
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/972064eb-1eb1-3e37-998e-dad7fd8c4445.roa
File: 972064eb-1eb1-3e37-998e-dad7fd8c4445.roa (raw, json)
Hash identifier: Yx1ZRECwj82kwajSwO400l1G3oPrVQeNIMcMLzZqKi8=
Subject key identifier: BB:DF:CB:02:E7:6C:28:37:12:F7:87:B6:A8:0E:67:72:A9:D3:55:F3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E1B7996B3E06B07A206858240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/972064eb-1eb1-3e37-998e-dad7fd8c4445.roa
Signing time: Mon 08 Jun 2026 21:00:12 +0000
ROA not before: Mon 08 Jun 2026 21:00:12 +0000
ROA not after: Sun 06 Sep 2026 21:00:12 +0000
asID: 7029
IP address blocks: 2001:19b0:60::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1b:79:96:b3:e0:6b:07:a2:06:85:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 8 21:00:12 2026 GMT
Not After : Sep 6 21:00:12 2026 GMT
Subject: CN=3c44d7c5-75e4-4cdb-9d13-867f883685e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:48:47:b2:57:47:98:0c:5d:ee:fc:96:b4:
e3:b1:a1:f9:5f:15:4b:c8:d8:ed:fc:7b:18:1a:c0:
9d:ab:c0:70:1f:b4:14:57:a5:01:22:6e:c6:b4:63:
14:49:3c:0c:ad:ed:0d:71:dc:af:8a:8e:71:ce:94:
a9:6c:de:0d:04:8b:94:04:85:99:cb:74:96:d7:56:
3b:31:3e:7b:4b:73:e4:a9:e7:2d:a2:95:4e:11:6c:
f7:90:91:16:cd:bb:9d:5a:f8:00:5a:01:88:da:b0:
be:0b:ec:8a:72:d0:83:03:3e:7f:8f:fe:e4:ec:c2:
73:7c:c4:a6:76:bf:b4:7d:60:f8:5e:72:4d:ae:55:
93:85:db:30:49:85:94:a9:ca:7a:76:0c:86:45:09:
3d:0d:60:6f:f6:5c:8f:98:0f:1e:bb:50:3d:08:d2:
83:98:93:9d:0b:83:ba:52:6c:f9:fd:7b:10:2d:32:
9c:1b:b6:f7:71:4f:24:0d:c8:e1:06:95:fa:c9:2e:
d2:b7:fc:26:81:d7:18:8c:0b:af:eb:10:df:45:97:
9f:86:87:83:a3:d3:40:83:4f:3f:07:7a:e2:b2:32:
ec:85:ed:b0:4e:0e:1f:d8:1d:13:a5:c1:6f:e6:3a:
38:e5:e3:f9:bc:74:40:63:b1:eb:1a:bb:a3:01:2c:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:CB:02:E7:6C:28:37:12:F7:87:B6:A8:0E:67:72:A9:D3:55:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/972064eb-1eb1-3e37-998e-dad7fd8c4445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:19b0:60::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:17:cf:16:97:30:74:1d:00:a2:ee:48:55:ef:96:82:cc:ef:
f1:2b:0d:7f:e7:23:f8:5f:55:32:c6:39:9d:e6:a8:dd:22:17:
31:fe:5c:6f:3c:f6:e1:17:cd:36:f9:97:00:17:9c:f2:dc:26:
31:e5:cf:b1:b0:e3:ce:e9:d5:d7:76:1a:48:d3:bd:b5:8c:38:
1d:77:2f:86:f9:61:f0:2d:70:3e:cc:a3:8b:b2:da:55:16:7b:
f9:3d:d3:9a:48:41:46:b1:f2:02:97:28:b1:75:6a:a5:77:2b:
d3:22:29:3c:ca:01:e7:1c:45:46:a3:41:38:9c:c8:54:6e:6f:
57:db:27:c9:4d:79:f8:f2:07:6e:8d:72:94:32:5b:66:62:99:
1c:5d:f7:c0:57:52:35:d2:eb:e8:c3:ce:c7:4c:76:83:0b:2f:
0d:19:43:0d:9a:e5:5c:d3:8e:57:e5:bc:3b:a0:8b:da:3e:0c:
79:30:78:e0:56:16:77:65:43:38:b8:07:bd:65:d5:c9:6b:36:
5e:cd:9d:e0:bb:58:68:32:77:2e:a7:02:99:8b:38:fd:0c:99:
ac:fe:fd:e5:68:fe:23:30:c2:e0:0a:2c:61:48:2a:1b:15:51:
45:ae:f7:29:32:35:d0:52:89:ab:0c:de:ee:59:7a:99:a3:8f:
98:de:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:19 2026 by rpki-client