92:be:ff:62:4b:
ac:f1:c5:87:a5:e3:66:de:69:7d:ca:84:aa:5c:3b:
ab:37:d7:25:af:99:e2:a9:4f:e3:63:76:20:5a:55:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:F9:4E:C3:E8:4B:A9:B1:EB:C3:E4:68:E8:C3:D3:E4:40:B5:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942442b3-c04c-308c-b253-fa2e7d4a7986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:18:8f:9c:cf:1a:b4:51:f1:55:50:c1:d0:5a:35:d1:ef:5e:
aa:40:e3:7d:6e:45:9e:3f:37:f4:90:b0:80:57:74:16:58:e9:
4e:1c:c0:7f:59:17:bb:ac:da:81:8c:1e:4c:9a:0c:c4:cd:a6:
59:89:a3:72:2c:5a:92:ae:7c:01:38:b3:bc:46:b5:d5:f3:6a:
21:f8:69:70:03:49:47:dd:6a:24:8d:73:25:30:7d:c7:43:df:
2f:bb:bd:14:d9:7f:f1:10:2e:3c:18:8b:c0:2a:f6:42:51:4c:
bc:b7:65:2e:1b:1f:2a:a6:06:0c:fd:4e:f2:7b:4f:59:e4:96:
ef:82:63:a3:5b:c4:2e:f9:ef:ca:39:17:27:78:42:5b:2e:6d:
f5:43:a2:ab:17:c2:ae:43:fd:26:88:43:2c:2f:d7:de:7a:35:
7d:f8:c9:df:ea:7e:fe:8b:99:d6:04:c9:eb:ef:45:89:6a:a8:
d6:57:88:43:e6:b4:5c:58:96:86:aa:d0:fb:55:b0:29:b0:5b:
dc:40:4a:4a:a8:03:3e:f7:da:98:8f:74:61:e7:eb:f2:c5:d4:
64:d6:48:f2:0c:96:ec:08:c8:37:8c:bd:24:8d:90:db:55:be:
40:81:83:bc:1a:32:8f:61:fb:48:10:41:34:f3:bd:74:4a:c2:
56:18:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:27:27 2026 by rpki-client