
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa
File: fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa (raw, json)
Hash identifier: 7uaOPE4Qvv2LvFdghAIgIn8hb5cOWE9Na6wkP5sbivQ=
Subject key identifier: 86:E1:6B:68:DC:CF:30:4A:E8:C9:73:EB:E3:99:95:94:04:68:1E:51
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584E104F00D4CEEEF58F57247B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 27338
IP address blocks: 209.192.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4f:00:d4:ce:ee:f5:8f:57:24:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=f61a7e75-de5d-4ab6-9a29-02940bc4ee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:53:0f:f6:47:d7:7e:15:f5:6c:f7:c7:24:
c5:1d:28:25:64:c6:be:2c:f4:53:43:2b:0b:49:02:
90:6d:c1:56:0a:f1:43:b0:ec:b5:e5:32:b5:04:44:
46:23:68:61:05:7c:cb:7e:cd:a3:4b:7d:a6:41:77:
91:4c:9d:36:2c:2a:32:bf:5f:c6:f8:fa:e0:0a:d7:
df:67:0b:7f:c5:a3:99:f7:90:19:f0:1a:c3:a3:2a:
20:09:f3:06:09:47:5f:d5:f2:44:09:59:b4:84:d1:
76:2b:a6:70:28:5f:4e:02:ca:64:07:26:23:03:8a:
00:67:5d:26:9f:6c:e9:7e:04:00:3b:4c:0b:f5:0b:
76:bd:06:79:81:af:77:99:cc:ff:a3:e3:e0:90:77:
1f:71:ea:f4:c6:80:2f:51:b1:cf:47:5e:54:6a:31:
7c:1c:e8:28:d6:df:90:b3:fa:0a:c2:61:6e:9c:84:
6f:b6:cf:22:68:30:49:2f:01:a3:cb:d3:6d:1f:4a:
2b:f1:a3:84:21:57:d9:eb:18:49:b9:f4:6f:86:63:
53:44:c9:d8:80:cf:a4:62:1e:ce:7f:d5:12:29:b6:
96:33:0e:62:39:26:df:c2:d1:50:42:1f:3d:aa:2d:
ca:0a:47:07:62:a7:27:2f:64:ad:40:5c:01:e3:46:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:6B:68:DC:CF:30:4A:E8:C9:73:EB:E3:99:95:94:04:68:1E:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.192.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:60:89:19:0a:cb:55:e6:e2:78:46:7e:30:18:59:36:19:2a:
48:af:7d:a3:d3:46:f9:b0:ea:a0:60:44:81:56:d9:ff:d3:3e:
6b:58:fd:9c:d8:06:0a:b5:34:cf:e3:2b:10:ac:66:2d:9c:ff:
3e:f6:1b:91:a1:61:2e:05:95:72:6f:d4:c4:cf:56:f3:db:96:
ea:0c:e2:33:24:2c:47:f7:d5:6b:0c:25:97:b4:35:3c:41:85:
40:4a:a4:c9:e1:fc:b2:ff:69:e8:87:de:08:10:7f:d8:9b:3b:
3b:b5:76:d2:33:24:22:27:52:aa:c6:73:df:c8:b6:a5:0b:94:
51:d7:13:bb:2a:d2:dd:fa:65:aa:fa:ce:80:de:92:63:95:4a:
e3:3c:65:cf:63:fd:5d:47:98:02:cc:eb:5d:3f:0a:90:9c:b4:
68:63:b9:85:59:7a:31:81:e4:5c:a9:03:ce:29:0f:a2:55:07:
9b:57:30:0f:1e:ef:54:b5:63:55:77:6b:c1:62:a0:44:98:6f:
ef:31:05:0b:2b:8c:6e:aa:d3:ed:6e:7f:b5:a5:7a:9c:a5:db:
77:09:b1:aa:35:95:e2:ef:81:93:71:9b:09:71:4c:1a:c9:55:
fd:5a:c2:cd:0c:5c:4c:f1:9d:a9:5b:c5:55:5e:59:49:98:95:
ea:22:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:49 2026 by rpki-client