
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa
File: d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa (raw, json)
Hash identifier: x5Epg3HMGfwyzYswtLCz8FnVQQ625sry+fZTKvT9HoU=
Subject key identifier: 18:A5:87:A1:3F:75:6F:BF:9D:0D:D4:4A:3B:6B:A0:76:8A:F9:34:45
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E104EF5D97AB32592DBD47100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 7029
IP address blocks: 66.64.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4e:f5:d9:7a:b3:25:92:db:d4:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=d78231d2-fe33-44aa-966d-06043b5957b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:46:f5:4d:a7:cf:1b:62:b6:70:de:ea:b4:
77:f9:b7:59:95:cb:04:21:24:bc:70:c9:04:57:cb:
8e:aa:53:6a:51:bb:1a:35:ae:76:13:ca:5f:a8:0d:
7f:8c:8f:2d:2a:ee:ba:a2:c8:b8:3b:27:44:b2:fe:
28:f6:ee:88:6c:3f:db:1e:24:5a:5f:9d:0e:50:69:
68:27:fd:47:63:0b:59:84:55:25:54:5d:45:05:29:
af:f5:b9:bb:76:bb:7a:e6:e6:d6:18:94:20:57:67:
bf:85:b8:de:03:1e:e2:c3:34:53:24:30:a6:b3:22:
be:e9:e5:32:a9:c8:89:34:91:1e:84:d0:ad:24:f9:
c5:63:97:96:f3:6a:1f:41:82:40:40:89:41:92:a5:
61:1f:e7:03:38:17:f9:e4:39:3d:2c:f6:da:9b:a7:
ed:7c:cd:da:21:d0:eb:ec:72:db:d4:fd:42:ce:77:
58:22:cc:37:ec:6e:fb:1d:69:51:ff:35:d7:95:2a:
3a:27:89:c6:ee:a7:82:02:2c:da:50:b0:81:65:dc:
58:85:df:ff:58:73:64:95:33:50:80:db:27:64:77:
80:5c:51:87:01:05:40:e9:08:31:a1:7e:1a:15:36:
79:73:bc:51:c0:6a:d9:89:87:e3:7e:cd:d2:a4:a3:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:87:A1:3F:75:6F:BF:9D:0D:D4:4A:3B:6B:A0:76:8A:F9:34:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.64.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:01:69:15:42:db:f9:dc:b6:8a:cd:f4:db:ef:66:b4:da:13:
d7:f5:11:18:17:94:d4:26:1f:5d:7f:93:e2:9a:2b:e4:da:75:
6a:4a:6d:cf:bf:9c:f6:2a:79:fe:0a:b3:50:a5:54:19:31:c4:
ad:6e:0f:3b:57:dc:0f:42:29:7f:02:20:f6:f4:81:67:3b:1c:
e0:c6:20:62:74:15:ab:26:cf:75:8e:84:1f:77:51:45:da:1f:
55:4e:5e:fb:8b:44:81:12:5b:19:3e:ce:26:f5:d6:5e:95:88:
98:3d:85:03:95:d9:65:da:25:d1:a8:76:ff:37:54:ce:bc:34:
12:91:d4:3b:ef:36:2f:fa:04:f1:9f:e2:52:82:f2:f4:fd:5f:
de:68:a7:11:29:7a:dd:36:6f:02:c7:76:be:ae:5e:8f:3b:f1:
7b:ed:5b:39:74:ba:84:28:84:16:f4:10:ef:28:94:9a:bb:9b:
7c:9e:ef:80:23:be:c5:8e:fb:54:c6:ab:07:79:ac:25:97:7f:
f3:4e:c2:65:79:25:c4:62:c1:31:1c:5d:27:cb:4b:bf:5f:71:
74:9c:3d:05:77:c9:a0:4b:3d:c4:0f:35:f4:7a:44:f0:da:8e:
73:e5:8c:be:a3:26:76:14:6b:70:78:db:5b:2c:1d:d6:30:71:
a0:93:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:02:43 2026 by rpki-client