
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc8372ad-05e5-3cfb-b278-7521d217c72e.roa
File: dc8372ad-05e5-3cfb-b278-7521d217c72e.roa (raw, json)
Hash identifier: 39uoNzgjcVlBNVbmSD/xO9reTxSxtnCJEhw3I66VBmY=
Subject key identifier: 64:4B:3D:CC:39:B0:28:16:98:D3:D6:C7:E8:81:50:7F:12:52:89:15
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E104F179980960A2FF1F4FD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc8372ad-05e5-3cfb-b278-7521d217c72e.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 7029
IP address blocks: 98.20.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4f:17:99:80:96:0a:2f:f1:f4:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=b90f7d35-b025-4073-93b7-38b5fff16231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:e6:d0:aa:c8:ae:e1:27:34:e5:31:87:cf:
06:1c:0d:25:d5:46:92:e9:60:d8:13:b3:24:71:37:
90:44:62:5b:bf:48:cb:04:d6:6f:68:91:3e:d6:57:
bd:e1:3a:5c:18:a7:39:29:b4:ac:4f:6c:9f:92:0a:
e3:47:fe:e8:c3:75:84:ae:0a:8f:7f:86:9f:e2:18:
07:87:d4:49:f2:c2:a6:eb:a1:d6:16:88:5d:c0:0e:
06:87:3d:54:e0:a7:e2:d3:b4:a6:cc:3f:ba:28:ce:
a2:56:55:be:78:af:a9:c5:fc:f7:03:8b:ee:fc:c4:
94:50:d4:a2:44:c3:05:8a:ac:bc:be:d8:c2:47:0d:
6c:64:93:94:e6:27:5f:0a:d8:30:21:bc:84:43:84:
eb:f8:74:56:72:eb:81:de:ba:3f:94:f1:89:b2:fb:
87:d7:cb:75:ab:97:38:82:67:d2:ac:c8:f0:a1:04:
ba:3b:4e:f5:6d:8e:3d:98:8e:db:83:b7:ab:48:50:
18:f2:af:f1:14:f5:f8:df:5e:d8:2b:7e:38:67:b6:
4d:56:d3:c1:b2:f8:1b:50:8a:97:3b:db:e4:7a:3c:
73:50:c8:be:14:27:9b:b9:97:a2:d1:a1:e9:b2:2c:
d1:81:16:d8:3c:b2:ad:30:64:23:ab:be:94:96:47:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:3D:CC:39:B0:28:16:98:D3:D6:C7:E8:81:50:7F:12:52:89:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc8372ad-05e5-3cfb-b278-7521d217c72e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:6e:4e:ed:db:cf:1b:4e:c2:c3:c8:be:2e:3b:5c:3f:f3:eb:
8d:7a:77:34:e0:b0:88:16:54:19:75:95:0b:26:9b:2a:37:b4:
7f:18:d1:a5:e8:a1:a1:88:df:07:0a:6a:55:49:ad:b0:ea:8b:
c5:96:79:c9:fa:d8:ab:64:93:c8:15:95:84:0c:c1:56:c9:f7:
42:bc:dc:8e:6e:d6:3e:d6:73:26:e0:8f:f8:75:6a:0b:97:ca:
e3:16:c6:7c:37:dd:ae:a9:24:cf:66:71:df:df:f2:45:69:eb:
ae:ed:36:35:a5:f5:2d:11:ae:75:eb:0a:af:2c:51:00:dd:46:
94:53:bc:ed:b3:55:d8:14:e1:9b:7a:b6:bf:2d:f5:a3:9c:11:
73:30:0d:17:eb:0d:07:2a:93:9d:54:ab:58:dc:9c:0a:fb:b9:
a0:c6:55:8f:e1:09:bc:0a:72:d3:2f:a3:be:18:42:c9:d3:ee:
0d:c2:53:41:12:c4:85:f7:05:8a:40:44:c2:cd:ba:ba:e9:4b:
1b:38:6d:e0:31:4e:16:0b:8a:12:c7:92:f6:35:1b:53:1b:e6:
2b:b5:d6:c4:88:4c:b6:00:02:aa:06:77:ad:90:c0:9f:4a:c6:
79:b4:54:77:92:4c:c6:7a:29:7d:66:a3:36:87:01:29:9b:8a:
48:72:03:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxeZgJYKL/H0/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
YjkwZjdkMzUtYjAyNS00MDczLTkzYjctMzhiNWZmZjE2MjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSrm0KrIruEnNOUxh88GHA0l1UaS6WDYE7Mk
cTeQRGJbv0jLBNZvaJE+1le94TpcGKc5KbSsT2yfkgrjR/7ow3WErgqPf4af4hgH
h9RJ8sKm66HWFohdwA4Ghz1U4Kfi07SmzD+6KM6iVlW+eK+pxfz3A4vu/MSUUNSi
RMMFiqy8vtjCRw1sZJOU5idfCtgwIbyEQ4Tr+HRWcuuB3ro/lPGJsvuH18t1q5c4
gmfSrMjwoQS6O071bY49mI7bg7erSFAY8q/xFPX4317YK344Z7ZNVtPBsvgbUIqX
O9vkejxzUMi+FCebuZei0aHpsizRgRbYPLKtMGQjq76Ulkf5UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGRLPcw5sCgWmNPWx+iBUH8SUokVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGM4MzcyYWQtMDVlNS0z
Y2ZiLWIyNzgtNzUyMWQyMTdjNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhRYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtuTu3bzxtOwsPIvi47XD/z6416dzTgsIgWVBl1lQsmmyo3tH8Y0aXo
oaGI3wcKalVJrbDqi8WWecn62Ktkk8gVlYQMwVbJ90K83I5u1j7Wcybgj/h1aguX
yuMWxnw33a6pJM9mcd/f8kVp667tNjWl9S0RrnXrCq8sUQDdRpRTvO2zVdgU4Zt6
tr8t9aOcEXMwDRfrDQcqk51Uq1jcnAr7uaDGVY/hCbwKctMvo74YQsnT7g3CU0ES
xIX3BYpARMLNurrpSxs4beAxThYLihLHkvY1G1Mb5iu11sSITLYAAqoGd62QwJ9K
xnm0VHeSTMZ6KX1mozaHASmbikhyA10=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:56 2026 by rpki-client