
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa
File: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (raw, json)
Hash identifier: Ywyp/Z3Oo3dOGs20AWLwcvR+SBpOYPIp6X8MF6mlkaU=
Subject key identifier: 1C:8E:6F:3B:3E:15:DF:F9:85:B7:91:05:DC:A5:CD:E7:52:3F:B8:FD
Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c
Certificate serial: 010D0C9F4328584D2BDA0D8A84AA3974AC490300
Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 19875
IP address blocks: 208.78.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:0d:8a:84:aa:39:74:ac:49:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=cad49d5d-d9d1-4808-93e5-3ca3f7c83760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:ec:ca:b6:f6:1f:a3:47:60:c4:84:c8:83:
02:02:d3:b3:73:df:8e:29:ac:28:91:cd:fd:ed:88:
8d:45:88:81:ca:f9:39:8c:25:62:8e:9c:79:f9:62:
df:4a:7b:ed:29:16:8d:21:c8:29:d0:0b:1c:5d:bf:
90:fb:a8:95:0f:52:9a:89:d3:68:c5:fa:73:69:58:
06:c5:79:dd:3a:39:ab:bb:67:65:b2:b4:f9:3c:ee:
08:56:d8:f8:40:91:90:99:f0:25:ca:84:7c:49:93:
ed:7c:68:01:39:de:53:99:cb:e2:b1:f6:fa:ec:99:
39:10:00:ce:fb:16:af:a8:af:a0:b7:99:e3:96:a4:
68:73:f8:27:ae:9a:ad:dd:91:6a:5d:36:f2:95:25:
cc:59:be:4c:7d:0a:e4:4d:88:69:82:ab:c4:da:9a:
b2:30:95:0f:3d:16:c2:bf:86:25:a5:07:cd:f5:91:
18:fa:b6:d6:a4:20:d4:46:72:c7:60:36:34:bc:12:
9b:d1:e1:2f:06:7e:b4:cc:d3:a0:5d:1c:59:30:03:
18:80:75:96:e8:4d:2c:6f:32:95:e3:7b:85:3f:75:
3b:33:87:af:3a:dd:cd:83:80:e6:ae:1c:4d:04:07:
d1:d6:24:e8:6f:32:b3:05:9a:88:ac:d7:6d:bf:42:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8E:6F:3B:3E:15:DF:F9:85:B7:91:05:DC:A5:CD:E7:52:3F:B8:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl
X509v3 Authority Key Identifier:
keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.78.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:df:70:b9:63:37:79:bd:d8:4a:85:17:be:d0:65:25:d8:3e:
98:f4:a2:59:45:29:d6:b0:77:df:ce:73:a5:e2:eb:90:ac:be:
3f:a0:30:d9:07:52:72:f1:f5:12:b2:67:1e:bb:e6:08:b6:96:
fd:56:50:ec:95:1f:ba:11:7a:08:3e:da:5d:d2:94:62:86:58:
09:f7:04:a4:98:21:24:f3:41:63:fd:af:91:43:76:ea:d7:02:
aa:0a:7a:ce:74:02:40:a0:4e:c3:79:bc:5c:90:8e:f8:f6:e4:
f7:21:96:5a:67:32:fc:12:84:8d:66:29:ef:ce:f7:83:11:d0:
10:18:1d:10:2f:3c:c6:f0:40:aa:5c:66:5f:3d:83:3f:1d:5c:
32:53:9e:ad:61:47:dd:5d:1a:40:db:6e:66:f5:9d:8f:02:fe:
5e:c5:11:06:b2:cf:f3:0b:14:77:3b:37:a9:30:ac:c1:22:b8:
50:04:15:d1:d7:01:63:68:b9:da:4f:47:6b:ff:ee:6c:83:7a:
3e:42:84:ab:b1:b6:3b:0b:10:e6:26:9e:5d:25:48:89:a8:ff:
3d:42:ed:15:06:9c:43:15:92:4b:bc:67:33:03:c5:d4:6e:74:
fe:fe:18:f4:e8:13:be:46:d7:fb:53:88:e1:72:08:f9:1a:ad:
18:dd:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:33 2026 by rpki-client