
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa
File: 96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa (raw, json)
Hash identifier: fF5IGZRq0pb1yMUbMggtPZZ6LCGZZdPIIHqjM6XlLC4=
Subject key identifier: 57:36:08:CC:BD:41:D7:F9:A7:F8:B8:96:E5:09:5D:42:7D:6A:EA:C4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584BBE4052EFC823D15860944880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 7029
IP address blocks: 71.30.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:52:ef:c8:23:d1:58:60:94:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=48640928-7b82-41f9-beec-9d843188b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:34:3b:20:c1:43:78:67:c7:48:30:ca:49:
b0:47:e4:f5:42:88:2b:a4:64:8f:05:5c:1e:ff:82:
0f:33:84:03:73:29:aa:76:de:b0:3f:38:5f:ee:f8:
18:a7:e5:24:fa:b4:01:53:92:9c:1e:3e:ba:b2:b0:
d3:28:26:38:63:3e:20:05:54:d3:0d:0b:58:eb:4f:
d8:ec:49:6d:80:eb:9b:77:3d:dc:f1:ce:7c:e0:f9:
63:e2:2c:2f:d3:8f:b6:68:4d:21:23:77:1c:99:37:
96:f3:f9:7c:20:fc:fe:43:09:77:e4:48:2d:8c:75:
95:ab:d7:df:d2:0b:0f:4e:36:08:d2:68:bc:5e:40:
f8:79:c9:6c:32:1e:92:98:95:d2:3d:37:ce:78:41:
fa:5e:64:c5:af:b5:a0:48:f9:88:a3:dc:65:bf:c0:
ae:c6:4d:62:7b:e1:e3:0f:f0:00:c9:9c:ba:3a:bc:
a8:32:3f:5a:f6:a2:1b:17:f8:4f:f7:bc:c3:35:41:
76:41:63:8f:ce:c6:eb:38:bd:e5:f3:77:1a:5a:b6:
c4:6a:e0:fb:d6:31:aa:1c:ef:b4:0a:ac:ab:78:89:
e3:16:5b:fe:8c:64:10:00:3a:7f:0c:02:4d:92:eb:
b1:9f:2f:a9:11:c3:18:ac:b9:8e:3a:ac:c7:53:d6:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:08:CC:BD:41:D7:F9:A7:F8:B8:96:E5:09:5D:42:7D:6A:EA:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:6a:70:b5:31:19:0f:50:c3:03:6a:e3:2e:26:9b:e3:2f:4a:
be:6e:b1:7c:e1:75:d0:22:61:32:bf:85:f0:d2:a7:13:55:3c:
0b:2c:10:40:f9:78:5c:96:df:7f:ce:a2:2b:c4:0f:83:42:d8:
44:c6:57:4d:d4:8c:dc:ce:f8:53:60:b9:32:59:ec:cd:ab:ef:
69:ac:d1:e0:d6:12:93:b3:12:a4:a8:96:3c:7e:4a:e2:f3:2c:
df:c8:4d:71:99:63:87:62:fd:5c:32:11:17:e2:63:a6:b8:b8:
16:a6:4c:96:4c:30:0a:8d:4e:64:28:ce:66:99:b9:52:19:74:
0e:74:a8:0a:d9:0e:76:1e:e6:ac:e9:19:41:91:84:79:09:d7:
58:10:9b:b9:fc:4b:f4:42:db:b0:53:3c:4c:b7:ca:8a:db:a0:
d7:79:6d:0a:09:c3:7e:ef:2a:6b:5b:ba:1d:09:e9:f5:66:24:
24:14:c6:f1:e3:65:f9:aa:29:66:a4:50:35:80:d0:9f:cd:45:
a8:bb:86:19:3b:d2:32:f3:fe:63:53:62:79:69:42:64:c4:19:
6d:a5:d8:e9:29:95:0d:85:0c:08:3f:79:b3:ec:72:17:2c:af:
71:a6:3e:76:4e:5b:90:ae:a9:b8:77:38:77:20:a8:c0:74:23:
63:2d:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:56:56 2025 by rpki-client