
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ff943c-a6e0-3cb8-ba3b-02a7db2b65d0.roa
File: a7ff943c-a6e0-3cb8-ba3b-02a7db2b65d0.roa (raw, json)
Hash identifier: iRKPmuwOMCMY4FD98Vk6nNfdn19RvtiHHU5wjC10kcg=
Subject key identifier: 47:8D:E4:22:41:6C:7D:78:87:CB:F8:AF:55:80:FD:27:69:AE:95:CC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F1081FDC451CA3BF7B7657340
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ff943c-a6e0-3cb8-ba3b-02a7db2b65d0.roa
Signing time: Fri 04 Sep 2026 15:30:18 +0000
ROA not before: Fri 04 Sep 2026 15:30:18 +0000
ROA not after: Thu 03 Dec 2026 16:30:18 +0000
asID: 7029
IP address blocks: 98.18.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:81:fd:c4:51:ca:3b:f7:b7:65:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 4 15:30:18 2026 GMT
Not After : Dec 3 16:30:18 2026 GMT
Subject: CN=a6fafa74-1e0f-431e-a80c-0bda087a7c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:d8:ea:94:6c:2f:87:e6:58:52:a5:52:c4:
de:21:1a:d3:37:32:6b:d5:e0:5a:8a:b3:e0:00:3b:
4b:a5:2d:74:92:85:ae:9c:45:f8:49:bc:dd:51:f5:
54:72:58:50:3c:7d:62:15:98:1d:34:bb:2a:13:25:
17:26:e5:15:12:40:da:f6:44:31:c9:36:36:5e:28:
4c:cf:03:61:82:95:c5:9f:bd:46:c2:96:19:40:e8:
5d:63:2c:c1:06:0f:dd:1b:47:7f:44:8b:a7:07:0b:
5c:95:80:3a:dd:db:d9:7c:3a:4e:30:67:66:9c:07:
63:9d:7c:57:ae:b2:62:ab:c0:19:94:b3:e8:35:df:
62:c0:a6:91:aa:43:23:3e:d5:d7:33:db:b1:b9:69:
1e:d6:58:95:5b:91:c4:a5:01:1d:84:9e:72:11:80:
71:98:ed:b5:9a:d4:43:f4:c9:d7:48:e1:7d:d6:6b:
7c:c4:48:0d:65:ec:2b:88:fb:07:bf:dd:96:0d:bb:
a7:16:87:7e:d6:57:1f:1d:03:da:a6:4a:bb:72:11:
03:43:4b:9a:5f:87:9c:84:6b:9d:6b:ef:6f:db:1a:
13:9a:d2:64:71:4d:e4:30:e0:5e:a6:8f:ec:2b:c1:
90:8c:d0:6c:dd:6f:a2:48:02:f8:2f:72:fc:30:94:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:E4:22:41:6C:7D:78:87:CB:F8:AF:55:80:FD:27:69:AE:95:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ff943c-a6e0-3cb8-ba3b-02a7db2b65d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:85:d9:c7:c7:da:a1:0b:10:b3:72:e9:52:43:8f:fe:68:40:
18:c3:e8:08:21:68:33:7c:67:d8:f2:c5:50:d5:c5:e4:a1:51:
a6:0e:7d:ec:d4:f9:95:2d:00:ec:5b:62:a4:42:77:35:c5:b9:
88:ef:16:68:71:15:53:a4:cd:e8:99:63:06:7f:19:4b:75:b1:
c4:36:45:5f:5c:b1:6c:7f:de:5c:a7:fa:30:ca:ea:3d:fd:d3:
ad:88:f9:59:e2:65:0d:31:1d:c1:94:a2:ac:d5:c0:49:d3:7f:
fd:07:d1:d9:e6:63:d3:4a:69:bc:0d:e6:1f:1d:62:ac:6c:3d:
be:be:a7:16:b3:2e:92:f5:0e:a6:22:af:c4:bc:d1:56:af:d5:
4d:7d:34:9e:6d:98:6b:13:5d:0d:09:de:3f:70:e8:df:dc:2c:
71:8c:ed:0e:49:7c:ce:6f:11:6e:f7:6f:38:1d:52:7b:5a:67:
a7:69:07:b4:63:43:80:fa:4a:88:98:66:40:f9:13:59:ce:6b:
df:8b:18:6d:96:a0:b7:29:ea:ed:45:aa:b1:c4:31:6c:7d:3c:
ae:81:8a:f2:74:ba:4e:25:ae:4f:cf:ce:50:61:a9:f6:66:fa:
09:e7:6f:be:63:ac:36:f4:ec:f1:3f:53:d1:a0:cf:6f:fa:fc:
96:7b:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:35 2026 by rpki-client