
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbfdf3f3-ee17-310f-8e20-7076e38b9992.roa
File: dbfdf3f3-ee17-310f-8e20-7076e38b9992.roa (raw, json)
Hash identifier: z5XgAqZaTPCiN4Vd69I0pS5vzjEfEgJNnjMZXf++930=
Subject key identifier: DB:D2:EE:76:2E:FB:A8:68:98:44:39:F2:22:76:02:B0:C4:3E:38:34
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F0AA2277FA4FCF0F185DBD3E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbfdf3f3-ee17-310f-8e20-7076e38b9992.roa
Signing time: Wed 02 Sep 2026 13:00:12 +0000
ROA not before: Wed 02 Sep 2026 13:00:12 +0000
ROA not after: Tue 01 Dec 2026 14:00:12 +0000
asID: 7029
IP address blocks: 174.130.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0a:a2:27:7f:a4:fc:f0:f1:85:db:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 2 13:00:12 2026 GMT
Not After : Dec 1 14:00:12 2026 GMT
Subject: CN=e3d334d8-267f-476a-acf1-8657b4a96f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:53:71:b3:3a:5c:2c:f8:70:fe:52:69:94:
90:ce:cf:55:c1:7b:69:98:5b:10:44:e9:83:c3:2c:
d9:49:01:34:7d:83:b2:bb:e4:95:7f:2c:b3:4c:63:
7b:7f:5f:a6:93:db:d7:bf:6d:36:02:be:ec:70:9e:
3c:9f:db:a9:03:60:52:fc:5a:36:f5:6d:7d:84:6a:
a2:83:c4:75:28:fb:bc:fe:2d:ad:69:7f:55:6a:42:
7f:04:38:35:8b:a9:52:ab:c2:da:99:f9:b6:11:10:
03:c3:e8:26:bd:78:6c:be:14:e9:73:16:0f:d3:4f:
08:92:b3:d3:93:9c:a4:09:b4:f6:db:84:2c:9e:58:
31:7f:5a:ba:02:62:1d:79:79:41:66:4f:4a:b9:f2:
e1:6b:f0:87:88:fb:72:07:e1:52:43:6c:9c:83:ff:
20:29:bd:08:35:6c:ee:e2:b5:c1:1e:23:1f:62:46:
bc:02:45:c5:00:9b:29:0b:cc:8a:ff:77:38:49:84:
b3:64:e8:ff:ad:f6:f3:9c:d7:c0:5f:57:94:5c:43:
b3:dc:6a:d2:24:e8:c5:11:78:95:06:6b:b7:3a:28:
b2:8e:ef:0e:77:83:a0:4d:c2:d6:e7:d9:32:44:5a:
58:3b:73:96:01:46:db:4d:5c:3b:e4:64:da:82:3b:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D2:EE:76:2E:FB:A8:68:98:44:39:F2:22:76:02:B0:C4:3E:38:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbfdf3f3-ee17-310f-8e20-7076e38b9992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.130.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:ff:1d:29:b7:44:72:8b:b3:a4:0c:ac:ac:5e:2c:3b:3f:02:
31:97:e4:52:06:0e:8e:fd:fe:ce:21:de:0e:94:9b:3d:73:68:
23:c5:ed:b0:3e:73:fe:aa:48:b0:51:dc:de:0d:37:ce:26:51:
66:d3:7d:4d:a7:39:4d:32:ea:57:cb:e8:39:20:80:98:34:d5:
f8:ae:7c:b9:63:54:c1:f7:de:18:6c:c9:53:19:cb:71:e6:1c:
c6:41:f4:3e:36:44:d6:3c:f7:84:1f:33:d1:6d:17:08:30:b7:
75:42:87:dd:5e:c1:7c:32:c3:50:70:81:e4:56:26:9e:4d:bf:
85:9e:b0:60:37:31:01:38:11:87:a3:bb:1d:4a:f1:f7:38:5f:
a0:46:56:48:27:73:57:ea:6d:ad:0c:49:14:12:bd:e4:0c:47:
a9:bc:bc:47:3d:84:d5:9d:a2:e6:75:e6:c5:18:9a:8c:69:24:
e7:de:55:87:ce:95:0f:70:c6:47:94:3e:d7:22:12:58:10:1d:
ca:7c:0c:cb:ea:5f:04:03:41:30:f1:87:4c:03:ef:de:c5:1e:
dc:65:98:b5:87:df:8c:88:7c:90:c6:4f:b7:04:56:98:d9:76:
7c:9b:72:51:06:15:25:ea:0a:d8:a0:29:e5:05:90:ed:56:b0:
e6:30:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:52:23 2026 by rpki-client