
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa
File: a72af3db-4149-3870-b873-369d08de432c.roa (raw, json)
Hash identifier: dTEZvjPw0mGxacryAM0el0C1cfxoPIYF4TipNsR0To0=
Subject key identifier: 31:30:76:1C:81:B1:8C:11:DB:16:93:4E:7A:78:3B:3F:85:82:8F:7F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D7F9A97FCEEBB362271E22B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 7029
IP address blocks: 98.19.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:97:fc:ee:bb:36:22:71:e2:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=17540374-5964-413d-a2e4-67b2ed1059c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:f9:d0:2e:4f:f1:26:38:1f:3d:2a:28:a9:
54:8d:96:cd:66:b7:eb:7f:e2:8f:98:a5:e2:6e:a2:
9a:98:3a:23:31:d6:77:46:c5:01:b4:4f:f0:ca:58:
c6:68:41:94:50:65:07:aa:eb:fa:8b:53:13:92:19:
55:75:33:94:02:26:1b:cb:a4:5b:e9:9e:76:55:5b:
66:12:f1:c4:07:af:e3:48:7c:3d:18:7e:25:07:c2:
bd:4a:53:ae:dc:df:68:26:b3:e5:63:f5:1a:d9:7e:
bf:fe:9c:c2:f1:63:ed:56:7a:94:9f:72:de:f1:81:
5b:bd:b6:6f:a9:cf:6d:54:b9:05:45:19:91:af:91:
0e:90:e7:c3:5b:ee:e1:8c:03:f9:5a:b1:96:ae:31:
77:41:b1:3c:e4:b8:b6:13:79:8d:54:7f:92:5a:74:
32:e5:1f:ab:2c:8e:65:0d:bc:05:d0:cb:7b:c9:34:
6f:22:be:93:b3:bd:12:32:3f:af:f7:e6:26:ec:53:
78:66:d2:a3:6a:ed:37:2b:03:7b:07:c7:48:1a:af:
fe:7d:8f:3d:cb:52:d3:fc:2c:d4:30:2c:9f:4e:56:
92:bc:37:ac:87:4a:b3:7b:0e:c7:9b:3f:49:a6:14:
42:35:0e:74:a4:9e:35:41:5c:26:14:30:85:61:0e:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:76:1C:81:B1:8C:11:DB:16:93:4E:7A:78:3B:3F:85:82:8F:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:81:64:8b:71:19:4d:ce:df:9e:e4:af:d1:c5:a0:f0:38:58:
6f:f9:40:c7:6e:2f:07:ad:d9:db:1e:6f:ae:da:d1:0b:ba:35:
d4:1d:3f:2d:62:d4:c8:92:e0:4f:b6:8c:38:87:b7:47:0c:cc:
47:10:5c:c6:1b:15:1c:39:0f:58:d1:36:c6:01:86:f9:72:81:
d5:3c:26:d1:4f:23:0e:2a:1e:d4:68:61:98:60:b3:46:04:7e:
36:c3:cf:94:09:81:cf:b9:ec:10:17:3e:6d:4d:a3:34:f5:87:
fe:2a:d7:47:b5:43:4f:90:67:c5:3a:dd:1a:65:b6:fa:ca:c8:
de:86:5d:78:60:a4:85:a1:c4:d6:2b:99:b5:d9:3e:ae:5b:6f:
0f:f0:93:1f:66:97:bf:ac:5c:06:2e:19:ac:ea:41:58:2c:e4:
35:14:91:b7:94:a7:54:29:93:79:2f:2c:37:89:e7:a2:b8:00:
ca:46:3b:49:ea:67:04:7b:29:8e:c5:db:78:79:a5:42:b8:86:
8f:40:e5:8d:29:9b:bf:b2:15:ec:cc:45:77:be:57:7c:2f:52:
b9:7e:1c:b1:e6:18:27:5c:08:7e:81:df:17:82:13:27:23:13:
a7:5f:ed:d3:6b:f6:0d:2e:dc:d7:b3:3b:c4:40:3a:50:f8:96:
1e:1e:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:35 2026 by rpki-client