
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa
File: afd73cfa-d554-3b30-bffa-b30f657362a8.roa (raw, json)
Hash identifier: jZvyotVPZiPHWh5FNxUngusqD86SzUvt3Yx5mx/PZhs=
Subject key identifier: BD:BC:B7:8C:E8:FA:F5:A3:68:E2:CF:E5:EB:8C:C6:39:D0:33:A5:0E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E104EF99EEE7FB9E972B624A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 7029
IP address blocks: 173.191.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4e:f9:9e:ee:7f:b9:e9:72:b6:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=6084e370-82fc-4f6f-a54f-baa09eb7c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:ed:56:ca:d5:19:2c:e5:1c:a0:25:64:a6:
b5:c5:64:7b:fb:0d:c9:8c:2e:1d:b7:dc:3d:93:27:
1a:63:c7:da:4d:d8:cb:fa:7d:ed:fc:c2:d8:c6:bf:
e7:1a:af:91:4b:99:13:3c:33:df:cf:83:f0:13:f2:
07:51:66:5e:f5:b8:d8:34:f7:a8:ab:63:54:d5:bb:
60:a8:c6:00:84:8c:4b:90:a5:4e:2a:ba:f8:0f:1f:
74:e7:b9:af:ef:19:b6:b4:15:d0:98:c0:50:c8:ee:
f6:82:d1:97:f7:f9:db:e5:88:0c:81:b3:ec:10:b1:
b9:9c:b6:2d:d6:ca:98:35:a8:d7:0e:bf:d6:00:45:
fe:7b:99:a2:45:a3:d7:19:d1:90:f9:54:24:e9:0d:
46:3d:b8:d6:99:83:28:90:e4:ef:d2:88:bf:24:99:
46:67:03:16:7e:7c:0f:1a:f3:f3:a0:c2:0d:ad:8d:
82:3b:b0:c7:61:e2:6b:bf:c6:bf:77:91:55:47:16:
3a:65:1e:a9:4b:14:db:66:8f:41:a3:92:3e:fe:08:
2d:64:de:69:b3:8e:a6:72:6a:f7:87:0e:0a:6a:eb:
65:62:22:67:a0:1a:0a:e1:de:6e:35:4e:10:fa:90:
82:dc:e5:e8:43:f2:2e:5e:bf:5b:0c:92:8b:62:5d:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:B7:8C:E8:FA:F5:A3:68:E2:CF:E5:EB:8C:C6:39:D0:33:A5:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:12:46:d7:f7:39:67:c9:f6:87:13:0e:6c:8d:2c:79:ba:60:
31:bc:69:5f:f8:70:55:2a:6d:9c:07:01:9c:12:74:86:31:5c:
7e:a8:4f:94:e6:d1:69:62:02:4f:06:19:d1:8b:68:b6:c2:ae:
18:71:d3:9e:e8:40:55:7a:a5:87:97:fc:fd:bb:3c:e5:5c:2e:
03:c2:ea:ac:f2:f5:56:9d:0e:09:b7:b4:5a:ba:7b:ac:c5:b6:
5c:f9:42:b7:59:2f:ad:52:1a:9a:a0:cf:fd:4d:c9:b5:8e:e5:
84:0e:f8:dd:fe:67:ac:f0:28:a4:71:b1:84:24:82:31:23:fe:
54:4a:42:ef:12:75:ac:1d:be:4f:71:3e:b2:fe:0f:46:eb:3c:
d8:9d:a6:3f:ab:39:57:cb:bd:6c:5a:13:98:a4:60:02:a9:cf:
1b:f7:10:7b:40:dc:41:c9:7f:73:eb:75:1c:cd:cf:72:a4:44:
7e:65:8a:2d:f6:d9:e6:4c:8c:9a:0a:28:a3:e5:f0:1e:ad:f3:
b1:80:a8:2c:37:c6:98:3c:5d:87:b5:ae:84:62:5b:9d:36:fb:
a7:27:2f:18:37:74:f5:fd:a2:09:47:2f:fb:55:35:5c:fd:bc:
c5:8d:68:5a:1a:24:5e:b9:6a:7d:d4:c2:dd:cf:1d:0d:d5:a1:
86:0b:36:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvme7n+56XK2JKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NjA4NGUzNzAtODJmYy00ZjZmLWE1NGYtYmFhMDllYjdjOGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcvtVsrVGSzlHKAlZKa1xWR7+w3JjC4dt9w9
kycaY8faTdjL+n3t/MLYxr/nGq+RS5kTPDPfz4PwE/IHUWZe9bjYNPeoq2NU1btg
qMYAhIxLkKVOKrr4Dx9057mv7xm2tBXQmMBQyO72gtGX9/nb5YgMgbPsELG5nLYt
1sqYNajXDr/WAEX+e5miRaPXGdGQ+VQk6Q1GPbjWmYMokOTv0oi/JJlGZwMWfnwP
GvPzoMINrY2CO7DHYeJrv8a/d5FVRxY6ZR6pSxTbZo9Bo5I+/ggtZN5ps46mcmr3
hw4KautlYiJnoBoK4d5uNU4Q+pCC3OXoQ/IuXr9bDJKLYl0OWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL28t4zo+vWjaOLP5euMxjnQM6UOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZkNzNjZmEtZDU1NC0z
YjMwLWJmZmEtYjMwZjY1NzM2MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgSRtf3OWfJ9ocTDmyNLHm6YDG8aV/4cFUqbZwHAZwSdIYxXH6oT5Tm
0WliAk8GGdGLaLbCrhhx057oQFV6pYeX/P27POVcLgPC6qzy9VadDgm3tFq6e6zF
tlz5QrdZL61SGpqgz/1NybWO5YQO+N3+Z6zwKKRxsYQkgjEj/lRKQu8Sdawdvk9x
PrL+D0brPNidpj+rOVfLvWxaE5ikYAKpzxv3EHtA3EHJf3PrdRzNz3KkRH5lii32
2eZMjJoKKKPl8B6t87GAqCw3xpg8XYe1roRiW502+6cnLxg3dPX9oglHL/tVNVz9
vMWNaFoaJF65an3Uwt3PHQ3VoYYLNjw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:02:46 2026 by rpki-client