
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa
File: c8d7519d-0e68-32a8-b9a1-6389060b0225.roa (raw, json)
Hash identifier: tApjBGk3zDinNTRqTnSVldfmeXopo2EiO913rEFJFqg=
Subject key identifier: CD:91:56:FA:83:9B:AC:08:D5:50:86:5E:00:C2:B4:28:35:92:77:AE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E1B7997CFF1086E67F8121040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa
Signing time: Mon 08 Jun 2026 21:00:12 +0000
ROA not before: Mon 08 Jun 2026 21:00:12 +0000
ROA not after: Sun 06 Sep 2026 21:00:12 +0000
asID: 7029
IP address blocks: 2001:19b0:34f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1b:79:97:cf:f1:08:6e:67:f8:12:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 8 21:00:12 2026 GMT
Not After : Sep 6 21:00:12 2026 GMT
Subject: CN=9850a0f1-df41-4707-a7ea-29117699015a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:a5:53:2a:6c:13:fb:a0:9a:f1:fb:0f:4b:
c8:40:4b:36:c9:74:f3:c2:1e:4f:1b:4a:87:01:a4:
91:3d:23:f0:5e:1c:6d:49:10:77:63:6c:d5:83:7b:
b2:da:f6:05:58:10:b2:13:08:7c:0a:16:7d:3c:8f:
0a:28:2f:6b:5c:84:e0:aa:22:bd:a4:ac:97:e9:48:
73:04:8c:db:50:a2:27:75:e2:ff:9d:aa:54:9b:19:
bc:c6:39:1a:d3:88:d9:b4:e5:d9:79:d6:1b:a2:26:
02:e4:35:a7:72:62:70:2b:b3:79:0d:27:00:6e:4f:
e0:a3:7d:d3:19:9c:9e:3f:7a:ee:de:19:cd:89:47:
d7:6c:5c:2d:20:3d:fb:f3:38:29:58:28:9f:7a:a3:
59:5f:e7:08:9d:45:15:e7:e2:81:e9:40:f7:d5:e2:
1a:95:81:1c:91:bb:ee:22:4e:7c:08:2c:02:0d:c6:
b8:4a:41:14:b9:c4:b3:e2:6d:1f:bd:90:31:0d:5a:
11:38:a5:c6:cd:44:f6:5c:00:9d:3e:86:d4:5f:df:
6d:fe:47:e5:fb:7b:02:ba:07:85:c6:4c:09:c2:da:
e1:5a:9c:da:fa:3e:97:14:d0:63:47:cd:c4:65:49:
c7:0d:ae:16:6f:4e:da:39:f8:a5:11:d2:6a:47:ba:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:56:FA:83:9B:AC:08:D5:50:86:5E:00:C2:B4:28:35:92:77:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:19b0:34f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:84:4d:52:52:55:b1:4b:d4:c8:66:0d:93:de:a2:0f:09:0c:
64:5a:8b:74:26:98:3b:61:39:8c:10:ea:d0:e5:eb:c0:08:0d:
a6:5e:17:cb:22:c1:02:ce:aa:99:fe:22:64:9d:47:a3:5a:f6:
3f:77:32:7d:13:4a:06:a5:c5:75:24:c8:2d:5b:59:3e:1f:7c:
27:f5:2c:31:29:85:f1:83:68:07:29:5b:26:0a:c3:80:80:69:
fb:71:a5:17:1a:d0:57:73:06:ce:c7:6f:94:3f:3a:f9:f9:23:
93:1b:bd:82:47:29:be:26:e7:6c:48:3d:c4:a6:fa:61:ba:9b:
31:93:3c:f8:10:27:b2:d8:0a:cd:22:bd:26:6b:74:67:c7:94:
1b:9f:62:0d:f5:d2:ec:9d:fe:08:e2:40:bb:4b:bc:fd:80:b3:
f1:6c:8f:f1:86:5a:ea:65:00:4b:3b:b4:39:ee:b7:b3:aa:c9:
b9:5f:26:52:69:0c:1a:41:cc:9e:9c:a3:64:a8:f3:28:0f:97:
ea:33:84:38:d3:26:37:6c:b3:9c:80:c2:ba:72:69:7b:86:2e:
39:66:3a:57:3b:c0:cd:78:5d:3b:0a:3a:d9:14:d2:ad:a5:c4:
a8:83:fd:23:cf:29:74:8c:17:61:29:fe:ba:07:70:18:66:b7:
b7:91:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:56 2026 by rpki-client