
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce883137-5336-35f3-8616-8826aaec5788.roa
File: ce883137-5336-35f3-8616-8826aaec5788.roa (raw, json)
Hash identifier: dmvtUbK0vn4Wj5hnTY3n+4vt4pdQL7zZ6X0ahHMnp8s=
Subject key identifier: F4:82:E5:21:DA:69:1A:2E:3F:C0:5B:00:76:EC:2C:77:7D:A3:9F:E4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584D7F9A974CBFD10E5B5B223700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce883137-5336-35f3-8616-8826aaec5788.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 7029
IP address blocks: 71.28.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:97:4c:bf:d1:0e:5b:5b:22:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=757b8cfd-ccbb-4ffa-93d4-d2f5eebdc082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:4e:90:1a:c8:62:16:12:e8:23:29:8d:1f:
50:95:4d:b9:09:1b:3d:41:d9:6d:ad:77:aa:1a:3d:
b2:69:be:da:f9:b9:92:f6:81:ae:f2:55:0a:8d:6b:
2f:bb:a6:af:8f:22:89:da:d9:23:c2:94:b4:f0:f8:
43:7d:3c:55:35:31:c0:58:14:85:b8:14:3d:81:78:
48:c9:c8:33:4c:1d:38:99:9f:94:f2:d7:3b:36:f4:
d9:b5:71:e3:ad:19:40:ac:94:35:48:e0:48:69:2d:
f9:be:60:fd:c6:e4:96:ff:f8:d6:fb:ac:3b:46:ec:
7a:51:0a:36:41:74:19:a0:66:b8:13:15:8b:b4:c7:
55:40:ab:70:d8:7e:9e:64:c3:13:59:d6:db:80:52:
58:a1:e3:1b:8b:b5:9f:18:96:b2:b7:74:ba:d8:3d:
32:e6:ab:85:4a:56:86:ec:92:46:14:75:be:f3:b3:
8c:b5:b3:73:10:be:a8:3d:b9:f0:06:cd:43:cc:53:
c0:e0:7c:ea:0e:65:69:78:bd:7d:cb:e7:78:9e:52:
b5:74:6f:ce:5e:64:dc:19:d7:df:e7:37:76:57:d7:
58:e7:58:f0:81:6c:ba:9c:51:c8:dd:0a:b6:27:8e:
b4:8b:c9:ca:e4:4a:dc:a8:b0:ab:15:e6:ac:29:eb:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:E5:21:DA:69:1A:2E:3F:C0:5B:00:76:EC:2C:77:7D:A3:9F:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce883137-5336-35f3-8616-8826aaec5788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:50:c8:45:16:eb:45:90:12:67:ad:32:f9:03:d4:8a:64:e9:
fc:eb:04:f4:60:d8:c6:91:3b:94:d2:5a:2d:a1:ac:df:1b:db:
20:bc:0d:50:f3:04:a5:03:55:a1:44:98:b3:40:a3:a6:e7:66:
82:f4:88:d9:ff:06:9f:79:bf:fb:14:48:b9:ad:3b:ae:1d:c2:
b8:65:93:93:b4:9a:7f:78:f3:12:eb:c4:d1:a0:51:84:fd:77:
69:d2:8a:ab:d9:e6:1c:d1:b7:5f:a3:02:1b:4e:72:ad:15:7c:
8b:c6:3e:b4:80:7c:d3:cb:28:1b:f9:2b:96:06:fa:f7:eb:18:
89:5a:75:61:0b:7b:45:a0:dd:ee:f9:f1:b8:42:a9:44:73:d4:
e2:2a:21:95:68:95:1f:9a:86:26:4c:a0:94:73:24:7f:24:c7:
87:a4:1b:51:7a:71:b5:54:b4:9c:8d:57:1e:08:92:85:dc:16:
ea:5d:0b:cc:93:67:53:ec:92:54:1e:4d:4b:52:ba:77:ec:af:
57:b4:f2:a2:f3:4b:0d:9d:38:2b:08:a5:d8:33:21:e0:5b:e6:
3f:55:13:ea:13:a8:d6:95:5d:bb:40:d5:d4:12:cc:f4:af:74:
9b:c5:13:17:10:93:f4:78:11:02:d5:ac:af:88:dd:98:9c:2c:
b2:91:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:41 2026 by rpki-client